Privacy
policy

This policy explains what happens to your personal data when you visit d2c.hr or send us an enquiry through the form. It is short because we collect very little.

Who we are

The controller of the personal data described below is:

• D2C d.o.o. za trgovinu i usluge
• Registered office: Injatička ulica 5, 10000 Zagreb, Croatia
• Office: Ulica Franje Lučića 32, 10090 Zagreb, Croatia
• VAT / company number (OIB): 09674127493
• Registration number (MBS): 081433832, Commercial Court in Zagreb
• Email: matej.relotic@d2c.hr

For any question about the processing of personal data, write to the email address above.

What we collect

Enquiry form

Your name, the name of your club or company, your email address, your phone number if you enter it, the type of enquiry and the content of your message. You provide this yourself when you submit the form. Only the name, club or company, email and message are required. Without them we cannot reply to you.

Catalogue form

Your name, the name of your club or company, your email address and which catalogues you are interested in.

Server logs

Our hosting provider records the usual technical details of every visit: IP address, date and time, the page requested, browser type and operating system. This happens automatically and is necessary for the operation and security of the site.

We do not profile visitors, we use no analytics or advertising tools, and we make no decisions by automated processing.

Why we use it and on what legal basis

• To answer your enquiry and, if it leads to cooperation, to prepare and manage the business relationship. Legal basis: steps taken at your request prior to entering into a contract, Article 6(1)(b) of the General Data Protection Regulation, and our legitimate interest in responding to business enquiries, Article 6(1)(f).
• To send you the catalogues you requested. Legal basis: as above. We do not add your address to any newsletter list and we do not send you promotional messages you did not ask for.
• To keep the site working and secure and to prevent abuse of the forms. Legal basis: our legitimate interest in a correct and protected website, Article 6(1)(f).

Cookies

This site sets no cookies. We use no cookies for analytics, advertising or tracking, and we store nothing in your browser's local storage either. That is why there is no cookie notice on the site: there is nothing to consent to.

The fonts, images and scripts the site loads are served from our own server rather than from external services, so simply browsing the site does not pass your data to any third party.

Who receives the data

We do not sell your data and we do not share it with anyone for marketing purposes. It is passed only to service providers who process it on our behalf and on our instructions:

• Web3Forms (Web3Creative), the service that receives and forwards messages sent through the forms on this site. Its infrastructure relies on Amazon Web Services, Cloudflare and Hetzner.
• CleanTalk and Akismet, services that protect against spam and automated submissions. Your IP address and email address may be passed to them when you submit a form.
• Our hosting provider, which stores the site and the server logs on our behalf.
• Our business email provider, in whose mailbox we receive and keep your enquiry.

We may also disclose data to the competent authorities where we are required to do so by law.

Transfers outside the European Economic Area

Web3Forms operates from India and its infrastructure providers may process data in several regions. Where personal data is transferred outside the European Economic Area, the transfer is made subject to appropriate safeguards, primarily the European Commission's Standard Contractual Clauses, as set out in the data processing agreement concluded with that provider.

How long we keep it

• Enquiries are kept for as long as the correspondence and the business relationship last, and afterwards only for as long as we are required to keep them or have a legitimate reason to, for example because of potential claims.
• Submitted forms are automatically deleted from the Web3Forms system no later than three years after they were sent.
• Server logs are kept briefly by our hosting provider, under its standard policy.

Security

The site is served over an encrypted connection (HTTPS), and access to the enquiries we receive is limited to the people who need it for their work.

Your rights

Under the General Data Protection Regulation you may ask us for:

• a copy of your data and information about how we process it,
• correction of inaccurate data or completion of incomplete data,
• erasure of your data,
• restriction of processing,
• transfer of your data in a machine-readable format,
• and you may object to processing based on our legitimate interest.

Write to matej.relotic@d2c.hr and we will reply within one month at the latest. Exercising these rights is free of charge.

If you believe we have not handled your data correctly, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Ulica Metela Ožegovića 16, 10000 Zagreb, azop.hr.

Changes

If we change this policy, we will update the date at the top of the page. We recommend checking it from time to time.