Privacy Policy (EU – GDPR)

PRIVACY POLICY

This Privacy Policy explains how KB SPORT SISTEM d.o.o., Eugena Kvaternika 7, 10410 Velika Gorica, Croatia, OIB: 96451187515, MBS: 080986530 (hereinafter referred to as “KB SPORT SISTEM”, “we”, “us” or “our), collects, uses, stores and protects personal data in connection with SKATINGER websites, online stores, services and related communications.

KB SPORT SISTEM is the seller of SKATINGER products and the controller responsible for determining the purposes and means of processing personal data through the following websites:

• www.skatinger.eu.com
• www.skatinger.hr
• www.skatinger.it
• www.skatinger.fr
• www.skatinger.es

These websites are collectively referred to in this Privacy Policy as the “Websites”.

We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), applicable Croatian data protection legislation and, where relevant, other applicable European Union and national laws.

This Privacy Policy applies to customers, registered users, newsletter subscribers, Website visitors, business partners, prospective distributors, retailers, rental centers, brand ambassadors, content creators and other persons who communicate or interact with us.

DATA CONTROLLER AND DATA PROTECTION OFFICER

The controller responsible for your personal data is:

KB SPORT SISTEM d.o.o.
Eugena Kvaternika 7
10410 Velika Gorica
Croatia
OIB: 96451187515
MBS: 080986530
Email: info@skatinger.eu.com

We have appointed a Data Protection Officer whom you may contact regarding this Privacy Policy, the processing of your personal data or the exercise of your GDPR rights.

Data Protection Officer
Branko Pavlica
Email: info@skatinger.eu.com

When contacting us regarding personal data, you may use the subject line “Data Protection Request”.

ROLE OF CONNECT MARKETPLACE

The SKATINGER Websites and online retail services are technically operated and maintained using the Connect Marketplace e-commerce platform provided by:

Connect – sustav informacija j.d.o.o.
Cebini 37
Zagreb, Croatia
OIB: 29278365039

Connect Marketplace provides technical services that may include Website hosting, system administration, account management, order processing infrastructure, database maintenance, security, backups, technical support and newsletter delivery.

In connection with these services, Connect Marketplace primarily acts as a data processor on behalf of KB SPORT SISTEM and processes personal data according to documented instructions and applicable data processing agreements.

The SKATINGER newsletter is delivered through the Connect Marketplace system and is not managed through Mailchimp.

WHAT IS PERSONAL DATA?

Personal data is any information relating to an identified or identifiable natural person. A person may be identified directly or indirectly, particularly by reference to a name, identification number, location data, online identifier or one or more factors relating to that person’s physical, physiological, genetic, mental, economic, cultural or social identity.

PERSONAL DATA WE MAY PROCESS

Depending on how you use our Websites and services, we may process the following categories of personal data:

Identification and contact information

• First and last name;
• Shipping and billing address;
• Country and city;
• Email address;
• Telephone number;
• Date of birth where requested for a specific application or service.

Customer account information

• Username and account identification number;
• Encrypted or hashed password;
• Saved addresses and preferences;
• Wishlist and recently viewed products;
• Order history;
• Language and communication preferences.

Order, delivery and invoicing information

• Products ordered and quantities;
• Order value, discounts and promotional codes;
• Shipping and delivery information;
• Invoice information and tax-related details;
• Payment method;
• Transaction status and transaction reference;
• Returns, complaints, warranty requests and refunds.

We do not store complete payment card numbers or card security codes. Such information is processed directly by the relevant payment service provider.

Payment information

Depending on the country, Website and available payment method, payments may be processed through providers such as:

• Stripe;
• PayPal;
• Klarna;
• Google Pay;
• Apple Pay;
• Banks and other financial institutions.

Payment providers may process your payment and fraud-prevention data as independent controllers or processors in accordance with their own privacy notices and terms. The availability of individual payment methods may vary by country and Website.

Customer support and communication data

• Email correspondence;
• Messages submitted through contact and support forms;
• Telephone communications;
• Details relating to requests, complaints, returns or warranty cases;
• Records of our response and resolution of your request.

Business partnership information

If you apply to become a retailer, distributor, business partner or other commercial collaborator, we may process:

• Company name;
• Tax or VAT identification number;
• Country of business;
• Company size and number of employees;
• Business description;
• Your role within the company;
• Your contact information;
• Information included in your partnership inquiry.

Brand Ambassador and content creator information

If you apply to become a SKATINGER Brand Ambassador, promoter or content partner, we may process:

• Biographical and contact information;
• City, country and preferred communication language;
• Social media profile and channel URLs;
• Blog or Website information;
• Main niche, activities and topics promoted;
• Audience reach and audience demographics;
• Average engagement rates and video or post views;
• Social media analytics or insights voluntarily provided by you;
• Your preferred form of collaboration.

