PRIVACY POLICY

INTRODUCTION

Thank you for showing interest in our company and online content. Data protection is of particular importance to Delmerion beauty d.o.o. Use of the Delmerion beauty d.o.o. website is possible without providing any personal data. However, if a visitor (Data Subject) wishes to use specific services via our website, the processing of personal data may become necessary. If the processing of personal data is necessary and there is no legal basis for it, we generally request consent from the Data Subject. Processing of personal data—such as the name, address, email address, or telephone number of a Data Subject—is always in accordance with the General Data Protection Regulation (GDPR) and specific data protection regulations applicable to Delmerion beauty d.o.o. Through this data protection statement, our company seeks to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, we inform Data Subjects of their rights. As the Controller, Delmerion beauty d.o.o. has implemented technical and organizational measures to ensure complete protection of personal data processed through this website. However, internet-based data transfers can have security gaps, so absolute protection cannot be guaranteed. For this reason, each Data Subject may provide necessary personal data by alternative means (e.g., by phone or mail).

DEFINITIONS

This privacy policy is based on the terms used by the European legislator in the GDPR. We aim to make this policy readable and understandable to the public, clients, and business partners. To achieve this, we first explain the terminology used, including:

Personal Data – any information relating to an identified or identifiable natural person.
Data Subject – the identified or identifiable natural person whose personal data is processed.
Processing – any operation or set of operations performed on personal data, automated or otherwise (e.g., collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, alignment, restriction, erasure, destruction).
Restriction of Processing – marking stored personal data to limit their future processing.
Profiling – automated processing of personal data to evaluate certain personal aspects.
Pseudonymization – processing data in a way that they can no longer be attributed to a specific Data Subject without additional information.
Controller – the natural or legal person who determines the purposes and means of personal data processing.
Processor – the natural or legal person who processes personal data on behalf of the Controller.
Recipient – any natural or legal person to whom personal data are disclosed, whether or not a third party.
Third Party – anyone other than the Data Subject, Controller, Processor, and persons authorized to process personal data.
Consent – any freely given, specific, informed, and unambiguous indication of the Data Subject's wishes.

CONTROLLER NAME AND CONTACT

Delmerion beauty d.o.o. Gospodarska ulica 6, Božjakovina, 10370 Dugo Selo 10 000 Zagreb, Croatia Phone: +385 1 3700 450 Email: info@delmerion-beauty.hr Website: www.delmerion.hr Privacy contact: info@delmerion-beauty.hr

COOKIES

Delmerion beauty d.o.o. websites use cookies—text files stored via the internet browser. Cookies allow websites and servers to recognize the user's browser and provide a user-friendly experience (e.g., shopping cart functions). Users can at any time prevent cookies via browser settings and can delete cookies at any time. Note: disabling cookies may limit website functionality.

COLLECTION OF GENERAL AND PERSONAL DATA

When accessing our website, general data and information are collected and stored in server log files (e.g., browser type, operating system, referring website, date and time of access, IP address, ISP, and other data related to system attacks). This information helps:

Deliver website content correctly,
Optimize content and ads,
Ensure long-term system security,
Provide law enforcement information if needed.

These data are analyzed anonymously and stored separately from personal data.

WEBSITE REGISTRATION

Data Subjects can register on our website by providing necessary personal data. These are collected and stored for internal purposes (including order and billing purposes). Registration also stores IP address and timestamp, mainly for security reasons. Registered users can update or request deletion of their data at any time, except for data we are legally required to retain.

NEWSLETTER SUBSCRIPTION

Users can subscribe to newsletters via forms specifying what data is collected. After registering, an email confirmation (double opt-in) is sent to confirm subscription. We store email addresses, IP address, and timestamp to detect misuse. Personal data are used solely for newsletter distribution and are not shared with third parties. Unsubscribing is possible anytime via the provided link, contact form, or by emailing info@delmerion-beauty.hr.

NEWSLETTER TRACKING

Our newsletters may contain tracking pixels that allow statistical analysis of open and click rates. These data help optimize newsletter content. Tracking can be revoked by unsubscribing.

CONTACT VIA WEBSITE

Our website contains forms and contact details (email) enabling direct communication. Personal data submitted voluntarily are stored and used to process inquiries and are not shared with third parties.

BLOG COMMENT SUBSCRIPTION

Users can subscribe to blog comments. Commenters’ usernames may be displayed publicly. A double opt-in process is used. Subscription can be canceled at any time.

ROUTINE DELETION AND BLOCKING OF DATA

We process and store personal data only as long as necessary for the purpose or as required by European or national regulations. After that, data are routinely blocked or deleted.

DATA SUBJECT RIGHTS

a) Right of Confirmation – to confirm whether we process their data.
b) Right of Access – to access information about processed data, purposes, categories, recipients, retention period, rights, sources, automated decision-making, and transfers.
c) Right to Rectification – to correct inaccurate data.
d) Right to Erasure (“Right to be Forgotten”) – under specific conditions, unless retention is legally required.
e) Right to Restriction of Processing – under specified conditions.
f) Right to Data Portability – to receive and transfer data to another controller.
g) Right to Object – to processing, especially for direct marketing.
h) Automated Decision-Making and Profiling – to not be subject to solely automated decisions.
i) Right to Withdraw Consent – at any time.

FACEBOOK USE

Our website may integrate Facebook plugins. Facebook may collect data on website visits when users are logged in. Users can prevent data transfer by logging out before visiting our site. See Facebook's privacy policy: https://facebook.com/about/privacy/.

GOOGLE ANALYTICS USE (WITH ANONYMIZATION)

We may use Google Analytics to analyze website usage. Google anonymizes IP addresses within the EU. Cookies collect data on website behavior, which Google may transfer to the U.S. Users can prevent cookie storage and data collection using browser settings or browser add-ons: https://tools.google.com/dlpage/gaoptout. More info: https://www.google.com/intl/en/policies/privacy/ and https://www.google.com/analytics/.

LEGAL BASIS FOR PROCESSING

Art. 6(1)(a) GDPR: Consent
Art. 6(1)(b) GDPR: Performance of a contract
Art. 6(1)(c) GDPR: Legal obligation
Art. 6(1)(d) GDPR: Vital interests
Art. 6(1)(f) GDPR: Legitimate interests

LEGITIMATE INTERESTS

Our legitimate interest is to conduct business for the benefit of our employees and owners.

DATA RETENTION PERIOD

We store data per legal retention periods and delete them afterward, except in historical backups where deletion is not feasible.

MANDATORY DATA PROVISION

We may request personal data for compliance with legal reporting or contractual obligations. Failure to provide such data may prevent contract fulfillment.