Data Privacy Statement

BERAN CLASSIC doo , Paklenička ulica 1, Zagreb, OIB: 23042093110 (hereinafter referred to as: the Company), in accordance with the provisions of Article 7 of the Personal Data Protection Act (Official Gazette, No. 106/12. – consolidated text) and the provisions of Article 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereby informs all users of the following provisions regarding the processing of personal data:

Privacy Statement

Valid from: August 2025.
This Privacy Statement applies to the Company and all of its websites and other applications. This Privacy Statement describes how we collect and use information , which may include personal information, that you provide on our websites. It also describes the choices available to you regarding our use of your personal information and how you can access and update that information.

This Privacy Statement is considered an addition to the General Terms and Conditions of the Enzo Professional web shop.

This Privacy Statement is published on the website www.enzoprofessional.hr and enzoprofessional.eu and applies to any and all users of the Company's services in terms of privacy, in particular with regard to the Personal Data Protection Act of the Republic of Croatia and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Data collection

The types of personal information we collect include:

your name, surname, e-mail address, telephone number and home address, personal identification number, ID card or passport identification number
A copied, scanned or photographed ID card or passport and date of birth may be collected for identification purposes, either at the request of the delivery driver or by the application. Biometric data (such as a facial photograph) from ID cards or passports, even when uploaded to our website or online application, will never be stored or processed. You may be denied service (e.g. delivery of a shipment if you do not provide your ID card or passport). Your bank account number may be collected for the purpose of transferring money when paying the recipient on delivery or your request for a refund when canceling a purchase and returning goods.

Video recordings may be collected at any of the Company's premises. If voice recordings are collected, we will always notify you. Video recordings are collected primarily for quality, security and fraud detection. The video recording may include your vehicle registration number.

Credit card information (card type, credit card number, name on the card, expiration date and security code) if a particular service offers payment by credit card in accordance with the credit card policies and credit card processors. Information you provide in connection with your marketing preferences or when participating in surveys, contests or promotional offers.

You can always choose what personal information (if any) you wish to provide to us. However, if you choose not to provide certain details, some of your transactions with us may be affected or you may be refused services.

Data we collect automatically

When you use our website, we also collect information automatically, some of which may be personal data. This includes information such as language settings, IP address, location, device settings, device operating system, login information, time of use, requested URL, status report, user agent (browser version information), operating system, browsing history, user IF of external services such as social networks (if you agree and explicitly allow this), and the type of data viewed. We may also collect information automatically through cookies.

Purposes of processing

We use your data for the following purposes:

A. Delivery information
We use your personal information to complete and manage your delivery requests or those of other parties involved in the delivery process, including the carrier, consignee, payee and our subcontractors, which may arise from your use of our online or offline services.

B. Customer Service
We use your personal information to provide the Company's services.

C. User reviews
We may use your information to send you an email invitation to write a customer review after we provide you with a service. This can help other users choose the service that best suits them. If you submit a user review, it may be published on our website.

D. Marketing activities
We also use your information for marketing purposes, to the extent permitted by law. When we use your personal information for direct marketing purposes (e.g. commercial newsletters and marketing communications about new products and services or other offers that we think will be of interest to you), we include a link to unsubscribe from receiving them if you do not want us to continue sending them to you.

E. Other communications
Depending on the information you have provided to us, we may contact you by email, post, phone or SMS. There may be several reasons for this.

a. We will take over and respond to your requests as needed.

b. If you have not completed your purchase or your shipment has not been delivered, we may send you an email or send you an SMS as a reminder to continue your delivery request, and in particular an email if a delivery exception occurs (e.g. the shipment was sent to the wrong address, the recipient was absent or similar events).

c. When you use our services, we may send you a questionnaire or invite you to write a review about your experience with our website. We believe that this additional service is useful for both you and us because we can improve our website based on your feedback.

F. Analysis, improvement and research
We use personal information to conduct research and analysis. We may engage third parties to conduct research on our behalf. We may share or disclose the results of such research (including to third parties) in an anonymous, aggregated form. We use your personal information for analytical purposes, to improve our services, to enhance the user experience, and to improve the functionality and quality of our online delivery services.

G. Security, fraud detection and prevention
We use information, which may include personal information, to prevent fraud and other illegal or unauthorized activities. We also use this information to investigate and detect fraud. We may use personal information for risk assessment and security purposes, including user authentication. For these purposes, personal information may be shared with third parties such as law enforcement agencies, all in accordance with applicable laws and external advisors.

H. Legal purposes and compliance
In certain cases, the information you provide to us, which may include personal information, is necessary to resolve legal disputes or complaints, for regulatory investigations and compliance, to enforce the agreement(s), or to comply with legal requests from law enforcement authorities if required by law.

If we use automated means to process personal data, which results in legal effects or significantly affects you, we will use reasonable measures to safeguard your rights and freedoms, including the right to human intervention.

We will never process personal data in automated decision-making that would place you in a subordinate position compared to other private individuals.

