Privacy Policy

The personal data of our customers is our highest priority.

The controller of personal data is Forzanta d.o.o., Ulica Andrije Kačića Miošića 41, 10410 Velika Gorica, Croatia, which is obliged to protect the personal data of its users in accordance with the Croatian Personal Data Protection Act and the General Data Protection Regulation (GDPR, EU 2016/679).

1. Our commitments

We undertake to protect the personal data of our customers by:

• collecting only the necessary, basic data about customers and users required to fulfil our obligations;
• informing customers how the collected data is used;
• regularly giving customers a choice regarding the use of their data, including the option to have their name removed from lists used for marketing campaigns.

All user data is strictly protected and available only to employees for whom that data is necessary to perform their work. All our employees and business partners are responsible for respecting the principles of privacy protection.

2. What data we collect

Data collection is limited to the minimum necessary for processing orders, communication and fulfilling legal obligations (accounting, tax).

Depending on how you use the Store, this may include:

• Order data: name and surname or company name, delivery address and billing address, e-mail, phone
• Legal entity data: company name, OIB, registration number, registered address
• Order history: ordered products, amounts, payment and delivery method, past orders
• Account data: e-mail and password (the password is stored only in encrypted form and is not readable by us)
• Technical data: data recorded by cookies, described in the Cookie Policy

3. Purpose and legal basis of processing

4. How long we keep data

Order data and invoices are kept for as long as tax and accounting regulations require. Account data is kept while the account exists; after the account is deleted, only data we are legally required to retain remains. Newsletter consent is kept until it is withdrawn.

5. Sharing data with third parties

We do not sell your data and do not pass it to third parties for marketing purposes. We share it only where necessary to fulfil an order or a legal obligation:

• courier services (GLS, DPD) - data required for delivery
• accounting and ERP system - data required to issue invoices
• competent authorities - where required by law

6. Your rights

At any time you have the right to:

• access the personal data we process about you
• rectification of inaccurate or incomplete data
• erasure of data, where there is no longer a basis for processing
• restriction of processing
• object to processing based on legitimate interest
• portability of data in a machine-readable format
• withdraw consent, without affecting the lawfulness of processing before withdrawal

You may send a request to [email protected] or by post to our registered office. We will respond within the deadlines prescribed by the GDPR.

If you believe your rights have not been respected, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).

7. Account security

If you have a registered user account, you are responsible for the security of your access credentials (e-mail and password) and must notify us immediately if you suspect account misuse. Forzanta d.o.o. may block access to the account in case of suspected misuse or unauthorised access.

8. Contact

For all questions about the processing of personal data:

• E-mail: [email protected]
• Phone: +385 97 6808 152
• Address: Forzanta d.o.o., Ulica Andrije Kačića Miošića 41, 10410 Velika Gorica, Croatia