This Privacy Policy explains how Rustica Moderna d.o.o. ("Rustica Moderna", "we", "our", "us") collects, uses and protects personal data when you visit the website rusticamoderna.com or contact us through it.
This Privacy Policy has been prepared in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the ePrivacy Directive 2002/58/EC, and applicable national data protection laws in the Republic of Croatia. It should be read together with our Cookie Policy and Legal Notice.
01Who we are
The data controller responsible for the personal data processed through this website is:
Rustica Moderna d.o.o.
I. odvojak Duge ulice 8, Donja Lomnica
10410 Zagreb, Croatia
Email: info@rusticamoderna.com
Phone: +385 97 686 03 19
Court of registration: Commercial Court in Zagreb · MB 02513099 · OIB 63541597580
02Scope of this Policy
This Policy applies to personal data we collect through:
- The contact form on this website
- Direct correspondence by email, telephone or WhatsApp initiated through links on this website
- Technical data automatically generated by your visit (server logs)
This Policy does not apply to data exchanged after a business relationship begins (contracts, invoices, shipping documentation), which is governed by separate documents agreed between the parties.
03What data we collect
Information you provide to us
When you submit the contact form on this website, we collect: first name, last name, company name, country, business email address and the content of your message (which may include the brands you stock and your typical order volumes). When you contact us by email, telephone or WhatsApp, we receive the data you choose to share.
Information collected automatically
When you visit this website, our hosting provider's server logs automatically receive your IP address, browser type and version, operating system, the date, time and duration of your visit, and the pages viewed. This information is used solely for security, fraud prevention and the technical operation of the website.
What we do not collect
We do not knowingly collect special category data (such as data revealing racial or ethnic origin, political opinions, religion, health data or sexual orientation). We do not collect data from minors. This website is intended for B2B audiences only.
04Why we process your data
We process your personal data for the following purposes and on the following legal bases:
- To respond to your inquiry: based on our legitimate interest (Art. 6(1)(f) GDPR) in conducting B2B prospect outreach and replying to messages addressed to us. Where you initiate contact, we treat this as a clear request for engagement.
- To verify trade legitimacy (e.g., that an inquiry comes from a genuine business) before responding: based on our legitimate interest in protecting our business and our brand partners.
- To maintain the security and proper operation of the website: based on our legitimate interest in preventing abuse, attacks and downtime.
- To comply with legal obligations (e.g., Croatian tax and accounting law, if a business relationship begins): Art. 6(1)(c) GDPR.
We do not use your data for automated decision-making, profiling or behavioural advertising.
05Service providers we work with
To operate this website, we use the following service providers, which act as data processors on our behalf under written agreements:
We do not sell, rent or trade personal data to third parties. We do not share your data with any party other than the processors listed above and the legal authorities, where required by law.
06International data transfers
Most processing happens within the European Economic Area. Where data is transferred to a country outside the EEA (specifically, to Formspree in the United States), we rely on the European Commission's Standard Contractual Clauses (Module 2: Controller to Processor) to ensure an adequate level of protection.
If you click the WhatsApp link, the subsequent communication takes place on Meta's infrastructure, which involves transfers outside the EEA under Meta's own legal framework. Please consult WhatsApp's Privacy Policy for details.
07How long we keep your data
- Contact form submissions and email correspondence: kept for up to 24 months from the date of last contact, then deleted, unless a business relationship has begun.
- Records relating to a commercial relationship (orders, invoices, shipping documentation): retained for 11 years as required by Croatian accounting law.
- Server logs: kept for up to 90 days, then deleted or anonymised.
08Your rights under the GDPR
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request erasure of your data (right to be forgotten)
- Restrict or object to our processing
- Receive your data in a structured, machine-readable format (data portability)
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with a data protection supervisory authority
To exercise any of these rights, please contact us at info@rusticamoderna.com. We will respond within 30 days. There is no fee for exercising your rights, unless your request is manifestly unfounded or excessive.
If you are not satisfied with our response, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency:
Agencija za zaštitu osobnih podataka (AZOP)
Selska cesta 136, 10000 Zagreb, Croatia
Web: azop.hr
If you reside in another EU member state, you may also lodge a complaint with the supervisory authority in your country of residence.
09Cookies
This website does not currently use cookies for tracking, analytics or advertising. If, in the future, we introduce non-essential cookies (for example, analytics), they will only be loaded after you have given explicit consent through our cookie banner. For full details, please consult our Cookie Policy.
10Security
We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration or destruction. These include TLS/HTTPS encryption of all communication with this website, restricted access to inquiries received through the form and regular security updates on our hosting infrastructure. No method of transmission over the internet is completely secure, but we apply industry-standard practices.
11Children
This website is intended for B2B audiences only. We do not knowingly collect personal data from anyone under the age of sixteen. If you believe a minor has submitted personal data through this website, please contact us so we can promptly delete it.
12Updates to this Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be highlighted on the website where reasonable. We encourage you to review this page periodically.
13Contact
For any privacy-related question, or to exercise the rights described above, please contact us:
Rustica Moderna d.o.o.
I. odvojak Duge ulice 8, Donja Lomnica, 10410 Zagreb, Croatia
Email: info@rusticamoderna.com
Phone: +385 97 686 03 19