Marketing and newsletter information

• Newsletter subscription status;
• Date, time and source of consent;
• Marketing preferences;
• Newsletter delivery status;
• Email opens, clicks and interactions where legally permitted;
• Records of consent withdrawal or objection.

Technical and Website usage information

• IP address;
• Device, browser and operating system information;
• Approximate location derived from an IP address;
• Website pages viewed and actions performed;
• Date and time of access;
• Referring Website or campaign;
• Shopping cart and checkout events;
• Log files and security records;
• Cookie identifiers and similar online identifiers;
• Analytics and advertising event data where you have consented.

Publicly submitted content

If you choose to submit a product review, testimonial, comment or other content intended for publication, the name or nickname you provide and the submitted content may be publicly visible on the Website.

HOW WE COLLECT PERSONAL DATA

We may collect personal data:

• Directly from you when you place an order, create an account, subscribe to a newsletter, complete a form or contact us;
• Automatically when you visit or interact with our Websites, subject to your cookie choices;
• From payment providers, banks and financial institutions regarding payment status or fraud-prevention checks;
• From delivery and logistics providers regarding shipment and delivery status;
• From Connect Marketplace as the technical operator of the e-commerce platform;
• From social media services when you voluntarily provide a social media profile or interact with our social media campaigns;
• From publicly accessible registers and sources where permitted by law and necessary to verify a business, address, tax number or prevent fraud.

PURPOSES AND LEGAL BASES FOR PROCESSING

We process personal data only where we have an appropriate legal basis.

Processing orders and performing contracts

We process personal data to:

• Receive and process orders;
• Confirm payments;
• Arrange delivery;
• Issue invoices;
• Manage accounts;
• Process returns, refunds, complaints and warranties;
• Communicate about an order or service.

The legal basis is the performance of a contract or taking steps at your request before entering into a contract under Article 6(1)(b) GDPR.

Compliance with legal obligations

We may process personal data to comply with tax, accounting, consumer protection, product safety, fraud-prevention, regulatory and other legal obligations.

The legal basis is compliance with a legal obligation under Article 6(1)(c) GDPR.

Customer support and service management

We process communications and support information to respond to inquiries, resolve complaints, provide technical assistance and improve customer service.

Depending on the context, the legal basis is performance of a contract, pre-contractual steps or our legitimate interest in communicating with customers and protecting our business.

Business partnership and Brand Ambassador applications

We process applications and inquiries to evaluate potential business relationships, distributorships, retail partnerships, product testing, affiliate arrangements, marketing collaborations and Brand Ambassador opportunities.

The legal basis is taking steps at your request before entering into a contract under Article 6(1)(b) GDPR and our legitimate interest in developing and managing business relationships under Article 6(1)(f) GDPR.

Website operation, security and fraud prevention

We process technical and security data to:

• Operate and maintain the Websites;
• Protect accounts and transactions;
• Detect misuse, fraud and security incidents;
• Prevent unauthorized access;
• Maintain backups and system availability;
• Establish, exercise or defend legal claims.

The legal basis is our legitimate interest in protecting the Websites, users, transactions and business operations under Article 6(1)(f) GDPR and, where applicable, compliance with legal obligations.

Analytics and Website improvement

Where you have given consent, we use analytics technologies to understand Website traffic, measure performance, identify technical issues and improve products, services and user experience.

The legal basis for non-essential analytics cookies and similar technologies is your consent under Article 6(1)(a) GDPR and applicable electronic communications and cookie laws.

Marketing and advertising

Where you have given consent, we may process personal data to:

• Send newsletters, offers and product information;
• Measure newsletter and campaign performance;
• Display and measure relevant advertising;
• Create limited audience segments based on Website interactions;
• Manage advertising campaigns through Google and Meta services.

The legal basis is your consent under Article 6(1)(a) GDPR. Where applicable law permits communication regarding similar products to existing customers, processing may also be based on our legitimate interest, subject to your right to object at any time.

ARE YOU REQUIRED TO PROVIDE PERSONAL DATA?

Providing personal data is generally voluntary. However, certain information is necessary to:

• Process and deliver an order;
• Issue an invoice;
• Process a payment;
• Respond to a request;
• Create and maintain a customer account;
• Evaluate a business or Brand Ambassador application;
• Comply with applicable legal obligations.

If required information is not provided, we may be unable to complete an order, provide a requested service, create an account, respond fully to an inquiry or evaluate an application.

