Privacy Policy (English version – GDPR Compliant)

Privacy Policy

This Privacy Policy describes how Crofil 3D d.o.o. (hereinafter: “we”, “our company”) collects, uses, and protects personal data of users on the website https://crofil3d.com.

1. Data Controller

• Company name: Crofil 3D d.o.o.
• Address: Matije Gupca 6, 32252 Komletinci, Croatia
• VAT ID: 92455343627
• Email: [email protected]
• Phone: +385 98 543 221
• Managing Director: Ivan Čović

2. What Personal Data We Collect

We collect the following types of personal data:

• Personal information when placing an order (name, address, email, phone)
• IP address and browser information
• Comments and messages from contact forms
• Cookies (see Cookie Policy)

3. Purpose and Legal Basis of Processing

We process your data based on:

• Contractual necessity – to process orders and deliver products
• Legal obligation – for accounting and invoice retention
• Consent – for newsletters and marketing cookies
• Legitimate interest – for analytics and system security

4. Who We Share Your Data With

We may share your data with:

• Delivery services (e.g. DPD, BoxNow)
• Payment service providers
• Accounting and IT service providers

5. Data Retention Period

• Order data is retained for 11 years (in accordance with Croatian accounting law)
• Contact form messages and comments are stored for up to 12 months
• Cookies are retained according to their individual lifespan (see Cookie Policy)

6. Your Rights Under the GDPR

You have the right to:

• Request access to your personal data
• Correct inaccurate or incomplete data
• Request deletion of data (where applicable)
• Restrict data processing
• Transfer your data to another controller
• Object to processing

To exercise these rights, please contact us at: [email protected]

7. Data Security

We implement technical and organizational security measures, including SSL encryption, regular backups, and access control, to protect your data.

8. Transfers Outside the EU

We do not transfer your personal data outside the European Union unless appropriate safeguards are in place in accordance with the GDPR.

9. Automated Decision-Making

We do not perform automated decision-making or profiling that produces legal effects concerning you.

10. Data Protection Contact

If you have any questions or requests regarding your personal data, contact us at: [email protected]

Last updated: April 2025