Legal basis

With respect to purposes A and B, we rely on the performance of a contract: The use of your data may be necessary to perform a contract that you or another party has entered into with us for the provision of delivery and purchase services. For example, if you use our services to order a product and have it delivered online or offline, we will use your data to fulfill our obligation to perform and manage that service under the contract we have entered into with you. In the absence of a separate contract, the General Terms and Conditions and the General Terms and Conditions for the Use of the Internet and Online Applications apply.

With respect to purposes C – H, we rely on legitimate interests: We use your information for our legitimate purposes, such as providing the best relevant content for the site, emails and newsletters, to improve and promote our products and services and the content on our website, administrative purposes, fraud detection and legal purposes. When using personal information for our legitimate purposes, we will always prioritize your rights and interests over our rights and interests in order to protect your data.

With respect to the purpose of H, we also, as applicable, rely on our obligation to comply with applicable laws.

If required by applicable law, we will ask for your consent before processing your personal data for direct marketing purposes.

If required by applicable law, we will ask for your consent. You may withdraw your consent at any time by contacting us at any of the addresses listed at the end of this Privacy Statement.

If you wish to object to the data processing specified under C – F, and no direct opt-out mechanism is available to you (for example, in your user account settings) to the applicable extent, please contact direktor@enzoprofessional.hr.

Data sharing

This may include personal information such as your name, contact details, payment details and any preferences or service requests you have indicated when placing a delivery order.

We share your information with our subcontractors, which include shipping companies and independent retailers, only for the purpose of processing your shipment from receipt to delivery and any related activities that may be involved (including, but not limited to, customer service). We do not sell or rent your information.

Competent authorities

We disclose personal information to law enforcement agencies and other government bodies if required by law or strictly necessary for the prevention, detection or prosecution of criminal offences and fraud.

International data transfers

The transfer of personal data described in this Privacy Statement may involve the transfer of personal data abroad to countries whose data protection laws are not as comprehensive as those of countries within the European Union. Where required by European law, we will only transfer personal data to recipients who offer an adequate level of data protection. In these situations, we enter into agreements to ensure that your personal data continues to be protected in accordance with European standards. You can request access to these agreements by contacting us at the contact details below.

Security

All of our business and online applications and partners implement reasonable measures to prevent unauthorized access to and misuse of information, including personal data. We use appropriate business systems and procedures to protect and safeguard information and personal data. We also use security procedures and technical and physical restrictions on access to and use of personal data on our servers. Access to personal data is permitted only to authorized personnel for business purposes.

Data retention

We will retain your information, which may include personal information, as we deem necessary to provide you with the service, comply with applicable laws, resolve disputes with any party, and to ensure the proper operation of our business and to detect and prevent fraud or other illegal activities.

All personal data we retain will be processed in accordance with this Privacy Statement. If you have any questions about the specific retention period for certain types of personal data we process about you, please contact us at the contact details provided below.

Delivery data from our core logistics computer system is archived (meaning your personal data is deleted from the system) automatically after a period of 18 months starting from the month after the service was provided.

Delivery data from our notification systems that may send you delivery information is archived (meaning your personal data is deleted from the system) automatically after a period of 60 days or less.

Voice and video recordings are automatically deleted within 60 days from the date they were collected.

We retain all e-mails permanently or for at least 11 years as they may contain information related to the provision of services that may be relevant for tax purposes and must be presented to the tax authorities in the Republic of Croatia. E-mail is an official form of communication and any request to correct, delete or change data in e-mails that could cause irrefutable tax risks will be automatically rejected.

Your options and rights

We want you to have control over how we use your personal information. You can do this in the following ways:

you can ask us for a copy of the personal data we hold about you
you can inform us of changes to your personal information or ask us to correct the personal information we hold about you
in certain situations, you can ask us to delete or block or limit the processing of personal data that we hold about you or make a complaint about the way we use your personal data

In certain situations, you can also ask us to send the personal information you have provided to us to a third party.

In the event that we use your personal data based on your consent, you have the right to withdraw that consent at any time in accordance with applicable law. Furthermore, in the event that we process your personal data based on a legitimate or public interest, you have the right to lodge a complaint at any time about the use of your personal data in accordance with applicable law.

We rely on you to ensure that your personal data is complete, accurate and up-to-date. Please notify us immediately of any changes or inaccuracies in your personal data by contacting us at direktor@enzoprofessional.hr. We will process your request in accordance with applicable laws.

Questions or complaints

If you have any questions or complaints regarding our processing of your personal data or would like to exercise any of the rights you have under this notice, please feel free to contact us at direktor@enzoprofessional.hr. You may also contact your local data protection authority with any questions or complaints.

Notification Changes

Given that our business is constantly changing, this Privacy Statement may also change from time to time. If you would like to review changes that may be made to this Privacy Statement from time to time, we encourage you to open the Privacy Statement and review the changes. If we make significant changes or changes that will affect you (for example, we start processing your personal data for purposes other than those listed above), we will contact you before starting to apply that process.

 

BERAN CLASSIC doo
Paklenicka ulica 1
10000 Zagreb
VAT number: 23042093110