PRIVACY POLICY

This Privacy Policy describes how we collect, use and store your personal data when you use the online store www.mammamiaart.com, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Croatian Act on the Implementation of the GDPR.

1. Data controller

PRIMAS, Tolstojeva 29, 21000 Split, Croatia
OIB (Tax ID): 48419436655
E-mail for data protection enquiries: mammamiaart.web@gmail.com
Phone: +385 91 570 6762

2. What data we collect

  • Order and delivery data: name and surname, delivery and billing address, postal code, city, country, e-mail address and phone number.
  • Data for legal entities (R1 invoice): company name and OIB.
  • Customer account data (if you create an account): e-mail, password (encrypted) and order history.
  • Newsletter data: e-mail address.
  • Enquiry and complaint data: the content of your message and contact details.
  • Technical data: IP address, browser type and cookies (see section 8).

We do not collect or store your payment card data. It is processed directly by CorvusPay through its secure system.

3. Purpose and legal basis of processing

Purpose Legal basis
Order processing, payment, delivery, invoicing Performance of a contract (Art. 6(1)(b) GDPR)
Retention of invoices and business records Legal obligation (Art. 6(1)(c) GDPR)
Handling complaints Legal obligation and performance of a contract
Sending newsletters and promotional messages Your consent (Art. 6(1)(a) GDPR)
Website security and abuse prevention Legitimate interest (Art. 6(1)(f) GDPR)

4. How long we keep your data

  • Invoices and order data: 11 years, in accordance with the Croatian Accounting Act.
  • Consumer complaints: at least 1 year from submission, in accordance with the Consumer Protection Act.
  • Customer account: until you delete the account or request its deletion.
  • Newsletter: until you withdraw your consent (by unsubscribing or by contacting us by e-mail).
  • E-mail and contact form enquiries: up to 2 years from the last communication.

After these periods expire, the data is deleted or permanently anonymised.

5. Who we share your data with

We share your data only to the extent necessary to fulfil your order:

  • delivery services: DPD Croatia d.o.o., Slatinska 7, 10360 Sesvete; DHL International d.o.o., Utinjska 40, Zagreb; Hrvatska pošta d.d. (for shipments outside the EU)
  • card payment provider: Corvus Pay d.o.o., Buzinski prilaz 10, Zagreb
  • accounting service, for issuing and storing invoices
  • website hosting provider

We do not sell your data or share it with third parties for marketing purposes. Data is not transferred outside the European Economic Area, unless necessary to deliver an order to an address outside the EU.

6. Data protection

We store personal data using appropriate technical and organisational security measures (SSL encryption, protected system access, access limited to authorised persons) to prevent unauthorised access, loss or misuse.

7. Your rights

You have the right:

  • to access your personal data
  • to rectification of inaccurate data
  • to erasure (“right to be forgotten”), except for data we are legally required to keep
  • to restriction of processing
  • to data portability
  • to object to processing
  • to withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal

You can send your request to mammamiaart.web@gmail.com or by post to our registered office. We will reply within 30 days at the latest.

If you believe your rights have been violated, you have the right to lodge a complaint with the supervisory authority: Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, Croatia, www.azop.hr.

8. Cookies

The website uses necessary cookies required for the online store to function (shopping cart, login, language selection). Analytics and marketing cookies are used only with your consent, which you give or refuse through the cookie notice on your first visit. You can delete or block cookies at any time in your browser settings.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version is always published on this page.

Last updated: 23 October 2026

 

 

Security programs