Privacy Policy

Your privacy and the protection of your personal data are of utmost importance to us. This Privacy Policy (hereinafter: Policy) describes how we collect, use, share, and protect your personal data when you visit or use our website, services, applications, and other platforms (hereinafter: Services).

What Data Do We Collect?

When you use our Services, we may collect the following information about you:

Contact information: full name, email address, phone number, address;
Usage information: details about how you use our Services, including time, duration, and manner of use;
Technical information: IP address, browser type, browser version, our cookies used to enhance the user experience;
Information entered into the contact web form, including the email address you provide to receive a response to your inquiry;
Other data you voluntarily provide to us;
Delivery information, such as the delivery address.

Purposes for Which We Use Your Data

We use your personal data for the following purposes:

Providing, improving, and personalizing our Services;
Communicating with you, including responding to your inquiries;
Marketing purposes, with your prior consent;
Complying with legal obligations;
Specifying the particular purposes for which the website owner processes visitor data.

Who Is Responsible for Processing My Data?

The website owner (name, physical address) is the data controller responsible for processing your personal data in accordance with the General Data Protection Regulation (hereinafter: GDPR).

Who Has Access to My Data?

Your data may be shared with our partners and subcontractors as data processors in accordance with Article 28 of the GDPR if we engage them for specific tasks involving personal data processing. For example, we use the services of WIX.com LTD (hereinafter: WIX) as a website service provider. You can find all information regarding WIX’s processing of personal data in their privacy notice at https://www.wix.com/about/privacy. Please note that in such cases, we remain responsible for processing your data as the data controller.

Additionally, we may share data with our partners who provide services to you independently, regardless of your relationship with us. For example, if you order services from our partners through us or give consent to share your data with partners, or if we involve partners in processing based on a legal basis.

Finally, we may disclose data to government authorities when required by legal obligations.

Are My Data Subject to Automated Processing?

We do not process your data in a way that involves automated decision-making.

How Long Do We Retain Your Personal Data?

We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected.

For example, an email address for sending newsletters is kept only as long as you are subscribed to our newsletter.

Where Are My Personal Data Processed?

Your data is primarily processed in the Republic of Croatia and in other European Union countries or European Economic Area (EEA) states.

Only in exceptional cases do we transfer your data to so-called third countries, and in such cases, we ensure adequate data protection measures, such as using the European Commission’s Standard Contractual Clauses or transferring data to countries recognized by the European Commission as providing an adequate level of data protection.

Your Rights Regarding Your Data

Under the GDPR, you have the following rights:

Right of access: You can request information on whether your data is being processed, the categories of personal data processed, processing purposes, possible recipients of your data, and the retention period (Article 15 GDPR).
Right to rectification: You can request the correction of inaccurate personal data or the completion of incomplete data (Article 16 GDPR).
Right to erasure: You can request the deletion of your personal data in accordance with Article 17 GDPR.
Right to restriction of processing: You can request the restriction of processing of your personal data in accordance with Article 18 GDPR.
Right to object: You can object to the processing of your personal data based on legitimate interest concerning specific data processing activities (Article 21(1) GDPR).
Right to data portability: You can request that the personal data you provided to us be transferred in a structured, commonly used, and machine-readable format to another service provider (Article 20 GDPR).
Right to withdraw consent: You have the right to withdraw any consent you have given us at any time, and your data will no longer be processed based on that consent.

To exercise your rights, you can contact us at [hello@shegava.com].

You also have the right to file a complaint with the supervisory authority – the Croatian Personal Data Protection Agency.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your user experience and analyze the usage of our Services. You can control the use of cookies through your browser settings.

Detailed information about the cookies we use and their purposes can be found on our Cookies Policy page.

Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

Updating the Privacy Policy

This Privacy Policy may be updated from time to time. You will be notified of any changes via our website.

Contact Information

For any questions regarding the collection and processing of your personal data or this Policy, you can contact us at [hello@shegava.com].