Privacy Policy

1. General Information

The protection of your personal data is extremely important to us. This Privacy Policy explains how we collect, use, process, and protect your personal data in accordance with applicable regulations, in particular the General Data Protection Regulation (EU) 2016/679 (GDPR) and the applicable laws of the Republic of Croatia. Our website is hosted on the Wix.com platform, which enables us to present and sell our products and services to you.

2. Data Controller

The data controller of your personal data is: 4MA concept d.o.o.

Address: Jurjevska ulica 44, 10000 Zagreb

Personal Identification Number (OIB): 80995994128

Phone: +385 91 3865 222

Email: info@4ma-concept.hr

3. Data Protection Officer (DPO)

The data controller is not required to appoint a Data Protection Officer.

For all questions related to personal data processing, you may contact us using the details above.

4. Supervisory Authority

If you believe that the processing of your personal data is unlawful, you have the right to lodge a

complaint with:

Personal Data Protection Agency (AZOP)

Selska cesta 136,

10000 Zagreb

https://azop.hr

5. Principles of Data Processing

We process your personal data:

lawfully, fairly, and transparently
for specified and legitimate purposes
limited to what is necessary
with appropriate security measures

6. What Data We Collect

Depending on your interaction with our website, we may collect:

identification data (name, surname)
contact data (address, email, phone)
order and purchase data
payment data (we do not store card details)
OIB (for R1 invoices)
IP address and technical data
communication (contact forms, email)
website usage data (analytics, cookies)

7. Purposes and Legal Bases of Processing

We do not sell your personal data.

We process your data for:

Contract performance (processing orders, delivery, invoicing, support)
Legal obligations (accounting, tax, business records)
Legitimate interests (fraud prevention, security, service improvement, limited marketing)

We always ensure your rights do not override our legitimate interests.

8. Consent

Based on your consent, we process data for:

newsletters
marketing communication
non-essential cookies

You may withdraw your consent at any time.

9. Online Store and Forms (Wix)

Our website may include:

contact forms
order forms
account registration

When you submit data through forms, it is stored on Wix servers and/or our connected systems.

10. Payment Processing

Payments are processed via secure third-party providers integrated with Wix (e.g., Wix Payments, Stripe, PayPal). We do not store card details. Payment providers process data in accordance with their own privacy policies and security standards.

11. Newsletter and Marketing

We may send newsletters:

with your consent, or
to existing customers (soft opt-in, where legally allowed)

Each email contains an unsubscribe option.

We may use Wix or third-party email marketing tools

12. Cookies (Wix Cookie System)

Our website uses cookies via Wix and third-party integrations.

Types:

Essential cookies (required for site functionality)
Analytics cookies
Marketing cookies

A cookie banner allows you to:

accept
reject
customize preferences

You can change consent at any time.

13. Analytics and Tracking

We may use:

Google Analytics
Wix Analytics

These tools may:

collect anonymized IP addresses
track behavior on the website
transfer data outside the EU

Transfers are protected using:

Standard Contractual Clauses (SCC)
or other legal safeguards

14. Social Media Integration

Our website may include integrations such as Instagram or other platforms. By interacting with these elements, data may be shared with those third parties.

15. Data Recipients

We share data only when necessary, with:

delivery services
IT and hosting providers (including Wix.com Ltd.)
accounting services
payment providers
marketing tools (with consent)

All partners act under data processing agreements.

16. International Data Transfers (Wix Hosting)

Wix may store and process data in:

the EU
Israel
the USA
other jurisdictions

Wix ensures appropriate safeguards such as:

SCC (Standard Contractual Clauses)
adequacy decisions (e.g., Israel)
additional security measures

17. Data Retention

We retain:

accounting data: 11 years
communications: up to 12 months
newsletter data: until withdrawal
security logs: up to 6 months
other data: as necessary

18. Your Rights

You have the right to:

access your data
correct inaccurate data
request deletion
restrict processing
data portability
object to processing
withdraw consent

19. Data Security

We implement:

encryption (SSL)
access controls
secure Wix infrastructure

However, no internet transmission is fully secure.

20. Changes to This Policy

We may update this Privacy Policy. Updates will be published on this page.

21. Contact

For privacy-related inquiries:

info@4ma-concept.hr