Privacy Policy

Effective Date: May 16, 2026

1. Introduction

Welcome to Karton Trade d.o.o. We operate the e-commerce website www.kartontrade.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and purchase our products. We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Croatian data protection laws.

2. Who We Are

Karton Trade d.o.o. is the data controller responsible for your personal data.

  • Company Name: Karton Trade d.o.o.
  • Website: www.kartontrade.com
  • Registered Address: Ulica Ante Jakšića 23, 10000 Zagreb, Hrvatska / Croatia
  • Email: briar@kartontrade.com
  • Phone: +385(99)8615537

3. Information We Collect

We collect several types of information from and about users of our website, including:

Personal Identification Information

  • Identity Data: Name, surname, username, or similar identifier.
  • Contact Data: Billing address, delivery address, email address, and telephone numbers.
  • Financial Data: Bank account and payment card details (processed securely via our payment gateways).
  • Transaction Data: Details about payments to and from you and other details of products you have purchased from us.

Technical and Usage Information

  • Technical Data: Internet protocol (IP) address, login data, browser type and version, time zone setting, browser plug-in types, operating system, and platform.
  • Usage Data: Information about how you use our website, products, and services.
  • Marketing Data: Your preferences in receiving marketing from us and your communication preferences.

4. How We Collect Your Data

We use different methods to collect data from and about you, including:

  • Direct Interactions: You give us your Identity, Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, or email. This includes data you provide when you create an account, buy products, subscribe to our newsletter, or request marketing material.
  • Automated Technologies: As you interact with our website, we automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies.
  • Third Parties: We receive technical data from analytics providers such as Google, and contact or transaction data from payment and delivery service providers.

5. How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:

  • To Perform a Contract: To register you as a new customer, process and deliver your order, manage payments, and collect money owed to us.
  • Legitimate Interests: To manage our relationship with you, notify you about changes to our terms or privacy policy, ask you to leave a review, administer and protect our business and website, and use data analytics to improve our website and customer experiences.
  • Consent: To deliver relevant website content and advertisements to you, and measure the effectiveness of the advertising we serve. You can withdraw consent to marketing at any time by contacting us.

6. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using the personal data described above depends on the personal data concerned and the specific context in which we collect it:

  • Performance of a Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
  • Compliance with Legal Obligation: Processing is necessary for us to comply with the law (such as tax and accounting obligations in Croatia).
  • Consent: You have given us clear consent to process your personal data for a specific purpose (e.g., direct marketing newsletter).
  • Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests do not override your fundamental rights.

7. Data Sharing and Disclosure

We do not sell, trade, or rent your personal identification information to others. We may share your personal data with selected third parties who perform services on our behalf, including:

  • Delivery Partners: Courier and postal services (e.g., DHL, DPD, Croatian Post) to deliver your purchased goods.
  • Payment Gateways: Secure payment service providers to process your transactions safely.
  • IT Support: Providers of IT, website hosting, and system administration services.
  • Professional Advisers: Lawyers, bankers, auditors, and insurers providing consultancy, legal, insurance, and accounting services in Croatia.
  • Legal Authorities: Regulatory authorities and law enforcement agencies when required by law.

All third-party service providers are required to respect the security of your personal data and to treat it in accordance with the law. We do not allow them to use your personal data for their own purposes.

8. International Data Transfers

Our business is operated in Croatia, and your data is stored within the European Economic Area (EEA). If we ever transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • We will transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
  • We may use specific contracts approved by the European Commission (Standard Contractual Clauses) which give personal data the same protection it has in Europe.

9. Data Security

We have put in place appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed.

In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

10. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and the applicable legal requirements.

For example, by law, we must keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for several years after they cease being customers for tax and legal compliance purposes in Croatia.

11. Your Legal Rights (GDPR)

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

  • Request Access: Receive a copy of the personal data we hold about you and check that we are lawfully processing it.
  • Request Correction: Have any incomplete or inaccurate data we hold about you corrected.
  • Request Erasure: Ask us to delete or remove personal data where there is no good reason for us continuing to process it.
  • Object to Processing: Object to the processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object.
  • Request Restriction: Ask us to suspend the processing of your personal data in certain scenarios.
  • Request Transfer: Request the transfer of your personal data to you or to a third party in a structured, commonly used, machine-readable format.
  • Withdraw Consent: Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of the rights set out above, please contact us directly via email at briar@kartontrade.com.

You also have the right to make a complaint at any time to the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka – AZOP), the Croatian supervisory authority for data protection issues (www.azop.hr). We would, however, appreciate the chance to deal with your concerns before you approach the AZOP, so please contact us first.

12. Cookies Policy

Our website, www.kartontrade.com, uses cookies to distinguish you from other users. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

Cookies are small text files placed on your device. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

13. Third-Party Links

This website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

14. Changes to This Privacy Policy

We keep our privacy policy under regular review. Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our privacy policy.

15. Contact Details

If you have any questions about this privacy policy or our privacy practices, please contact us using the details below:

  • Full Name of Legal Entity: Karton Trade d.o.o.
  • Email Address: briar@kartontrade.com
  • Postal Address: Ulica Ante Jakšića 23, 10000 Zagreb, Hrvatska / Croatia
  • Telephone Number: +385(99)8615537