Skip to content

Privacy

Privacy policy

Last updated: 28 July 2026

Informative translation. The legally binding version is the Croatian one; in case of any discrepancy it prevails. Contracts are concluded under Croatian law.

Here we explain which personal data we collect when you use our website, why we process it, with whom we share it, how long we keep it and what rights you have.

1. Controller

The controller of personal data is Modeco d.o.o. za proizvodnju, montažu i trgovinu.

  • Registered office: Ante Starčevića 249, 31400 Đakovo, Croatia
  • OIB: 29281110122
  • Telefon: +385 31 286 066
  • E-mail for data protection questions: [email protected]

You can send any enquiry about the processing of your data and any request to exercise your rights to the e-mail address given above or by post to the address of the registered office.

2. What data we collect and why

We collect only the data we need for a specific purpose. The table gives an overview by group.

DataPurposeLegal basisRetention period
Order data
name and surname or company name, delivery address and billing address, OIB, telephone, e-mail address, content of the order
processing and delivery of the order, issuing of invoices, communication about the order, complaintsperformance of the contract and compliance with legal obligations11 years from the end of the year to which the invoice relates, because of accounting and tax regulations
Enquiries from forms
name, e-mail address, telephone, content of the message, details of the building if you state them yourself
reply to the enquiry, preparation and sending of a quotelegitimate interest (reply to the enquiry made by the user) or consent where you have given it2 years from the last communication
Conversations with the AI assistant
content of the messages, contact details you enter yourself, IP address and technical session data
answering questions, preparing a quote, security and prevention of misuse, improving the quality of the servicelegitimate interest12 months
User account and sign-in
e-mail address, telephone number for the one-time SMS code, order history
opening and running the account, secure sign-in, overview of ordersperformance of the contractuntil the account is deleted, with the data on invoices retained because of the statutory periods
Visit analytics
identifiers from cookies, pages viewed, approximate location, type of device
measuring visits and improving the pagesconsentaccording to the settings of the tool, at most 14 months

Entering data is voluntary, but without the data marked as mandatory we cannot process an order or reply to an enquiry.

3. Processors

For the operation of the pages, for payment and for communication we use vetted service providers who process the data solely on our instructions and on the basis of a processing agreement:

ProviderWhat we use it for
Google (Firebase)database, user accounts and sign-in, file storage, analytics
Vercelhosting of the website and visit analytics
Stripeprocessing of card payments
Resendsending of transactional e-mail (order confirmations, notifications, quotes)
Twiliosending of SMS messages, including one-time codes for signing in
OpenAI i Anthropicprocessing of AI assistant enquiries and generation of answers
Sentrymonitoring of technical errors and of the stability of the application
Telegraminternal notifications to our team about new enquiries and orders; the message contains your name and contact details so that we can get back to you

In addition, we share data with carriers for the purpose of delivery, with our accounting service for the processing of invoices and with the competent authorities where we are required to do so by law. We do not sell your data and do not pass it on to third parties for marketing purposes.

4. Transfer of data outside the European Union

Some of the service providers listed process or store the data in the United States of America or in other countries outside the European Economic Area.

Such transfers are carried out on the basis of the appropriate safeguards provided for by the General Data Protection Regulation — the standard contractual clauses of the European Commission or the adequacy decision for the data protection framework between the European Union and the United States of America, where the provider is covered by it. You can request a copy of, or further information about, the measures applied at [email protected].

5. AI assistant

An AI assistant that answers questions about products and helps prepare a quote is available on the Croatian pages. If you use it, the following applies:

  • The content of the conversation and the data you enter yourself (for example name, contact details, dimensions and details of the building) are sent to a third-party AI model — OpenAI or Anthropic — in order to generate answers and prepare a quote.
  • The transcript of the conversation is stored by us, together with the IP address and basic technical session data, so that we can continue the communication, prepare a quote and prevent misuse. The retention period is 12 months.
  • We advise you not to enter sensitive data into the conversation — health data, financial data, passwords, card numbers or the data of other people without their knowledge. To complete a purchase, the data we ask for in the order form is sufficient.
  • Processing in the AI assistant does not constitute an automated decision producing legal effects within the meaning of Art. 22 of the General Data Protection Regulation — the assistant prepares a proposal, and every quote is reviewed and confirmed by a member of our staff before it is sent. The answers of the assistant are informative in nature and do not bind us until we confirm them with a written quote.

If you do not wish to use the assistant, contact us by telephone on +385 31 286 066 or by e-mail at [email protected].

6. Data security

We apply technical and organisational protection measures: an encrypted connection to the pages, role-based control of access to data, sign-in to the administration with additional verification of identity and regular updating of the system. We do not see or store card details — they are processed solely by the payment service provider.

7. Your rights

In relation to your personal data you have the right to:

  • access — confirmation as to whether we process your data and a copy of that data;
  • rectification of inaccurate data and completion of incomplete data;
  • erasure of the data where there is no longer a basis for the processing;
  • restriction of processing in the cases provided for by the Regulation;
  • data portability — receipt of the data in a machine-readable format and its transmission to another controller;
  • objection to processing based on legitimate interest;
  • withdrawal of consent at any time, without affecting the lawfulness of the processing carried out up to that point.

If you have a user account, you can also start the erasure of your data yourself in your profile, without sending a request. Please note that we have to retain the data contained in issued invoices until the statutory retention periods expire, even after the account has been deleted.

We reply to a request without delay, at the latest within one month. In order to protect your data we may ask for additional verification of identity.

8. Complaint to the supervisory authority

If you consider that we are infringing the regulations in the processing of your data, you have the right to lodge a complaint with the supervisory authority:

  • Croatian Personal Data Protection Agency (AZOP)
  • Selska cesta 136, 10000 Zagreb
  • azop.hr

We will be glad if you contact us before that — most questions we can resolve directly.

9. Cookies

Which cookies we use, which of them are necessary for the pages to work and which require your consent, is described on the page Cookie policy.

10. Changes to this policy

We may change this policy when our processing operations or the regulations change. The date of the last change is given at the top of the page, and we will notify you of material changes on the pages or by e-mail. The terms of purchase are set out in the General terms and conditions.

Contact

Modeco d.o.o. za proizvodnju, montažu i trgovinu

Ante Starčevića 249, 31400 Đakovo, Croatia · OIB 29281110122 · VAT ID HR29281110122
+385 31 286 066 · [email protected]