Privacy Policy (GDPR)

PRIVACY POLICY

Connect - sustav informacija j.d.o.o., Cebini 37, Zagreb, Croatia, OIB: 29278365039 (hereinafter referred to as: “Connect”) is committed to protecting your privacy and personal data during its collection and processing. As we care deeply about the privacy of our users, this Privacy Policy explains how we collect and process personal data at Connect in connection with our website www.skatinger.eu.com and related web retail services. The Policy is written in clear and straightforward language.
We have appointed a Data Protection Officer whom you may contact for any questions or complaints about this Policy or our handling of personal data.

Contact information for our Data Protection Officer:
Data Protection Officer
Andrea Rukavina
info@connect.hr

Data Collection
Personal data is any information that identifies or can identify an individual, directly or indirectly (e.g., name, identification number, location data, online identifier, or factors specific to physical, physiological, genetic, mental, economic, cultural or social identity).

Who is responsible for the security of your personal data?
Connect is responsible for the security of the personal data it collects. We act as a data controller and, in certain cases, as a data processor under a contract with you or our partners. To safeguard your data and enable the exercise of your rights, data may be shared with persons and/or legal entities we cooperate with under contractual or legal obligations (e.g., hosting providers, payment service providers, delivery partners, accounting services, legal advisors, and public authorities).

What personal data do we process?

• Identification and contact data: first and last name, address (shipping and billing), country, phone number, and email address.
• Account data (if you create an account): username, hashed password, preferences, order history, saved addresses.
• Order and invoicing data: products ordered, payment method, invoice details, transaction reference (we do not store full card numbers).
• Customer support data: your communications with us (emails, messages, forms) and related case details.
• Marketing preferences: newsletter subscription status, consent records, and your interactions with our marketing emails (opens/clicks).
• Technical/usage data: IP address, device and browser type, log files, pages visited, time stamps, cookies and similar identifiers (see “Cookies and Similar Technologies”).
• Publicly available data necessary to verify addresses or prevent fraud, and data provided by our delivery or payment partners about the status of a shipment or payment.

How do we collect personal data?

• When it is necessary to establish and execute a contractual relationship (e.g., placing an order, creating an account, requesting support).
• When you contact us directly via email at info@connect.hr or through forms on our website.
• Through cookies and similar technologies that capture technical and usage data (see Cookies section).
• From third parties needed to provide our service (e.g., payment processors, delivery carriers) and from public registers where allowed by law.

Are you required to provide personal data?
Providing personal data is generally voluntary. However, certain data is required by law or necessary to perform a contract (e.g., invoicing, delivery). Some services (e.g., newsletter) require specific data, and your consent can be withdrawn at any time.

Any consent can be withdrawn in writing at any time. We will also accept oral withdrawal when justified circumstances prevent written communication.

Please note that in some cases Connect may be unable to provide services without essential personal data, particularly where data is necessary to fulfill a contract, process your requests, or send subscribed materials.

Purposes for processing personal data

• To establish, perform, and manage contracts (order processing, delivery, returns, warranties).
• To manage payments, accounting, auditing, fraud prevention, chargebacks, and customer support.
• To operate, secure, and improve our website, apps, and IT systems (including diagnostics, analytics, and service quality).
• To comply with legal obligations under Croatian, EU, or other applicable laws (tax and accounting rules, consumer protection, product safety).
• For marketing communications (with consent) and to manage your newsletter preferences.
• For statistical reporting related to our business and to improve our product offering and communication.

Where you have explicitly given consent, your personal data may also be processed for:

• Contacting you with information about our products and services, including brochures, offers, and newsletters.
• Conducting market analysis and other promotional activities (e.g., measuring campaign effectiveness).

We will only send you marketing communications for which you have given consent and only while such consent is valid. We do not use your data for automated decision-making that produces legal effects. Limited segmentation may be used to send you relevant newsletters, where permitted by law and based on your consent or our legitimate interest.

Depending on the purpose, the legal bases for processing may include:

• Your consent for one or more specific purposes (Article 6(1)(a) GDPR).
• Processing necessary to perform a contract or take steps at your request prior to entering into a contract (Article 6(1)(b)).
• Compliance with legal obligations (Article 6(1)(c)).
• Protection of vital interests (Article 6(1)(d)), where applicable.
• Our legitimate interests, balanced against your rights and freedoms (Article 6(1)(f)).

Who do we share your personal data with?

