Data Privacy

Introductory Provisions

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Official Journal of the European Union L 119, 4.5.2016, p. 1, hereinafter: the General Data Protection Regulation), which has been fully applicable since 25 May 2018 in the Republic of Croatia and all Member States of the European Union, as well as the Act on the Implementation of the General Data Protection Regulation (Official Gazette No. 42/18, hereinafter: the Act), and in accordance with the legal framework for personal data protection in the Republic of Croatia and the European Union and best European practice, CAG Distribution d.o.o., a limited liability company for trade and services, with its registered office in the Republic of Croatia, Balokovićeva 29, 10000 Zagreb (hereinafter: the Company), as the controller of personal data of its service users and customers, has prepared this Privacy Policy. The Privacy Policy is a unilaterally binding legal act based on the fundamental principles of personal data processing, regulating what data of users and/or customers is collected, how such data is processed, and for what purposes it is used. The Privacy Policy also informs users and/or customers of their rights regarding the collection and further processing of personal data, all for the purpose of protecting their privacy in the broader sense.

The Privacy Policy is based on the following principles of personal data processing: the principle of lawfulness, transparency and best practice; the principle of limited processing and data minimisation; the principle of accuracy and completeness of personal data; the principle of storage limitation; the principle of integrity and confidentiality of data; the principle of accountability; the principle of trust and fair processing; the principle of purpose limitation; and the principle of processing in anonymised form.

The Privacy Policy applies to all services offered by the Company, with the aim of clearly and transparently informing users and/or customers of the procedures for processing their personal data and their rights. Above all, users and/or customers may at any time contact the Company with a request to amend, supplement and/or update their data, as well as with a request to be informed of the purposes for which they do or do not wish their data to be processed.

The Company responsible for personal data processing is:

CAG Distribution d.o.o., a limited liability company for trade and services, with its registered office in the Republic of Croatia, Balokovićeva 29, 10000 Zagreb.

Contact details of the Data Protection Officer:

e-mail: info@cag.hr

Methods of Collection and Types of Data Collected

Certain services provided by the Company require the collection of personal data from users and/or customers, whereby basic data is collected in the following ways:

The volume of personal data collected by the Company depends on the type of service the Company provides to its users and/or customers, as well as on the legal basis on which it collects the data. The Company continuously ensures that only the necessary scope of personal data required to achieve the legally established purpose for which the data is processed is collected.

Purposes for which personal data is collected and further processed

The Company collects personal data in order to be able to provide, maintain, protect and improve its services related to the purchase of specific products, to understand how users and/or customers use the services provided and the Company's websites, and for the purpose of fulfilling the Company's contractual obligations. The Company collects such data based on the consent given by the user and/or customer for one or more specifically defined purposes, as well as in one of the following cases.

Fulfilment of contractual obligations

The Company collects and further processes the personal data of users and/or customers for the purpose of concluding and executing contracts, delivering ordered products, providing advice and assistance in the use of products, providing appropriate additional and/or extended product warranties, servicing, resolving complaints from users and/or customers, and other actions related to the conclusion and execution of contracts in accordance with applicable regulations.

The legal basis for processing the personal data of users and/or customers for the aforementioned purposes is the necessity of concluding a contract; in the event that a user and/or customer withholds essential data, the Company will not be able to conclude a contract and/or take certain actions related to the execution of the concluded contract.

Fulfilment of legal obligations

The Company is obliged, upon a written request from users and/or customers submitted to the above-mentioned Data Protection Officer's address, to provide them with access to the personal data it processes about them, correction of inaccurate personal data, erasure of personal data or restriction of personal data processing, as well as to inform them of the possibility of objecting to the processing of personal data and the right to data portability.

To the same e-mail address, a User may request the deletion of their account and all associated data from the User database.

Direct Marketing

The contact details of users and/or customers may be used to send promotional notifications about the Company's products and services if the user and/or customer has given consent for such processing or if there is a legitimate interest of the Company in such actions, unless the interests or fundamental rights and freedoms of the user and/or customer requiring the protection of personal data override those interests.

The Company may use contact details and personally contact users and/or customers whose personal data it already holds, based on a legitimate interest in sending promotional notifications about all products and services it provides, using all available promotional channels, unless the user and/or customer objects to such processing.

In order for a user and/or customer to receive notifications that match their preferences and habits, it is necessary for the Company to use certain data of users and/or customers to create personalised promotional notifications, until the user and/or customer explicitly objects to such data processing or withdraws their previously given consent for processing.

The legal basis for processing personal data for the aforementioned purposes is the legitimate interest of the Company, unless overriding interests or fundamental rights and freedoms requiring data protection exist.

Internal purposes

The Company uses certain data of users and/or customers exclusively for the purposes of its own records, in order to protect the legitimate interests of users and/or customers and/or the Company. For example, this includes the use of personal data for the purpose of creating offers that meet the needs and wishes of users and/or customers, and for market research and analysis.

Data on potential users

The Company is also authorised to collect data on potential users and/or customers of its services and/or products. This data includes basic information (first and last name, e-mail address) as well as the interests of potential users and/or customers who contact the Company wishing to be informed about and/or offered specific products and services.

The legal basis for collection in the described case is the consent of the user and/or customer.

Duration of personal data retention and processing

Depending on the purpose and legal basis on which the personal data of users and/or customers is collected, the Company is in certain cases obliged to retain personal data for the period prescribed by applicable regulations for a specific purpose, or until the purpose for which it was collected ceases to exist. Upon the expiry of the statutory retention period or the cessation of the purpose, the data is deleted.

In cases where the basis for collecting and processing data is the legitimate interest of the Company or the consent of the user and/or customer, personal data is retained for the following periods:

Fulfilment of legal obligations

General Terms of Business

Product prices shown in the catalogue are expressed in euros (€) and are subject to the statutory VAT. Orders are accepted via the web shop, in writing (by e-mail) and verbally (by phone or in person).

Delivery of ordered products upon receipt of the order is carried out within 24 to 48 hours for goods available in stock. For products that are currently unavailable, the delivery time may be up to 30 working days. In the event of a longer delivery time, we will notify you in a timely manner by e-mail or phone.

For orders up to €50.00 (excluding VAT), the shipping cost is €5.50 + VAT. Delivery is free of charge for orders above €50.00 (excluding VAT), except in cases where the parcel weighs more than 5 kg, involves delivery to islands or outside the Republic of Croatia. In such cases, shipping is charged according to the current price list of the delivery service.

If you receive a damaged, incorrect or defective product, a complaint may be submitted exclusively in writing – by e-mail or post.

Returns are accepted exclusively for products that have not been used and that are returned in original, undamaged packaging. The return period is 14 days from the date of receipt of the goods. In the case of an incorrect order, the cost of returning the goods is borne by the customer.

We are not responsible for possible printing errors. Product photographs and descriptions in the catalogue are for informational purposes only and may differ from the actual appearance, specifications or availability of products. We reserve the right to change prices in the event of changes in purchase prices, printing errors or incorrect quantity entries.

Effective from: 01/10/2023