Privacy Policy

1. Introduction

RURALNI PODUZETNIČKI INKUBATOR KRKA KISTANJE d.o.o. (hereinafter "we", "us", "our" or the "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you use our website and services.

This policy complies with the General Data Protection Regulation (GDPR) and the Croatian Act on the Implementation of the General Data Protection Regulation.

2. Data controller

3. Data we collect

3.1 Personal data you give us directly

• Registration data: first name, last name, email address, phone number
• Delivery data: delivery address, postal code, city
• Billing data: billing address (if different from the delivery address)
• Communication: the content of your messages when you contact us

3.2 Data we collect automatically

• Technical data: IP address, browser type, operating system
• Usage data: the pages you visit, time spent on the website
• Device data: device type, screen resolution

3.3 Analytics data (PostHog)

We use the PostHog analytics platform (hosted in the EU) to understand how visitors use our website. PostHog collects:

• Data about the pages visited and actions taken
• Anonymous visitor identifiers
• Technical information about your device and browser
• Data about interactions with page elements

4. Why we process your data

We use your personal data for the following purposes:

5. Sharing your data

We may share your personal data with the following categories of recipients:

• Delivery service providers: to deliver the products you ordered
• Payment service providers: to process payments
• PostHog (EU): for analytics
• Public authorities: where the law requires it

We do not sell, rent or otherwise commercially share your personal data with third parties, except in the cases set out in this Privacy Policy.

6. International data transfers

Your data is processed primarily in the European Union. PostHog, our analytics provider, hosts its data in the EU. Should any data be transferred outside the EU, we will ensure appropriate safeguards in accordance with the GDPR.

7. How long we keep your data

We keep your personal data for the following periods:

• Order data: 7 years (legal obligation)
• User accounts: until the account is deleted or you ask us to delete it
• Analytics data: 2 years
• Marketing communications: until you withdraw your consent

8. Your rights

Under the GDPR, you have the following rights:

To exercise your rights, contact us by email at info@ajmolokalno.hr or by post at our address.

9. Data security

We apply appropriate technical and organisational measures to protect your personal data against:

• Unauthorised access
• Accidental loss
• Destruction or damage
• Unauthorised alteration or disclosure

10. Cookies and tracking

You can find detailed information about our use of cookies in our Cookie Policy.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will let you know about significant changes by email or through a notice on the website.

12. Complaints

If you believe we have not processed your personal data properly, you can lodge a complaint with the Croatian Personal Data Protection Agency (www.azop.hr).

13. Contact