Privacy Policy

Web-Shop.com.hr ('we', 'us', 'our') respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your data in accordance with the General Data Protection Regulation (GDPR), Croatian Personal Data Protection Act, and UK Data Protection Act 2018.

We collect the following types of data: • Identity data: first name, last name, email address, phone number • Business data: company name, VAT number, address • Technical data: IP address, browser type, operating system • Usage data: how you use our website • Communication data: your messages and inquiries sent via contact form

We process your personal data based on: • Your consent (Article 6(1)(a) GDPR) • Performance of a contract (Article 6(1)(b) GDPR) • Legal obligations (Article 6(1)(c) GDPR) • Legitimate interests (Article 6(1)(f) GDPR)

We use your data to: • Provide our bespoke web shop and commerce-system development services • Communicate with you about your project • Send offers and information about our services (with your consent) • Improve our services and website • Fulfill legal obligations • Protect against fraud and abuse

We may share your data with: • Our partners (Affluence Digital Media Group, Diligio, MVIT Agency) solely for service provision • Service providers (hosting, email services) acting as data processors • Legal authorities when legally required We never sell your personal data to third parties.

Your data may be stored and processed in the European Economic Area (EEA) and the United Kingdom. All data transfers outside the EEA are conducted with appropriate safeguards in accordance with GDPR (Standard Contractual Clauses, UK GDPR).

Under GDPR and Croatian law, you have the right to: • Access your personal data • Rectify inaccurate data • Erasure of data ('right to be forgotten') • Restrict processing • Data portability • Object to processing • Withdraw consent at any time • Lodge a complaint with the supervisory authority (AZOP - Personal Data Protection Agency)

We retain your personal data only as long as necessary for the purposes collected: • Inquiry data: 2 years • Contractual documentation: 7 years (per Croatian Accounting Act) • Marketing consents: until consent withdrawal

We implement technical and organizational data protection measures including: • SSL/TLS encryption • Secure servers and databases • Regular security audits • Limited data access • Employee data protection training

We use cookies to improve website functionality. You can control cookies through your browser settings. For more information, see our Cookie Policy.

For data protection questions, contact us: Email: [email protected] Phone: +385 99 33 48 015 Data Protection Officer (DPO): [email protected]