PRIVACY POLICY (GDPR)
Razigrani nakit by Monika Vlček Novosel respects the privacy of its users and the protection of their personal data. Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and the applicable regulations of the Republic of Croatia.
Personal Data Controller
Business name: Razigrani razvoj, trade for manufacturing and sales
Owner: Monika Vlček Novosel
Registered office: Svetonedeljska cesta 3, 10431 Kerestinec
OIB (VAT ID): 51129315765
E-mail: razigrani.nakit@gmail.com
What personal data we collect
Depending on how you use the web shop, we may collect:
- first and last name
- delivery address
- e-mail address
- phone number
- data required to process and deliver your order
- data required for issuing invoices
- data related to the chosen payment method
- information voluntarily provided by the user when communicating with the trader
- e-mail address and other data required for newsletter subscription
- technical data that may be collected during website usage, in accordance with the Cookie Policy.
Payment card details are not stored in the Razigrani nakit web shop; instead, the data necessary for processing electronic payments is handled by the relevant payment service provider.
Purposes of personal data processing
Personal data is processed for the purpose of:
- receiving and processing orders
- creating and issuing invoices
- organizing and executing delivery
- communicating with the customer regarding the order
- processing complaints, returns, and customer requests
- fulfilling the trader's legal obligations
- processing payments and protecting against abuse and fraud
- sending newsletters and marketing messages when the user has given their consent
- ensuring the security and proper functioning of the web shop.
Legal bases for processing
Personal data is processed based on an appropriate legal basis, depending on the purpose of processing.
Data required to receive, process, and fulfill orders is processed when necessary for the performance of a contract with the customer.
Data processed for the purpose of fulfilling the trader's legal obligations is processed based on legal requirements, such as issuing and retaining invoices and complying with tax and accounting obligations.
For sending newsletters and marketing messages, processing is based on the user's consent when such consent is required.
Consent may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.
Recipients of personal data
Depending on the specific order and how the web shop is used, personal data may be available to service providers necessary for business operations, including:
- Shopify, as the platform through which the web shop is operated
- delivery services, for example BOX NOW and Hrvatska pošta
- payment service providers, for example PayPal and the card payment provider, when these payment methods are activated
- accounting, fiscalization, and other business service providers when necessary to fulfill legal or contractual obligations.
Data is shared only to the extent necessary to perform a specific service or fulfill a legal obligation.
Payment
Currently, payment is enabled via bank transfer.
Depending on the web shop features activated, customers may also be offered payment via PayPal and payment cards.
For electronic payments, the data required to execute the transaction is processed by the relevant payment service provider. The Razigrani nakit web shop does not store full payment card details.
Retention of personal data
Personal data is retained for as long as necessary to achieve the purpose for which it was collected and for as long as required to fulfill the trader's legal, accounting, tax, and other obligations.
Data related to orders and invoices is retained within the timeframes prescribed by applicable regulations.
Data processed based on consent for the newsletter is retained until consent is withdrawn or the user unsubscribes from the mailing list, unless there is another legal basis for its further processing.
Personal data protection
The trader takes appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse, unauthorized alteration, or destruction.
User rights
Depending on the circumstances of processing, the user has the right to:
- request access to their personal data
- request the correction of inaccurate or incomplete data
- request the deletion of personal data when legal requirements are met
- request restriction of processing
- object to certain types of processing
- request data portability when the conditions are met
- withdraw consent when processing is based on consent.
To exercise their rights, the user can contact:
The user also has the right to file a complaint with the Personal Data Protection Agency (AZOP) if they believe their personal data is being processed in violation of regulations.
Newsletter and marketing messages
If a user voluntarily subscribes to the newsletter, their e-mail address is used to send information about new collections, products, offers, and other information related to Razigrani nakit.
The e-mail addresses of users who have subscribed to the newsletter are stored in the Shopify subscriber system.
The user may withdraw their consent to receive the newsletter at any time via the unsubscribe link in the marketing message or by contacting:
Consent for the newsletter may be withdrawn at any time, and withdrawal does not affect the lawfulness of previously carried out processing.
Cookies
The web shop uses cookies and similar technologies necessary for the proper functioning of the website and, depending on user settings and consent, for analytics, functionality, and other purposes.
Detailed information on the use of cookies is available in the Cookie Policy.
Changes to the Privacy Policy
This Privacy Policy may be modified from time to time to align with changes in regulations, business practices, or web shop functionality.
The current version of the Privacy Policy is always available on this page.
Date of last update: September 26, 2026.