Privacy Policy
Effective date: Last updated: 10/07/2026
1. Who we are (Data Controller)
GOMM PRODUKT d.o.o., Nikole Tesle 16, 44320, Kutina, Croatia, OIB [02112299463], is the controller responsible for personal data processed through this website and in the course of our business.
Contact for privacy matters: [info@gomm-produkt.com]
2. Scope
This policy explains what personal data we collect, why we collect it, the legal basis for processing, how long we keep it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR) and the Croatian Act on the Implementation of the GDPR.
3. What personal data we collect
We collect only the data needed to respond to enquiries, prepare quotes, and fulfil orders:
- Contact and enquiry data — name, company, email address, telephone number, and any information you include in a message or contact form.
- Project files — technical drawings, 3D models, specifications, or samples you send us for quoting or production.
- Business/transaction data — order details, delivery addresses, and information required for invoicing (where you are an individual or sole trader; company data of a legal entity is generally not personal data).
- Technical and usage data — IP address, browser type, device information, and pages visited, collected automatically via cookies and similar technologies (see our Cookie Policy / Section 9).
We do not knowingly collect special categories of personal data, and this site is not directed at children.
4. Why we use it and our legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to enquiries and preparing quotes | Steps taken at your request prior to entering a contract (Art. 6(1)(b)) / legitimate interest (Art. 6(1)(f)) |
| Performing and fulfilling orders | Performance of a contract (Art. 6(1)(b)) |
| Invoicing, accounting, and tax records | Legal obligation (Art. 6(1)(c)) |
| Website security and basic operation | Legitimate interest (Art. 6(1)(f)) |
| Analytics and non-essential cookies | Your consent (Art. 6(1)(a)) |
5. Who we share it with
We do not sell your personal data. We disclose it only to:
- Service providers (processors) acting on our instructions — for example website hosting, email, and analytics providers.
- Public authorities where we are legally required to do so.
- Subcontractors or partners strictly where necessary to fulfil an order you have placed. [Specify if applicable.]
All processors are bound by data-processing agreements requiring appropriate confidentiality and security.
6. International transfers
Where a service provider processes data outside the European Economic Area, we rely on an adequacy decision or appropriate safeguards (such as the EU Standard Contractual Clauses).
7. How long we keep it
We retain personal data only as long as necessary for the purpose it was collected, or as required by law:
- Enquiries that do not lead to an order: [12 months].
- Order and project records: for the duration of the business relationship plus any legal limitation period.
- Accounting and tax documents: 11 years, as required under Croatian tax and accounting regulations.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- rectify inaccurate or incomplete data;
- erase your data (“right to be forgotten”), where applicable;
- restrict or object to processing, including processing based on legitimate interest;
- data portability for data you provided, where processing is based on consent or contract;
- withdraw consent at any time, without affecting processing carried out before withdrawal.
To exercise any of these, contact us at [email]. We will respond within one month.
You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, [azop.hr].
9. Cookies
We use essential cookies required for the site to function, and only with your consent analytics and other non-essential cookies. You can accept or reject non-essential cookies via our consent banner and change your choice at any time in your browser settings.
10. Security
We apply appropriate technical and organizational measures to protect personal data against loss, misuse, and unauthorized access. No transmission over the internet is completely secure, so we cannot guarantee absolute security.
11. Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
12. Changes to this policy
We may update this policy from time to time. The current version is always published on this page, with the “Last updated” date shown above.
13. Contact
Questions about this policy or your data: GOMM PRODUKT d.o.o., Nikole Tesle 16, 44320, Kutina, Croatia, OIB [02112299463]