PRIVACY AND COOKIE POLICY
Last updated: August 2026

At ZÁZA (zaza.hr), operated by ANAMARIJA, obrt za trgovinu, modni dizajn i usluge, we take the protection of your personal data very seriously. This Privacy Policy explains how we collect, use, and protect your personal information in compliance with the EU General Data Protection Regulation (GDPR) and applicable Croatian laws.

1. Data Controller
The entity responsible for processing your data is:
ANAMARIJA, obrt za trgovinu, modni dizajn i usluge
Put Meja 20, 21000 Split, Croatia
OIB (Tax ID): 24356999686
Email: shop@zaza.hr

2. Personal Data We Collect
When you visit our site or place an order, we collect personal information necessary to fulfill your purchase, including:
• Name and Surname
• Shipping and Billing Address
• Phone Number (required for delivery notifications)
• Email Address
• Payment information (processed securely via payment gateways)
• IP Address, browser information, and website usage data

3. Purpose of Processing & Legal Basis
We process your personal data strictly for the following purposes:
• Processing, fulfilling, and delivering your orders (Legal basis: Performance of a contract).
• Issuing invoices, sending order confirmations, and providing tracking details (Legal basis: Performance of a contract / Legal obligation).
• Fraud prevention and secure payment processing (Legal basis: Legitimate interest).
• Responding to customer support inquiries and managing consumer complaints (Legal basis: Legitimate interest / Legal obligation).
• Analyzing website performance and user behavior via analytics tools (Legal basis: Explicit consent).
• Complying with statutory accounting and tax obligations in Croatia (Legal basis: Legal obligation).

4. Third-Party Data Sharing & International Transfers
We do not sell, rent, or trade your personal data to third parties. We only share necessary data with trusted service providers strictly to perform essential functions:
• Delivery Services: GLS, BOX NOW (Name, address, and phone number for delivery purposes).
• Payment Processors: WooPayments / Stripe (Payment details are processed in a fully secure, encrypted environment; we do not store credit card details).
• Analytics Services: Google Analytics / Google LLC (Anonymized traffic analysis).
• IT, Hosting & Platform Infrastructure: Web hosting providers and WooCommerce support services.

Certain service providers (e.g., Google, Stripe) may transfer data outside the European Economic Area (EEA). Such transfers are conducted with appropriate safeguards in place pursuant to the GDPR (such as Standard Contractual Clauses and the EU-US Data Privacy Framework).

5. Data Retention
We retain your order information for as long as necessary to fulfill the purposes for which it was collected. Accounting documentation and invoices are retained for 11 years in compliance with Croatian statutory regulations. Analytical data collected via Google Analytics is retained in accordance with Google’s data retention settings (typically 2 to 14 months).

6. Your Rights Under GDPR
Under EU law, you have the following rights regarding your personal data:
• Right to access, rectify, and erase (“Right to be Forgotten”) your personal data.
• Right to restrict processing and object to processing.
• Right to data portability to another controller.
• Right to withdraw consent at any time for analytical cookies.
• Right to lodge a complaint with a supervisory authority: Croatian Data Protection Agency (AZOP, Selska cesta 136, Zagreb, www.azop.hr).

7. Automated Decision-Making
We do not use automated decision-making or profiling on our website that produces legal or similarly significant effects on you.

8. Cookie Policy
• Essential Cookies: Necessary for basic website functionality (shopping cart navigation, secure checkout, language preferences) and cannot be disabled.
• Analytical Cookies (Google Analytics): Used to measure site traffic and improve our services. These cookies are stored ONLY with your explicit consent given via our cookie banner.

You can manage, change, or withdraw your cookie preferences at any time via the cookie banner on our website or through your web browser settings.

Contact Us
For any questions or to exercise your privacy rights, please contact us at: shop@zaza.hr.