Effective date: October 6, 2025.
Website owner: Vasco, craft for production, trade and services
Address: Tratinska 61, 10000 Zagreb, Croatia
E-mail: vasco.gram@gmail.com
Website: www.vasco.hr

1. Introduction

This Privacy Policy explains how we collect, use and protect your personal data when you visit our website or make a purchase through our webshop. The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the applicable legislation of the Republic of Croatia.

By using our site and purchasing products, you confirm that you have read, understood and accepted this Privacy Policy.

2. What personal data do we collect?

We only collect data that is necessary to process orders and improve the user experience:

• First and last name
• Delivery address
• E-mail address
• IP address (automatically, via cookies and analytical tools)

Payment information (e.g. card number) they are not processed on our servers, but exclusively through secure payment systems (Woopay and PayPal).

3. Purpose of collection and legal basis

We process your personal data for the following purposes:

4. Sharing data with third parties

Your data may be shared with trusted partners only when necessary to provide the service:

• Woopay and PayPal – for secure payment processing
• Google Ireland Ltd. – via service Google Analytics, for attendance statistics
• Delivery services (HP, GLS, DPD, etc.) – for delivery of ordered products

All listed partners are GDPR compliant and are committed to data confidentiality.

5. Data storage and protection

Personal data is stored on secure servers and is protected against unauthorized access, modification and loss.
We store data:

• invoices and customer information: 11 years (in accordance with the tax regulations of the Republic of Croatia)
• contact inquiries: up to 1 year after the end of communication
• analytical data: according to cookie settings (see below)

6. Cookies

Our website uses cookies to improve user experience and analyze traffic.
By using the site, you agree to the use of cookies, unless you disable them in your browser settings.
For more information, see our Cookies Policy.

7. Your rights

In accordance with GDPR, you have the following rights:

• Right of access – you can request a copy of the personal data we process.
• Right to correction – if your data is incorrect or incomplete.
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object – you can withdraw your consent to data processing at any time.

To exercise your rights, contact us at vasco.gram@gmail.com.
We will respond within 30 days.

8. Data transfer outside the EU

Some of our partners (e.g. PayPal, Google) may process data on servers outside the EU. In such cases, the standard contractual clauses of the European Commission are applied to ensure an adequate level of data protection.

9. Automated decision-making and profiling

We do not conduct any automated decision-making or user profiling based on personal data.

10. Privacy Policy Changes

We reserve the right to change this Privacy Policy at any time, without prior notice. An updated version will always be available at www.vasco.hr.

11. Contact

For any questions, requests or complaints regarding privacy protection, please contact us by email:

📧 vasco.gram@gmail.com
📍 Vasco, craft for production, trade and services
Tratinska 61, 10000 Zagreb, Croatia

If you believe that your rights have been violated, you have the right to file a complaint The Personal Data Protection Agency (AZOP), Martićeva 14, Zagreb.