1.Who we are (Data Controller)
- Controller: Moja Sauna (Piccolo Sauna)
- Website: mojasauna.hr
- Email: info@mojasauna.hr
- Phone (WhatsApp): +385 91 567 6668
- If you need our registered company address for invoices or legal notices, contact us at the email above.
2.What personal data we collect
Depending on how you interact with us, we may collect:
A. Data you provide
- Contact details (name, email, phone)
- Delivery and billing details (address, city, postcode, country)
- Order details (products, quantity, order notes)
- Customer support messages and attachments you send us
B. Payment-related data
- Payments are processed by payment providers (for example, Stripe). We do not store full card details on our servers.
C. Technical and usage data
- Device and browser information (IP-derived region, device type, browser)
- Website interaction data (pages viewed, clicks, approximate location, referrer)
- Cookies and similar technologies (see Section 6)
3.Why we use your data and our legal bases
We process personal data only when we have a lawful basis, such as contract necessity, legal obligation, legitimate interest, or consent. We use your data to:
- Process and deliver your order
- Purpose: checkout, shipping, customer service, warranties, invoicing
- Legal basis: performance of a contract; legal obligation (accounting/tax)
- Respond to messages and support requests
- Purpose: answer questions, provide quotes, handle complaints
- Legal basis: legitimate interests; contract (when related to an order)
- Improve our website and customer experience
- Purpose: analytics, debugging, performance, understanding usage
- Legal basis: consent for non-essential cookies; legitimate interests for strictly necessary technical logs (where applicable)
- Marketing (only where allowed)
- Purpose: newsletters, promotions, retargeting ads (if enabled)
- Legal basis: consent (and you can withdraw at any time)
- Security and fraud prevention
- Purpose: protect our website, prevent fraudulent orders, defend against abuse
- Legal basis: legitimate interests
5.International transfers
Some service providers may process data outside your country, including outside the EEA. Where this happens, we rely on appropriate safeguards (for example, Standard Contractual Clauses) as required under EU rules for international transfers.
7.How long we keep your data
We keep personal data only as long as needed for the purposes described above, including:
- Contract and customer support needs
- Legal retention obligations (for example, invoices and accounting records)
- Security and fraud prevention
Where possible, we delete or anonymize data when it is no longer needed.
8.Your rights
Depending on your location (including the EEA), you may have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data (in certain cases)
- Restrict or object to processing (in certain cases)
- Data portability (in certain cases)
- Withdraw consent at any time (where processing is based on consent)
To exercise your rights, email info@mojasauna.hr.
9.Security
We use reasonable technical and organizational measures to protect your personal data. No system is 100% secure, but we work to prevent unauthorized access, misuse, and loss.
10.Children
Our products and website are not intended for children, and we do not knowingly collect data from children.
11.Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the effective date above.
12.Complaints
If you are in Croatia, you can lodge a complaint with the supervisory authority:
- Croatian Personal Data Protection Agency (AZOP)
Ulica Metela Ožegovića 16, HR-10000 Zagreb
You can also contact your local supervisory authority in your country.
13.Contact
For privacy questions or requests:
- info@mojasauna.hr
- +385 91 567 6668 (WhatsApp)