Privacy policy

Your privacy and the protection of your personal data are of utmost importance to us. This Privacy Policy (hereinafter: Policy) describes how we collect, use, share, and protect your personal data when you visit or use our website, services, applications, and other platforms (hereinafter: Services).

What Data Do We Collect?

When you use our Services, we may collect the following information related to you:

Contact information: name and surname, email address, phone number, address;
Usage information: details on how you use our Services, including time, duration, and manner of use;
Technical information: IP address, browser type, browser version, our cookies used to enhance the user experience;
Data entered in the contact web form, including the email address you provide to receive a response to your inquiry;
Other data you voluntarily provide us;
Delivery information such as the delivery address.

Purposes for Which We Use Your Data

We use your personal data for the following purposes:

Providing, improving, and personalizing our Services,
Communicating with you, including responding to your inquiries,
Marketing purposes, with your prior consent,
Compliance with legal obligations,
Specifying the specific purposes for which the website owner processes visitor data.

Who Is Responsible for Processing My Data?

The website owner Lavanda Dry is, as the data controller in accordance with the General Data Protection Regulation (hereinafter: GDPR), responsible for processing data related to you.

Who Is My Data Shared With?

Your data may be shared with our partners and subcontractors as so-called data processors in accordance with Art. 28 GDPR if we engage them for specific tasks involving the processing of personal data. For example, we use the partner WIX.com LTD (hereinafter: WIX) as a web service provider. All information about the processing of personal data by WIX can be found in their privacy policy at https://www.wix.com/about/privacy. Please note that in these cases, as the data controller, we remain responsible for processing your data.

Additionally, we may share data with our partners who provide services independently, regardless of your relationship with us. For example, if you order services from our partners through us or give us consent to share your data with partners, or if a partner is involved in processing based on legal grounds.

Finally, we may share data with government authorities if required by legal obligations.

Are My Data Subject to Automated Processing?

We do not use your data for processing that involves automated decision-making.

How Long Do We Retain Your Personal Data?

We retain your personal data for as long as necessary to fulfill the purpose for which they were collected.

For example, an email address for sending newsletters is stored only while you are subscribed to receive our newsletter.

Where Are My Personal Data Processed?

Your data are primarily processed in the Republic of Croatia and in other EU countries or countries within the European Economic Area (EEA).

Only exceptionally do we transfer your data to so-called third countries, and in such cases, we ensure adequate data protection measures, for example, using the European Commission’s Standard Contractual Clauses or transferring data to countries deemed by the European Commission to provide an adequate level of personal data protection.

Your Rights Regarding Your Data

Under the GDPR, you have the following rights:

Right of access: You can request information on whether your data are being processed, categories of personal data processed, processing purposes, potential recipients of your data, and the duration of data storage (Article 15 GDPR);
Right to rectification: You can request the correction of inaccurate personal data or the completion of incomplete data (Article 16 GDPR);
Right to erasure: You can request the deletion of your personal data in accordance with Article 17 GDPR;
Right to restrict processing: You can request a restriction on the processing of your personal data in accordance with Article 18 GDPR;
Right to object: You can object to the processing of your personal data based on legitimate interest regarding specific data processing that relates to you (Article 21(1) GDPR);
Right to data portability: You can request that the personal data relating to you, which you have provided to us, be transferred to another service provider in a structured, commonly used, and machine-readable format (Article 20 GDPR);
You have the right to withdraw your consent at any time, and your data processed based on that consent will no longer be used.

To exercise your rights, you can contact us at [info@lavanda-dry.hr].

In any case, you have the right to lodge a complaint with the supervisory authority – the Croatian Personal Data Protection Agency.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your user experience and analyze the use of our Services. You can control the use of cookies through your browser settings.

For more detailed information about the cookies we use and their purposes, please visit our Cookie Policy page.

Data Security

We apply appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

Updating the Privacy Policy

This Privacy Policy may be updated from time to time. You will be notified of any changes via our website.

Contact Information

For any questions regarding the collection and processing of your personal data or this Policy, you can contact us at [info@lavanda-dry.hr].