Privacy Policy

ARNASHIK atelier, craft for production and services, owned by Sara Novak, Svetog Florijana 1, 34000 Požega, Croatia; OIB: 69515485492; e-mail: info@arnashik.com (hereinafter: “Seller”).

ARNASHIK atelier pays special attention to the protection of personal data and processes personal data in accordance with the General Data Protection Regulation (GDPR), the Consumer Protection Act, and all applicable laws of the Republic of Croatia.

This Privacy Policy explains how personal data is collected, used, and protected when using the website www.arnashik.com.

PERSONAL DATA WE COLLECT

Personal data is any information relating to an identified or identifiable individual.
The Seller may collect the following personal data:

First and last name;
Residential or delivery address;
E-mail address;
Contact telephone number;
Payment-related data (processed exclusively by authorized payment providers).

Personal data is collected only when voluntarily provided by the user, such as during:

Order placement;
Account registration (optional);
Contact via e-mail or contact forms.

Non-personal data (e.g. IP address, browser type) may be collected automatically via cookies.

PURPOSES OF PROCESSING PERSONAL DATA

Personal data is processed solely for legitimate business purposes, including:

Processing and fulfilling orders;
Delivery of purchased products;
Issuing invoices and accounting obligations;
Customer communication and support;
Handling complaints, returns, and disputes;
Compliance with legal obligations;
Sending marketing communications only with prior consent.

Personal data is not used for automated decision-making or profiling.

LEGAL BASIS FOR PROCESSING

Personal data is processed based on:

Performance of a contract (order fulfillment);
Legal obligations;
Legitimate business interests;

Explicit consent (for marketing communications).

DATA SHARING AND DISCLOSURE

The Seller does not sell, rent, or disclose personal data to third parties, except when necessary to fulfill contractual or legal obligations, such as:

Courier and delivery services;
Payment service providers;
Accounting or legal authorities when required by law.

All third parties are obligated to protect personal data in accordance with GDPR.

SECURITY OF ONLINE PAYMENTS

Online card payments are processed securely via Stripe.

ARNASHIK atelier does not store or have access to credit or debit card details.
Payment data is handled exclusively by Stripe in accordance with PCI DSS security standards and industry best practices.

More information about Stripe’s privacy and security practices is available at: https://www.stripe.com/

DATA RETENTION

Personal data is stored only for as long as necessary to fulfill the purpose for which it was collected or as required by applicable laws (e.g. accounting regulations).

USER RIGHTS

In accordance with GDPR, users have the right to:

Access their personal data;
Correct inaccurate or incomplete data;
Request deletion of personal data (“right to be forgotten”);
Restrict or object to processing;
Withdraw consent at any time;
File a complaint with the competent supervisory authority.

Requests regarding personal data may be sent to: info@arnashik.com

COOKIES

The website www.arnashik.com uses cookies to ensure proper functionality and improve user experience.

Cookies may be:

Necessary cookies – required for basic site functionality;
Analytical cookies – used to analyze website traffic and usage (e.g. Google Analytics).

Cookies do not contain personal data such as name or e-mail address.

Users may disable cookies through browser settings. Disabling cookies may affect website functionality.

CHANGES TO THIS PRIVACY POLICY

The Seller reserves the right to amend this Privacy Policy at any time.
Changes will be published on www.arnashik.com and apply from the date of publication.