Information requested only for marketing, analytics or non-essential cookies is optional. Refusing or withdrawing consent for these purposes does not affect your ability to place an order or use essential Website functions.

COOKIES AND SIMILAR TECHNOLOGIES

Our Websites use cookies and similar technologies such as pixels, local storage, tags and software development tools.

These technologies may be used for:

• Essential Website functionality;
• Shopping cart and checkout operation;
• Account login and security;
• Saving language and Website preferences;
• Fraud prevention;
• Website analytics;
• Advertising measurement and personalization.

Essential cookies are used because they are necessary for the Website and services requested by you.

Analytics, advertising and other non-essential cookies are used only where permitted by applicable law and, where consent is required, after you have selected the relevant options through the cookie banner.

Our analytics and marketing technologies may include:

• Google Analytics;
• Meta Pixel;
• Other Google or Meta advertising and campaign measurement services.

You may change or withdraw your cookie choices at any time through the cookie settings available on the Websites.

For more information about cookie categories, providers, purposes and storage periods, please read our Cookie Policy .

NEWSLETTERS AND DIRECT MARKETING

If you subscribe to the SKATINGER newsletter, we will use your email address and related consent information to send product news, offers, promotions, stories and other marketing communications.

Newsletter subscriptions and deliveries are managed through the Connect Marketplace platform.

You may unsubscribe at any time by:

• Using the unsubscribe link in a marketing email;
• Contacting us at info@skatinger.eu.com .

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

Service messages relating to an active order, payment, delivery, account, warranty or customer support request are not marketing communications and may continue to be sent where necessary.

WHO WE SHARE PERSONAL DATA WITH

We may share personal data only where necessary and on an appropriate legal basis with:

• Connect Marketplace, as the Website platform, technical service provider and newsletter system;
• Hosting, cloud, cybersecurity, backup and IT maintenance providers;
• Payment processors, banks and financial institutions, including Stripe, PayPal, Klarna, Google Pay and Apple Pay where these methods are available;
• Delivery companies, couriers, freight forwarders, warehouses and logistics providers;
• Accounting, auditing, legal, tax and business advisers;
• Fraud-prevention, payment security and debt recovery providers;
• Google, Meta and other analytics or advertising providers where you have consented to the relevant processing;
• Public authorities, courts, regulators, police or other competent bodies where required by law;
• Potential successors or purchasers in connection with a lawful merger, acquisition, restructuring or sale of business assets, subject to appropriate confidentiality and data protection safeguards.

Service providers acting as processors may process personal data only according to our documented instructions, for agreed purposes and subject to appropriate confidentiality, security and data protection obligations.

Some providers, particularly payment providers, banks, couriers, analytics platforms and social media companies, may act as independent or joint controllers for certain processing activities. Their processing is also governed by their own privacy notices and applicable terms.

We do not sell personal data to third parties.

INTERNATIONAL TRANSFERS OF PERSONAL DATA

Some service providers, including payment, cloud, analytics, advertising or technology providers, may process personal data outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we will use an appropriate transfer mechanism permitted by Chapter V of the GDPR, which may include:

• A European Commission adequacy decision;
• The EU–US Data Privacy Framework for eligible and certified recipients in the United States;
• European Commission Standard Contractual Clauses;
• Supplementary contractual, organizational or technical safeguards where required;
• Another transfer mechanism permitted by applicable data protection law.

Customer personal data is not transferred to the SKATINGER product manufacturer in China for order fulfilment, delivery, warranty processing or customer support.

HOW LONG WE KEEP PERSONAL DATA

We retain personal data only for as long as necessary for the purpose for which it was collected and to comply with legal, accounting, tax, consumer protection and record-keeping obligations.

Retention periods are determined according to:

• The duration of our contractual relationship;
• The period required to process an order, delivery, return or warranty;
• Applicable accounting and tax retention requirements;
• Applicable limitation periods for legal claims;
• The duration of an active customer account;
• The duration and outcome of an inquiry or application;
• The validity of consent;
• Our legitimate need to prevent fraud and maintain security;
• Cookie and analytics retention periods described in the Cookie Policy.

In general:

• Order, invoice and payment records are retained for the period required by applicable accounting and tax laws;
• Account information is retained while the account remains active and afterwards only where necessary for legal or contractual purposes;
• Customer support, partnership and Brand Ambassador inquiries are retained for as long as necessary to respond, manage the relationship and protect legal interests;
• Marketing data is retained until you withdraw consent, unsubscribe or object, unless a limited record must be retained to respect your opt-out request;
• Technical and security records are retained for a limited period appropriate to the relevant security and operational purpose.

When personal data is no longer required, it will be securely deleted, anonymized or restricted from further processing.

