PRIVACY POLICY / GDPR
Poljoprivredna zadruga MASLINARI ISTRE, Krasica 44a, 52460 Buje-Buie, Croatia, OIB: 31910904212 (the “Controller”), respects user privacy and processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Croatian law.
What data we process and why
When you purchase through the webshop, we process the data necessary to receive and fulfil your order, issue invoices, process payment, arrange delivery and provide customer support. This may include your name, billing and delivery address, e-mail address, telephone number, order and payment information, and any other data you provide during checkout. The legal basis is performance of a contract and taking steps at your request before entering into a contract.
When you contact us through the contact form or by e-mail, we process the information you provide in order to respond. Depending on the nature of the request, the legal basis may be pre-contractual steps, performance of a contract, or our legitimate interest in communicating with users and resolving enquiries.
If you subscribe to the newsletter, your e-mail address will be used to send the newsletter on the basis of your consent. You may withdraw consent at any time through the unsubscribe link or by contacting the Controller.
The website may use necessary, analytics and marketing cookies. Non-essential cookies are activated only where there is an appropriate legal basis and, where required, after the user has given consent. More information is available in the Cookie Policy.
Recipients and processors
Personal data may be disclosed only to recipients and processors required to provide the service, such as the hosting provider, Stripe as the card-payment service provider, GLS as the delivery service, accounting services, IT support providers and other technical services involved in order fulfilment or website operation. Personal data is not sold to third parties.
Retention
Personal data is retained only for as long as necessary for the purpose for which it was collected and for the periods required by tax, accounting and other applicable laws. Enquiry data is retained for as long as necessary to resolve the communication and any related claims. Data processed on the basis of consent is retained until consent is withdrawn or the purpose ceases, unless another lawful basis requires further retention.
Your rights
Subject to the conditions set out in the GDPR, you may request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, data portability and object to processing. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
If you believe your rights have been infringed, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).
Transfers outside the EEA
If any service provider actually used by the website processes data outside the European Economic Area, the transfer will take place only under an appropriate legal mechanism and safeguards required by the GDPR. Specific providers should be named only if they are actually implemented.