Privacy policy

What data we process

Depending on the way the site and webshop are used, we may process name and surname, company name, OIB or tax number for business customers when it is required for the invoice, address for invoice and delivery, e-mail address, telephone number, data on order, products, payment, delivery, return, complaint, communication, user account, wishlist functionality, IP address, cookie identifiers and technical data about the device, browser and use of the site.

Svrhe i pravne osnove obrade

• Processing of orders, payments, delivery, returns and complaints: processing is necessary for the conclusion and execution of the contract, i.e. for taking actions prior to the conclusion of the contract at the customer's request.
• Issuance of invoices, tax and accounting obligations: obrada je potrebna radi ispunjenja zakonskih obveza DBAS-a.
• Komunikacija s kupcima i odgovaranje na upite: processing is carried out for the purpose of taking actions at the request of the person sending the inquiry, execution of the contract or legitimate interest in orderly business communication.
• User account, wishlist and webshop settings: processing is necessary to provide the requested functionality and, where applicable, is based on consent or a legitimate interest in maintaining a functional site.
• Webshop security, abuse prevention and technical maintenance: processing is based on a legitimate interest in the security, availability and protection of the information system.
• Analitika, marketing i newsletter: processing is carried out only when there is an appropriate legal basis, most often consent, or other applicable basis in accordance with regulations.

Payment and Monri

Card payment is processed by Monri WebPay. DBAS does not store the full card number, CVV/CVC code or other sensitive card data. Data required for payment processing and transaction confirmation may be forwarded to Monri Payments, the bank, card systems and the WooCommerce system to the extent necessary for payment, refund or transaction verification.

Details about payment security are available on the site Online payment security.

Primatelji podataka

We may share data with delivery partners, payment providers, accounting and IT providers, hosting, security and anti-spam tools, e-mail services, providers of web analytics or marketing tools when enabled, webshop support providers and public authorities when required or required. Only the extent of data required for a specific purpose is forwarded to each recipient.

Cookies and external services

The webshop uses necessary technical cookies necessary for the operation of the site, shopping cart, security, registration and checkout. Analytical, marketing or similar cookies are used only when they are enabled and when there is an appropriate consent or other applicable legal basis for them.

The site may use external services such as Google Maps, social networks, anti-abuse tools, payment systems, delivery tools and similar services. These services may process technical data, such as IP address and browser data, according to their own privacy policies and only to the extent necessary to display or use the service.

Details on cookie types and consent management are available on the site Cookie Policy.

Prijenos podataka izvan Europskog gospodarskog prostora

DBAS primarily uses service providers available in the European Union or the European Economic Area when possible. If an individual service provider processes data outside the European Economic Area, the transfer is carried out only when there is an appropriate protection mechanism for this, for example a decision on adequacy, standard contractual clauses or other protective measure prescribed by applicable data protection rules.

Shelf life

We keep the data for as long as it is necessary for the purpose for which it was collected, the execution of the contract, the processing of returns and complaints, the protection of legal interests and the fulfillment of legal obligations. Data related to accounts and business documentation are kept within the time limits prescribed by accounting, tax and other valid regulations. Information from inquiries is kept for as long as is necessary for a response and reasonable follow-up communication, unless there is a legal obligation or a justified reason for longer storage. Data processed on the basis of consent are processed until consent is withdrawn, unless there is another legal basis for further processing.

Your rights

You have the right to request access to personal data, correction of incorrect data, deletion, restriction of processing, portability of data and objection to processing when the conditions are met. When the processing is based on consent, you can withdraw the consent at any time, without affecting the lawfulness of the processing carried out before the withdrawal of the consent.

Za ostvarivanje prava javite se na info@dbas.hr. For the sake of data protection, before processing the request, we may request additional identity verification if necessary.

Obveznost davanja podataka

The data required for the order, invoice, payment and delivery are necessary for the conclusion and execution of the purchase. If you do not provide them, we may not be able to process or ship the order. Providing data for marketing, analytics or newsletter is optional and depends on your consent or other applicable legal basis.

Automated decision making

DBAS does not use automated decision-making that would produce legal effects for the customer or similarly significantly affect the customer. Certain systems may automatically perform technical security checks, availability of payment or delivery methods, but such checks are used for the proper operation of the webshop and prevention of abuse.

Prigovor nadzornom tijelu

If you believe that your personal data is not being processed lawfully, you can contact DBAS at info@dbas.hr. You also have the right to submit a complaint to the Personal Data Protection Agency, Selska cesta 136, 10000 Zagreb, via the official website azop.hr.