Fredi & co. obrt za trgovinu i uslugu (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your personal information on www.b2bgifts.eu, in compliance with the GDPR and EU data protection laws.
By using our website, you agree to the terms of this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein.
1. Data Controller
Fredi & co. obrt za trgovinu i uslugu
Address: Pristava Krapinska 18a, 49000 Krapina, Croatia
Email: [email protected]
2. Personal Data We Collect
We collect and process personal data to provide services and improve your experience:
- Contact Information: Name, email, phone number, company name, billing and shipping addresses.
- Account Information: Username, password, and account preferences (if registered).
- Order Details: Products ordered, payment method, delivery information.
- Website Usage Data: IP address, browser type, pages visited, session duration, and interactions.
- Marketing Preferences: Newsletter subscription status, consent for marketing communication.
3. Purpose and Legal Basis for Processing
We process your data for the following purposes, with the corresponding legal basis:
| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling orders | Performance of a contract |
| Customer support and complaints handling | Legitimate interests |
| Marketing communications (newsletter, emails, SMS) | Consent |
| Website analytics and improvement | Legitimate interests |
| Compliance with legal obligations | Legal obligation |
4. Data Sharing and Third Parties
We do not sell your personal data. Data may be shared only with trusted partners, including:
- Delivery Services: GLS, TNT, UPS, DHL, Dachser – to ensure order shipment.
- Payment Providers: For secure payment processing.
- IT and Analytics Providers: For website hosting, analytics, and security.
- Legal Authorities: When required by law.
All third-party providers comply with GDPR requirements and are bound by confidentiality agreements.
5. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including legal and accounting obligations.
6. Your Rights
You have the following rights under GDPR:
- Access – Know which data we process about you.
- Rectification – Correct inaccurate or incomplete data.
- Erasure – Request deletion of your personal data.
- Restriction – Restrict the processing of your personal data.
- Objection – Object to processing for marketing or legitimate interests.
- Data Portability – Receive your data in a portable format.
- Withdraw Consent – At any time, free of charge.
- Complaint – Lodge a complaint with a supervisory authority.
To exercise your rights, contact us at: [email protected]
7. Cookies and Tracking
We use cookies and tracking technologies to improve website functionality and user experience. Cookies store information about your preferences, login status, and browsing behavior.
Cookie Categories
| Cookie Type | Purpose | Retention | Consent Required |
|---|---|---|---|
| Strictly Necessary | Essential for website functionality | Session | No |
| Preferences | Remembers user settings | 1 year | Yes |
| Analytics | Google Analytics to monitor traffic and usage | 2 years | Yes |
| Marketing | Newsletter subscription, advertising campaigns | 1 year | Yes |
Managing Cookies
You can manage, accept, or reject cookies via your browser settings. Refusing non-essential cookies may limit some website functionalities.
8. Marketing and Newsletter
By subscribing to our newsletter, you consent to receive marketing and informational messages via email, SMS, or phone. You can unsubscribe at any time via the “Unsubscribe” link.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse, including:
- Encryption technologies
- Access control measures
- Regular security assessments
10. Data Breach Notification
In case of a personal data breach, we will notify the relevant authorities and affected individuals within 72 hours as required by GDPR.
11. Updates to This Privacy Policy
This Privacy Policy may be updated from time to time. All changes will be posted on www.b2bgifts.eu, and updates take effect immediately upon publication.