Privacy Policy

Your privacy is important to us. We want you to feel safe with us, and we act accordingly and in compliance with the legal provisions on the protection of personal data, especially the new European General Data Protection Regulation (GDPR) applicable from May 25, 2018.
Below, we inform you about the purposes for which we collect and use your personal data and how you can monitor and exercise your rights. You can access and print our Privacy Statement at any time via the Data Protection link located at the bottom of every page of our online store (webshop).

Our IT systems are protected by technical and organizational measures against unauthorized access, alteration, or dissemination of your data, as well as against loss or deletion.

Name and Contact Details of the Personal Data Controller

The party responsible for the processing of personal data is:

Nautica Radat d.o.o.
Vlade Prišćana 5
10290 Zaprešić
Croatia
E-mail: info@nauticaradat.hr

As a customer or user of our services, you have the right to receive information on how your personal data is handled and to submit requests to exercise your rights.

For basic information or quick corrections, you can contact our Customer Service by phone or e-mail. For all other inquiries or requests regarding your personal data, please contact our Data Protection Coordinators at: info@nauticaradat.hr

Purposes and Legal Basis for Data Processing

You can rest assured: we use your personal data exclusively to fulfill your requests, conclude and execute contracts, and solely for our own marketing and other legitimate interests to improve our business, as well as to comply with our legal obligations.
We only use the data for specific, clear, legitimate, and expected purposes, and we do not pass them on or use them for unforeseen or unexpected purposes.

Processing is carried out in accordance with the GDPR and Croatian laws and regulations.

MAIN CONTEXTS IN WHICH PROCESSING OCCURS

  • Customer database

  • Cookies and web analytics

CUSTOMER DATABASE
Your personal data is stored in our central database when you make an inquiry, request a quote, place an order, register on the website, in our webshop, or in-store. Depending on the type of request or contract, this includes:

  • Full name

  • Address

  • OIB (personal identification number)

  • E-mail address

  • Phone/fax number

  • Goods/services

  • IBAN (in case of refund)

We process this data for the purpose of concluding or executing contracts with you and fulfilling your other requests. The data is also processed based on our legitimate interest in improving our business, as explained further. The data is accessible only to employees who need it for their work.

To conclude a contract, at a minimum, we require your full name and address for identification. For issuing R1 invoices to sole traders or self-employed individuals, we require the OIB. Depending on the payment method, we may process banking details. For webshop purchases, we also require an e-mail address for order confirmation and a delivery address for order shipment.

All the mentioned data is collected as necessary; without it, it is not possible to conclude and fulfill a contract or execute your requests.

The central customer database is accessible, when needed, to our employees in stores, the webshop, and customer support in order to provide the services and support mentioned above.

FOR NEWSLETTER DELIVERY, AS WELL AS MANAGING RECIPIENT LISTS AND OBJECTION (UNSUBSCRIBE) RECORDS, WE USE THE MAILERLITE PLATFORM.

Recipients of Personal Data

Within legally permitted limits and depending on the type of processing, your data may be shared with the following partners:

  • IT service providers for software support and maintenance

  • Cloud software service providers

  • Payment service providers and banks

Data Retention Period

We retain your data for as long as there is a purpose for retention and processing:

  • Contractual documentation (accounting documents): 11 years (accounting regulations)

  • Reservations and quote requests: 6 months (in case of follow-up inquiries)

  • Claims for damages: 10 years from final decision or settlement (statute of limitations regulations)

  • Personal data in user profiles: until deactivation/closure of the profile

  • Customer support inquiries: 3 years (in case of repeated inquiries or complaints)

Unless otherwise stated, the retention period begins at the end of the calendar year in which the offer was made or the sales contract fulfilled.

If data necessary for fulfilling the sales contract is subject to tax obligations, the retention period extends to 10 years under tax regulations, during which processing is limited.

If the same data is used for multiple purposes, we retain it until the latest applicable retention period expires. However, we stop using the data for other purposes once their (shorter) retention periods end. Once the retention period expires, your data is either irreversibly anonymized (anonymized data may be retained) or securely deleted/destroyed.

Data Subject Rights

With regard to the collection and processing of your personal data, you have the following rights:

  • Right of access

  • Right to rectification

  • Right to erasure (“right to be forgotten”)

  • Right to restrict processing

  • Right to data portability

  • Right to object

Right of access
You have the right to obtain confirmation from us as to whether your personal data is being processed, and if so, access to that data and the following information: purpose of processing, categories of personal data concerned, recipients or categories of recipients, retention period, your rights, and sources of the data if not collected directly from you.

If your data is transferred and processed outside the EU, you have the right to be informed about the appropriate safeguards.

When possible, you may receive a copy of the personal data being processed.

Right to rectification
You have the right to obtain correction of inaccurate personal data concerning you without undue delay. Considering the purposes of the processing, you also have the right to complete incomplete data, including by providing a supplementary statement.

Right to erasure ("right to be forgotten")
You have the right to request deletion of your personal data without undue delay if there is no legal basis for its further processing (e.g., the data is no longer necessary for the purposes for which it was collected). If there is a valid legal reason for retention, we will inform you of it in response to your deletion request.

Right to restrict processing
You have the right to request restriction of processing in the following cases: if you contest the accuracy; if processing is unlawful and you oppose deletion; if the data is needed for legal claims but not for our purposes; or if you have objected to processing and are awaiting verification.

Right to data portability
You have the right to receive the personal data concerning you, which you provided to us, in a structured, commonly used, and machine-readable format, and to transmit that data to another controller, provided that:

  • the processing is based on your consent or a contract, and

  • the processing is carried out by automated means.

When exercising the right to data portability, you may request the direct transfer of data to another controller if technically feasible.

Right to object
If processing is based on our legitimate interests, you may object to such processing at any time to the extent that it concerns your data. If you object:

  • to direct marketing – we will no longer process your personal data for this purpose;

  • to other legitimate interests – we will stop processing your data unless we demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if processing is necessary for legal claims.

Contact for Exercising Rights

For all questions and requests regarding your personal data, please contact our data protection coordinators via email: info@nauticaradat.hr

We will handle your inquiries and requests without undue delay and in accordance with legal obligations, and inform you about the measures taken.

The cookie policy is an integral part of this Privacy Statement and can be accessed via the Cookies link at the bottom of every page on our website.

This Privacy Statement may be updated from time to time to reflect actual conditions and legal regulations. In case of significant changes, we will take appropriate measures to inform you promptly and appropriately about such updates.

Last updated: April 2, 2025