DATA SECURITY

We use appropriate technical and organizational measures designed to protect personal data against unauthorized or unlawful processing and against accidental loss, destruction, alteration or disclosure.

Measures may include:

• Encrypted transmission of data;
• Access controls and authentication;
• Role-based and least-privilege access;
• Security monitoring and log management;
• System updates and vulnerability management;
• Backups and recovery procedures;
• Contractual confidentiality obligations;
• Staff awareness and data protection procedures;
• Incident response and breach-management procedures.

No online service can guarantee absolute security. If a personal data breach occurs, we will take appropriate action and notify the competent supervisory authority and affected individuals where required by applicable law.

PERSONAL DATA ABOUT OTHER PEOPLE

If you provide personal data relating to another person, for example a different delivery recipient, company representative or contact person, you must ensure that:

• You are authorized to provide the information;
• The information is accurate;
• The person has been informed about this Privacy Policy where required.

AUTOMATED DECISION-MAKING AND PROFILING

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

Where you have consented to analytics or advertising technologies, limited profiling or segmentation may be used to understand Website interactions, measure campaign performance or present more relevant advertising.

You may withdraw your consent or adjust your cookie preferences at any time.

CHILDREN’S PERSONAL DATA

Our Websites and online retail services are not designed to knowingly collect personal data directly from children.

Where a product or service is purchased for a minor, the order and related communication should be completed by a parent, legal guardian or another adult authorized to act on the minor’s behalf.

If you believe that a child has provided personal data to us without appropriate authorization, please contact us so that we can investigate and take appropriate action.

YOUR DATA PROTECTION RIGHTS

Subject to the conditions and limitations provided by the GDPR, you may have the following rights:

• Right of access: to obtain confirmation of whether we process your personal data and receive a copy of that data;
• Right to rectification: to correct inaccurate or incomplete personal data;
• Right to erasure: to request deletion of personal data where the legal conditions are met;
• Right to restriction: to request restriction of processing in certain circumstances;
• Right to data portability: to receive eligible personal data in a structured, commonly used and machine-readable format and transmit it to another controller;
• Right to object: to object to processing based on our legitimate interests, including related profiling;
• Right to object to direct marketing: to object at any time to the use of personal data for direct marketing;
• Right to withdraw consent: to withdraw consent at any time where processing is based on consent;
• Rights relating to automated decisions: not to be subject to certain decisions based solely on automated processing;
• Right to lodge a complaint: to submit a complaint to a competent data protection supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

The right to erasure is not absolute. We may retain personal data where processing remains necessary to comply with a legal obligation, perform a contract, establish or defend legal claims or for another lawful reason.

HOW TO EXERCISE YOUR RIGHTS

To exercise a data protection right, contact:

Data Protection Officer: Branko Pavlica
Email: info@skatinger.eu.com
Postal address:
KB SPORT SISTEM d.o.o.
Eugena Kvaternika 7
10410 Velika Gorica
Croatia

Please describe your request clearly and identify the account, order, email address or other information relevant to the request.

We may request additional information reasonably necessary to verify your identity and prevent unauthorized disclosure. We will not request more information than is necessary for verification.

We will respond without undue delay and generally within one month of receiving a complete request. Where a request is complex or multiple requests have been made, the response period may be extended as permitted by the GDPR. We will inform you of any extension and the reasons for it.

Requests are generally handled free of charge. Where a request is manifestly unfounded or excessive, particularly because of its repetitive nature, we may charge a reasonable fee or refuse to act, as permitted by law.

RIGHT TO LODGE A COMPLAINT

If you believe that your personal data has been processed unlawfully or that your rights have not been respected, you may lodge a complaint with the Croatian supervisory authority:

Agencija za zaštitu osobnih podataka – AZOP
Croatian Personal Data Protection Agency
Ulica Metela Ožegovića 16
10000 Zagreb
Croatia
Website: https://azop.hr/

You may also lodge a complaint with the competent supervisory authority in the European Union or European Economic Area country where you habitually reside, work or where the alleged infringement took place.

We encourage you to contact us first so that we have an opportunity to investigate and resolve your concern.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes to our Websites, services, technologies, service providers, business operations or legal obligations.

The updated version will be published on the Websites and will take effect from the date shown at the end of the Policy.

Where a change materially affects how we process personal data, we may provide an additional notice through the Website, customer account or email where appropriate.

HOW TO CONTACT US

Questions, requests or complaints regarding this Privacy Policy or the processing of personal data may be sent to:

KB SPORT SISTEM d.o.o.
Eugena Kvaternika 7
10410 Velika Gorica
Croatia
Email: info@skatinger.eu.com

This Privacy Policy was last updated on 29 July 2026.