Privacy policy
KUPUJ ONLINE d. o. o. for trade, marketing, services, travel agency
Registered office: Ul. Fiorella La Guardie 13, 51000 Rijeka
Tax ID (OIB): 60186252821
Data controller contact: +385 914601350
Personal data protection: info@kupujonline.com
Contact: dpo@feralis.hr
Inquiries and requests
Personal data may be collected through this website for the purpose of responding to an inquiry or request submitted by you.
For this purpose, only the minimum set of contact data is collected:
- Name
- Contact information
Such processing is necessary in order to provide the requested service or to take steps prior to providing the service at your request. The processing is lawful on the basis of Article 6(1)(b) of the GDPR.
Data is stored for as long as the purpose of processing exists.
Such processing is lawful pursuant to Article 6(1)(b) of the GDPR. Data is stored in accordance with special regulations for at least 11 years.
Cookies
Personal data may be collected through this website for the purpose of improving the functionality of website features and providing a better user experience.
For this purpose, non-intrusive cookies are used, and user consent is requested before their use when they are not strictly necessary cookies. The data collected is anonymous and does not contain identifiable information about individuals.
Data is processed on the basis of consent, and such processing is lawful under Article 6(1)(a) of the GDPR.
The processing activities we carry out on the basis of our legitimate interest are the following:
NEWSLETTER
Data processed: e-mail address
Purpose of processing: marketing. The newsletter provides information about the services we offer, which may include details about our special offers and benefits.
Method of collection: directly from the data subject
An objection to the processing of the e-mail address for marketing purposes may be submitted at any time, and the processing may be restricted or completely prohibited.
Collected personal data may be forwarded for use to providers of information and communication solutions and services who act as our data processors. These processors provide reasonable guarantees and have undertaken appropriate technical and organizational protection measures to ensure adequate data security and compliance with the requirements of the GDPR.
An agreement/contract on personal data processing has been concluded with such processors based on the Commission Implementing Decision (EU) 2021/915 on standard contractual clauses between controllers and processors, as a special part of the contract. This agreement/contract prescribes in detail how personal data must be handled, and therefore they are not able to process personal data without our instructions nor forward them to third parties.
Personal data is not shared with third parties for direct marketing purposes.
Pages and profiles we manage on social networks (Facebook, Instagram, etc.) are operated under the exact and full name of our Company.
Personal data about our contacts collected through these platforms is used solely for the purpose of responding to an inquiry or comment, and the data is not processed for any other purpose.
This website uses cookies to provide users with a better user experience and to enable the data controller to conduct market research for generating audience insights, i.e., to learn more about the audience that visits the website and views advertisements. For this purpose, we use technical cookies that are necessary for the functioning of this website, they cannot be disabled, and user consent is not required, as well as marketing cookies, for which we request user consent and allow users to manage them at any time while using this website.
We do not use intrusive cookies or cookies whose combination could identify the user.
Before using cookies, we ask for user consent, and immediately upon visiting this website, the user is informed about the privacy policy and the cookies being used or that may be used, with the option to accept, reject, or manage them.
Directive 2009/136/EC and the Electronic Communications Act stipulate that consent is not required for cookies that are technically necessary for the communication between the user’s device and the website they are visiting or for providing a service on the website at the user’s request.
GENERAL INFORMATION ABOUT COOKIES
What are cookies?
Cookies are small files that a browser stores on the user’s computer, mobile device, or any other device used to visit a website. They are stored at the request of the website for its future needs. These needs may vary depending on the cookie’s purpose. For example, cookies can store the language chosen by a visitor, track page navigation, store items in a shopping cart, or store information such as IP address, login credentials, email address, geolocation, device type, and other user behavior data.
Cookies by function
The most common types are:
Technical/necessary cookies – essential for the functionality of the website, such as session identifiers or shopping cart contents.
Functional cookies – enable enhanced functionality and personalization, such as remembering language preferences.
Statistical cookies – collect anonymized data on how users interact with the website.
Marketing cookies – collect information on user behavior for personalized advertising.
Cookies by source
They may be:
First-party cookies – set by the website being visited.
Third-party cookies – set by other websites or services integrated into the primary website, such as chat services.
Cookies by duration
Persistent cookies – remain stored after the browser is closed and retain data such as login details or language settings.
Session cookies – deleted after the browser is closed and store temporary data like recently visited pages or shopping cart items.
Cookies that do not require consent
These include:
“User-input cookies” – session cookies used for form inputs, shopping carts, or language selections.
Authentication cookies – session cookies required for login systems.
Security cookies – used for detecting failed login attempts or preventing abuses.
Multimedia player session cookies – store technical playback data.
Load-balancing cookies – ensure stable server performance.
Social plug-in cookies – allow logged-in social media users to share content.
COOKIES USED ON THIS WEBSITE
Strictly necessary cookies
These cookies are essential for the functioning of the website and for providing required services. They are considered necessary under the Privacy Directive 2002/58 EC. Processing is based on consent and our legitimate interest in optimizing usability.
Non-essential cookies (marketing/analytics and third-party content)
These require your explicit consent. If you do not consent, they will not be collected nor process your personal data, and this will not affect website functionality.
Web analytics
Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited, under a data-processing agreement. Data collected by cookies is transferred to Google servers in the USA only if you consent to the use of Google Analytics cookies. Google analyzes website usage and creates reports to help improve user experience.
Additional protection measures are implemented by enabling IP anonymization (“gat._anonymizeIp();”). Google receives data only as a processor and is not allowed to use the data for its own purposes.
More information: Google Analytics Help.
You can further limit data processing by using the browser add-on:
Google Analytics Opt-out Browser Add-on.
Data transfers outside the EU follow standard contractual clauses in accordance with Article 46 GDPR.
Third-party service providers
Google Fonts
We use Google Fonts, stored locally, so your IP address is not transmitted to Google. More information:
Google Fonts Privacy Statement.
Tidio Chat Plugin
Used for faster and simpler communication. Contact data is collected only when users initiate communication. Privacy policy:
Tidio Privacy Policy.
Polylang
Used to set the correct website language. Polylang cookies store your language preference for one year. More information:
Polylang Privacy Policy.