1. Introduction
This Privacy & Data Protection Policy explains how we collect, process, and protect your personal data when you use our website and purchase our products.
We are committed to protecting your privacy and handling your data in a transparent and secure manner in accordance with the General Data Protection Regulation (EU 2016/679 – GDPR).
2. Data Controller
Cali obrt za usluge i trgovinu
Ulica Bjeliš 23, 35000 Slavonski Brod, Croatia
Email: calikonoplja@gmail.com
Website: https://calishop.net/en/
3. Personal Data We Collect
We may collect and process the following data:
Full name / company name
Billing and shipping address
Email address
Phone number
Payment information (processed securely via third-party payment providers)
Order history and purchase details
IP address and browser information
Customer support inquiries
4. Personal Data Collection and Storage
We collect personal data when customers place orders, contact us, create an account or subscribe to our newsletter.
Depending on how our website is used, the data collected may include names, billing and delivery addresses, email addresses, telephone numbers, order details, customer support messages and relevant technical information.
We use this information to process orders and payments, deliver products, communicate with customers, meet accounting and legal obligations, protect our website and prevent fraud.
Personal data is stored using appropriate technical and organisational security measures designed to protect it against unauthorised access, loss, alteration or disclosure.
We retain personal data only for as long as necessary for the purpose for which it was collected, taking into account applicable legal, tax and accounting obligations. Different categories of data may be subject to different retention periods.
Where processing is based on consent, such as certain marketing activities, the data is processed in accordance with that consent and applicable law. Customers may withdraw their consent where applicable.
When personal data is no longer required and no legal obligation requires its retention, it will be securely deleted or anonymised, where appropriate.
5. Legal Basis for Processing
We process your data based on:
Contract performance (order fulfilment)
Legal obligations (tax and accounting laws)
Legitimate interest (fraud prevention, service improvement)
Consent (marketing communications and newsletter, if subscribed)
6. Data Sharing
We do not sell personal data.
Where necessary to operate our online store, process orders and fulfil our legal obligations, we may share relevant personal data with service providers, including:
Payment service providers, including CorvusPay when a customer selects card payment.
Shipping and logistics providers responsible for delivering orders.
Accounting and professional service providers.
Website hosting, IT and security providers.
Analytics and marketing service providers, where applicable and in accordance with relevant consent requirements.
Personal data is shared only to the extent necessary for the relevant purpose. Service providers process personal data in accordance with applicable data protection legislation and the arrangements governing their services.
7. International Data Transfers
Some service providers (such as Google or Meta) may process data outside the EU/EEA. In such cases, data is protected using appropriate safeguards such as Standard Contractual Clauses (SCCs) in accordance with GDPR requirements.
8. Data Retention
We retain your personal data only as long as necessary for:
Order processing and contract fulfillment
Legal tax and accounting obligations (typically 7 years)
Customer support and dispute resolution
After this period, data is securely deleted.
9. Cookies
Our website uses cookies to:
Ensure website functionality
Improve user experience
Analyze traffic and performance
Support marketing activities
You can manage or disable cookies in your browser settings at any time.
10. Newsletter & Marketing
If you subscribe to our newsletter, we will use your email address to send updates and promotional content.
You may unsubscribe at any time via email or by contacting us at: calikonoplja@gmail.com
11. Your Rights Under GDPR
You have the right to:
Access your personal data
Request correction of inaccurate data
Request deletion of your data
Restrict processing
Object to processing
Data portability
Withdraw consent at any time
To exercise your rights, contact us at: calikonoplja@gmail.com
12. Data Security
We apply appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse.
13. External Services
We use trusted third-party services such as:
Payment processors
Shipping providers
Google Analytics and similar tools
IT and marketing service providers
These providers process data according to their own privacy policies and GDPR requirements.
14. Contact
For any questions regarding this Privacy Policy, contact us at:
Email: calikonoplja@gmail.com
Address: Ulica Bjeliš 23, 35000 Slavonski Brod, Croatia
15. Complaints
You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.