Trgocentar d.o.o. respects the privacy of its customers, users and visitors of the website www.vinarija-vitus.hr and processes personal data lawfully, fairly and transparently, solely to the extent necessary to achieve a specific purpose.
This Privacy Policy explains which personal data we collect, for which purposes we process it, on which legal bases, how long we retain it, with whom we share it, and what rights you have in relation to your personal data.
1. Data Controller
The data controller for personal data is:
Trgocentar d.o.o.
Ulica 103. brigade 8, 49210 Zabok
OIB: 84210581427
trgocentar@trgocentar.com
You may contact the Data Protection Officer by e-mail at: zastitaop@trgocentar.com
2. Personal Data We Collect
Depending on how you use our website, we may collect the following personal data:
• first and last name
• delivery address and/or billing address
• e-mail address
• telephone number
• data relating to orders, purchases, complaints and returns
• data you provide when creating a user account
• data you provide when subscribing to the newsletter
• data you provide via the contact form, e-mail or telephone
• technical data, including IP address, device type, browser type, operating system, data on website visits and behaviour on the website
• data collected through cookies and similar technologies.
We collect only the data necessary for a specific processing purpose.
3. Purposes of Processing and Legal Bases
We process your personal data for the following purposes:
a) Processing Orders and Performance of a Contract
For the purpose of receiving, processing and delivering orders, issuing invoices, communicating in relation to an order, and exercising rights and obligations arising from the purchase relationship.
Legal basis: performance of a contract and taking steps at the request of the data subject prior to entering into a contract.
b) Compliance with Legal Obligations
For the purpose of maintaining business records, retaining accounting documentation, complying with regulations in the fields of trade, taxation, accounting and consumer protection, and acting upon requests from competent authorities.
Legal basis: compliance with a legal obligation.
c) User Account
If registration is enabled on the website, we process data for the purpose of creating and managing a user account and enabling easier use of the webshop.
Legal basis: performance of a contract and/or legitimate interest in enabling user account functionality.
d) Responding to Enquiries and Customer Support
For the purpose of responding to enquiries, resolving complaints, returns and objections, and providing customer support.
Legal basis: legitimate interest and/or taking steps at the request of the data subject.
e) Sending Newsletters and Promotional Communications
If you subscribe to the newsletter, we process your e-mail address for the purpose of sending news, offers and information about products and services.
Legal basis: consent and, in certain cases, legitimate interest where the legal requirements for this are met.
f) Analytics, Security and Website Improvement
For the purpose of monitoring website performance, analysing visits, improving the user experience, protecting systems and preventing misuse.
Legal basis: legitimate interest in the security and basic functioning of the website, and user consent for analytical and marketing cookies.
4. Obligation to Provide Data
Where certain data is necessary for entering into and performing a contract or for complying with a legal obligation, we may not be able to process your order, deliver the goods, issue an invoice or respond to your request without such data.
Where processing is based on consent, providing data is voluntary, and you may withdraw your consent at any time.
5. Recipients of Personal Data
We may share your personal data with third parties only where this is necessary to achieve a specific processing purpose, in particular with the following recipients and processors:
• WSPay as the provider of online payment services
• GLS as the provider of delivery services
• providers of hosting, technical maintenance and IT support services
• accounting, legal and other professional advisers where necessary
• competent authorities where there is a legal obligation to provide data
• Mailchimp for managing newsletter campaigns and sending e-mail communications
• Google Analytics 4 for analytics and monitoring the use of the website
• Meta Pixel for measuring advertising effectiveness and remarketing activities.
We share with third parties only the data necessary for the performance of a particular service and subject to appropriate protective measures.
6. Transfer of Data to Third Countries
Certain service providers we use, in particular Mailchimp, Google Analytics 4 and Meta Pixel, may process personal data outside the European Economic Area, including in the United States of America.
In such cases, data transfers are carried out with the application of appropriate safeguards, such as adequacy decisions or standard contractual clauses, where applicable.
7. Data Retention Period
We retain personal data for as long as necessary to fulfil the purpose for which it was collected, unless a longer retention period is prescribed by law or is necessary for the establishment, exercise or defence of legal claims.
As a general rule:
• data relating to orders, invoices and related documentation is retained in accordance with statutory retention periods
• user account data is retained until the account is deleted or until the expiry of a reasonable period of inactivity
• newsletter data is retained until consent is withdrawn or until unsubscribing from the mailing list
• data from enquiries and communications is retained until the communication is completed, and thereafter for as long as necessary to protect legitimate interests
• data on consents and cookie settings is retained for as long as necessary to demonstrate consent and manage settings.
8. Personal Data Security
We apply appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, misuse, alteration or destruction.
9. Your Rights
In relation to the processing of personal data, you have the right to:
• request access to your personal data
• request the rectification of inaccurate or incomplete data
• request the erasure of data where the legal requirements are met
• request restriction of processing
• object to processing based on legitimate interest
• object to processing for direct marketing purposes
• request data portability, where applicable
• withdraw consent at any time where processing is based on consent.
To exercise your rights, you may contact us at zastitaop@trgocentar.com or by post at the company’s registered office address.
If you believe that the processing of your personal data is contrary to applicable regulations, you have the right to lodge a complaint with the competent supervisory authority for personal data protection.
10. Cookies
Our website uses cookies and similar technologies to ensure the basic functionality of the website, store your preferences, perform analytics and, where applicable, carry out marketing activities.
Cookies may be divided into:
• necessary cookies
• functional cookies
• analytical cookies
• marketing cookies.
Necessary cookies are required for the proper functioning of the website and cannot be disabled in our systems if they are genuinely necessary for providing a service expressly requested by the user.
We use analytical and marketing cookies only if you have given your prior consent through the cookie banner or cookie settings.
On the website, we use tools such as Google Analytics 4 and Meta Pixel, only to the extent and in the manner corresponding to your selected consent settings, where such consent is required.
More detailed information on the types of cookies, their duration and purpose is available in the Cookie Policy or through the cookie settings on the website.
11. Newsletter
If you subscribe to our newsletter, we will use your e-mail address to send news, promotional offers, information about products, services and other relevant content.
We use Mailchimp to manage newsletter communications.
You may unsubscribe from the newsletter at any time by clicking the unsubscribe link in each message sent to you or by sending a request to webshop@vinarija-vitus.hr.
For the purpose of demonstrating consent, we may record the date, time and method of subscription, as well as technical records related to the subscription.
12. Automated Decision-Making and Profiling
We do not carry out automated decision-making that produces legal effects concerning data subjects or similarly significantly affects them.
13. Amendments to the Privacy Policy
We reserve the right to amend this Privacy Policy in order to comply with changes in regulations, technical changes or changes in the manner of business operations. The updated version will be published on this website.
Date of last amendment: 4 May 2026