Politika privatnosti

1. Data Controller

Carpinity
OIB: [COMPANY OIB]
Address: [COMPANY ADDRESS]
Email: info@carpinity.hr

2. What data we collect

We collect personal data that you voluntarily provide to us when purchasing or registering: first and last name, email address, phone number, shipping address. We also collect data about your orders.

3. Purpose of processing

We use your data exclusively for:

  • Processing and delivery of orders
  • Communication related to orders
  • Sending newsletters (with your consent)
  • Improving user experience

4. Legal basis

Processing is based on: contract performance (sale), legitimate interest (service improvement), consent (newsletter, cookies) - in accordance with the General Data Protection Regulation (GDPR, EU 2016/679).

5. Data sharing

We share your data only with:

  • Delivery service (for package delivery)
  • Shopify Inc. (order processing platform)
  • Stripe / Shopify Payments (for card payment processing)

We do not sell or share your data with third parties for marketing purposes.

6. Cookies

We use technical cookies necessary for the functioning of the site and analytical cookies (with your consent) to track site usage. Shopify uses its own cookies for the functioning of the cart and checkout process.

7. Your rights

In accordance with the GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase data ("right to be forgotten")
  • Restrict processing
  • Data portability
  • Object to processing
  • Lodge a complaint with a supervisory authority (AZOP - Croatian Personal Data Protection Agency)

To exercise your rights, contact us at info@carpinity.hr.

8. Data security

We use SSL encryption to protect data during transmission. Your payment data is not stored on our servers - processing is performed by Shopify Payments/Stripe, which is PCI DSS certified.

9. Retention period

We store order data in accordance with legal obligations (11 years for accounting data, in accordance with the Accounting Act). Other data is stored as long as your account is active or until your request for deletion.

Last updated: April 2026.