We may share personal data on a confidential basis when necessary to fulfill contracts, for administration, invoicing, backups, protecting our rights and interests, or for other legitimate business purposes. Typical recipients include:

• IT and hosting providers, cloud and security services.
• Payment service providers and financial institutions.
• Delivery and logistics partners.
• Accounting, legal, and tax advisors; auditors; debt collection agencies.
• Public authorities, courts, and regulators when legally required.

We may instruct third parties to process your data on our behalf and under our documented instructions (data processors). In such cases, Connect remains responsible for confidentiality and security and ensures compliance with GDPR via appropriate contracts.

Third-party personal data you provide to us
If you provide us with personal data of other individuals (e.g., recipient of a shipment), you must ensure that you are authorized to do so and that they are informed about this Privacy Policy and their rights (access, correction, erasure, portability, objection, complaint).

Data protection
We protect your personal data using appropriate technical and organizational measures (access controls, encryption in transit, backups, least-privilege access, staff training), in line with our internal policies and GDPR principles. Data may be stored on paper or in secure electronic systems, either within our organization or with contracted processors.

International transfers of personal data
If we transfer personal data outside the European Economic Area (EEA), we will ensure adequate safeguards, such as:

• An adequacy decision by the European Commission (e.g., EU–US Data Privacy Framework for certified recipients);
• Standard Contractual Clauses (SCCs) with supplementary measures where necessary;
• Other safeguards permitted by GDPR.

In all cases, we will take measures to ensure your data remains protected in accordance with applicable laws.

Cookies and similar technologies
Our website uses cookies and similar technologies to enable core functionality (e.g., cart, checkout), to analyze usage, and—where you consent—to personalize content and measure marketing performance. For details on categories, purposes, and retention, please see our Cookie Policy and manage your preferences via the cookie banner at any time.

Changes to personal data
If your personal data changes (e.g., email address, residence) or if you become aware that we hold incorrect data, please notify us at: info@connect.hr. Connect is not liable for losses resulting from incorrect or incomplete data provided to us.

How long do we keep your personal data?
We retain personal data only as long as necessary for the purposes for which it was collected or as long as required by applicable laws (e.g., tax and accounting obligations) and for the establishment, exercise, or defense of legal claims. When retention is no longer necessary, data is securely deleted or anonymized.

Your rights

• (i) Right to withdraw consent (where processing is based on consent and no other legal basis applies);
• (ii) Right of access to your personal data;
• (iii) Right to be informed about processing;
• (iv) Right to obtain a copy of your data;
• (v) Right to rectification and restriction of processing;
• (vi) Right to erasure (“right to be forgotten”);
• (vii) Right to data portability;
• (viii) Right to object to processing based on legitimate interests or for direct marketing.

To exercise any of these rights, please email us at info@connect.hr.
We may ask you to verify your identity (e.g., by providing a valid ID copy) to comply with legal requirements and prevent unauthorized disclosure. We reserve the right to charge a reasonable fee if a request is manifestly unfounded or excessive. We will review all requests and respond within statutory deadlines.

If you are not satisfied with our response, you may file a complaint with the competent supervisory authority: Agencija za zaštitu osobnih podataka (AZOP) – Croatian Personal Data Protection Agency, https://azop.hr/.

Third-Party Services, Cookies & Analytics

To ensure proper functioning of our Website and to improve user experience, we use trusted third-party services. These partners may collect and process certain data in accordance with GDPR:

• Hosting & IT providers – for secure operation and maintenance of the Website.
• Payment processors & banks – to verify and process financial transactions.
• Logistics & courier services – to deliver purchased products worldwide.
• Analytics & marketing tools – to analyze Website traffic, improve performance, and optimize content.

All third parties are contractually required to handle personal data lawfully and securely. Data will not be sold or disclosed to unauthorized entities. Information may only be shared when legally required or necessary to protect our rights.

For more information about the use of cookies and analytics, please read our Cookie Policy.

Children’s data
Our services are intended for adults. We do not knowingly collect personal data from children under the age required by applicable law (e.g., 16). If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

Policy changes
CONNECT - SUSTAV INFORMACIJA j.d.o.o. reserves the right to amend this Privacy Policy to reflect changes in our processing activities or legal obligations. Any changes will be published on our website or via other appropriate means and will take effect on the date of publication.

How to contact us
We value your feedback regarding our Privacy Policy. You can contact us by email at info@connect.hr or by mail at: Connect - sustav informacija j.d.o.o., Cebini 37, Zagreb, Croatia.

This policy was last updated on August 17, 2025.