Privacy
Privacy policy
Last updated: 28 July 2026
Here we explain which personal data we collect when you use our website, why we process it, with whom we share it, how long we keep it and what rights you have.
1. Controller
The controller of personal data is Modeco d.o.o. za proizvodnju, montažu i trgovinu.
- Registered office: Ante Starčevića 249, 31400 Đakovo, Croatia
- OIB: 29281110122
- Telefon: +385 31 286 066
- E-mail for data protection questions: [email protected]
You can send any enquiry about the processing of your data and any request to exercise your rights to the e-mail address given above or by post to the address of the registered office.
2. What data we collect and why
We collect only the data we need for a specific purpose. The table gives an overview by group.
| Data | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Order data name and surname or company name, delivery address and billing address, OIB, telephone, e-mail address, content of the order | processing and delivery of the order, issuing of invoices, communication about the order, complaints | performance of the contract and compliance with legal obligations | 11 years from the end of the year to which the invoice relates, because of accounting and tax regulations |
| Enquiries from forms name, e-mail address, telephone, content of the message, details of the building if you state them yourself | reply to the enquiry, preparation and sending of a quote | legitimate interest (reply to the enquiry made by the user) or consent where you have given it | 2 years from the last communication |
| Conversations with the AI assistant content of the messages, contact details you enter yourself, IP address and technical session data | answering questions, preparing a quote, security and prevention of misuse, improving the quality of the service | legitimate interest | 12 months |
| User account and sign-in e-mail address, telephone number for the one-time SMS code, order history | opening and running the account, secure sign-in, overview of orders | performance of the contract | until the account is deleted, with the data on invoices retained because of the statutory periods |
| Visit analytics identifiers from cookies, pages viewed, approximate location, type of device | measuring visits and improving the pages | consent | according to the settings of the tool, at most 14 months |
Entering data is voluntary, but without the data marked as mandatory we cannot process an order or reply to an enquiry.
3. Processors
For the operation of the pages, for payment and for communication we use vetted service providers who process the data solely on our instructions and on the basis of a processing agreement:
| Provider | What we use it for |
|---|---|
| Google (Firebase) | database, user accounts and sign-in, file storage, analytics |
| Vercel | hosting of the website and visit analytics |
| Stripe | processing of card payments |
| Resend | sending of transactional e-mail (order confirmations, notifications, quotes) |
| Twilio | sending of SMS messages, including one-time codes for signing in |
| OpenAI i Anthropic | processing of AI assistant enquiries and generation of answers |
| Sentry | monitoring of technical errors and of the stability of the application |
| Telegram | internal notifications to our team about new enquiries and orders; the message contains your name and contact details so that we can get back to you |
In addition, we share data with carriers for the purpose of delivery, with our accounting service for the processing of invoices and with the competent authorities where we are required to do so by law. We do not sell your data and do not pass it on to third parties for marketing purposes.
4. Transfer of data outside the European Union
Some of the service providers listed process or store the data in the United States of America or in other countries outside the European Economic Area.
Such transfers are carried out on the basis of the appropriate safeguards provided for by the General Data Protection Regulation — the standard contractual clauses of the European Commission or the adequacy decision for the data protection framework between the European Union and the United States of America, where the provider is covered by it. You can request a copy of, or further information about, the measures applied at [email protected].
5. AI assistant
An AI assistant that answers questions about products and helps prepare a quote is available on the Croatian pages. If you use it, the following applies:
- The content of the conversation and the data you enter yourself (for example name, contact details, dimensions and details of the building) are sent to a third-party AI model — OpenAI or Anthropic — in order to generate answers and prepare a quote.
- The transcript of the conversation is stored by us, together with the IP address and basic technical session data, so that we can continue the communication, prepare a quote and prevent misuse. The retention period is 12 months.
- We advise you not to enter sensitive data into the conversation — health data, financial data, passwords, card numbers or the data of other people without their knowledge. To complete a purchase, the data we ask for in the order form is sufficient.
- Processing in the AI assistant does not constitute an automated decision producing legal effects within the meaning of Art. 22 of the General Data Protection Regulation — the assistant prepares a proposal, and every quote is reviewed and confirmed by a member of our staff before it is sent. The answers of the assistant are informative in nature and do not bind us until we confirm them with a written quote.
If you do not wish to use the assistant, contact us by telephone on +385 31 286 066 or by e-mail at [email protected].
6. Data security
We apply technical and organisational protection measures: an encrypted connection to the pages, role-based control of access to data, sign-in to the administration with additional verification of identity and regular updating of the system. We do not see or store card details — they are processed solely by the payment service provider.
7. Your rights
In relation to your personal data you have the right to:
- access — confirmation as to whether we process your data and a copy of that data;
- rectification of inaccurate data and completion of incomplete data;
- erasure of the data where there is no longer a basis for the processing;
- restriction of processing in the cases provided for by the Regulation;
- data portability — receipt of the data in a machine-readable format and its transmission to another controller;
- objection to processing based on legitimate interest;
- withdrawal of consent at any time, without affecting the lawfulness of the processing carried out up to that point.
If you have a user account, you can also start the erasure of your data yourself in your profile, without sending a request. Please note that we have to retain the data contained in issued invoices until the statutory retention periods expire, even after the account has been deleted.
We reply to a request without delay, at the latest within one month. In order to protect your data we may ask for additional verification of identity.
8. Complaint to the supervisory authority
If you consider that we are infringing the regulations in the processing of your data, you have the right to lodge a complaint with the supervisory authority:
- Croatian Personal Data Protection Agency (AZOP)
- Selska cesta 136, 10000 Zagreb
- azop.hr
We will be glad if you contact us before that — most questions we can resolve directly.
9. Cookies
Which cookies we use, which of them are necessary for the pages to work and which require your consent, is described on the page Cookie policy.
10. Changes to this policy
We may change this policy when our processing operations or the regulations change. The date of the last change is given at the top of the page, and we will notify you of material changes on the pages or by e-mail. The terms of purchase are set out in the General terms and conditions.
Contact
Modeco d.o.o. za proizvodnju, montažu i trgovinu
Ante Starčevića 249, 31400 Đakovo, Croatia · OIB 29281110122 · VAT ID HR29281110122
+385 31 286 066 · [email protected]