Privacy policy

This Privacy Policy describes how Grafko–Caspar d.o.o. ("we", "our", or "us") collects, uses, and protects your personal information when you visit or make a purchase from our website. We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

1. Who We Are – Data Controller

Grafko–Caspar d.o.o.
Ivana Sokača 6, 42000 Varaždin, Croatia
VAT ID: HR30402881876
Email: info@casparcreate.com
Phone: +385 42 332 555

We determine the purposes and means of processing your personal data and act as the Data Controller in accordance with the GDPR.

2. What Information We Collect

We may collect the following personal data:

  • Full name

  • Email address

  • Phone number

  • Shipping and billing address

  • Order history and preferences

  • IP address and browser data

  • Any communication you send us via email or contact forms

We do not collect or process sensitive personal data (e.g., health information, religious beliefs, biometric data).

3. How We Use Your Information

We use your information to:

  • Process and ship your orders

  • Send order updates and customer service responses

  • Respond to inquiries and messages

  • Provide discounts and volume quotes upon request

  • Improve our products and services

  • Ensure website functionality and security

  • Comply with legal obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Your consent

  • Contract performance (e.g. fulfilling your order)

  • Legal obligations (e.g., tax and accounting compliance)

  • Legitimate interest (e.g. improving customer experience)

5. How Long We Keep Your Data

We retain your data only as long as necessary for the purposes for which it was collected. This includes retention to comply with legal, accounting, or reporting requirements.

6. Sharing Your Information

We do not, and will not, sell your personal data to any third party.
However, in order to provide our products and services to you efficiently, we may share your data with the following categories of partners:

  • Logistics and delivery partners, who help us prepare and ship your orders

  • Payment processors, to complete and verify your transactions

  • Technical service providers, such as web hosting, analytics tools, and email platforms

  • Customer support platforms, which may temporarily store data you provide via email or contact forms (e.g. name, email, order number – for up to 90 days)

  • Legal authorities or advisors, if required by law or to resolve disputes

If you choose to connect your social media accounts (e.g. to upload files or access your account), we may receive limited information in line with the privacy settings of those services. We will never post on your behalf or access private content.

We may also use or share anonymized or aggregated data (which cannot identify you) to analyze website usage, improve performance, and develop new services.

All third parties we work with are contractually obligated to keep your data secure and GDPR-compliant.

7. International Data Transfers

Some of our third-party providers (such as hosting or analytics services) may process your data outside the EU. In such cases, we ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place.

8. Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

  • The right to be informed about how your personal information is collected and used (this Privacy Policy explains that).

  • The right to access the personal data we hold about you.

  • The right to request correction of any inaccurate or incomplete data.

  • The right to request deletion of your data or to restrict or object to its processing in certain circumstances.

  • The right to stop receiving direct marketing messages at any time (for example, by unsubscribing via email or account settings).

  • The right to withdraw your consent for any consent-based data processing at any time.

  • The right to data portability, which means you can request a copy of your data or ask that it be transferred to another service provider.

  • The right to lodge a complaint with a data protection authority if you believe we are not handling your personal data lawfully.

To exercise any of these rights, or if you have questions or complaints, please contact us at: info@grafko-caspar.hr

9. Children’s Privacy (Minors)

Our website and services are not intended for individuals under the age of 18.

We do not knowingly collect or process personal data from minors without verified parental or guardian consent.
If you are under 18, you may use our services only with the involvement and permission of a parent or legal guardian.

If we become aware that we have collected personal information from a minor without appropriate consent, we will delete that data as soon as possible.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at info@grafko-caspar.hr so we can take appropriate action.

10. How to File a Complaint

If you believe we are not handling your personal data in accordance with the law, you have the right to lodge a complaint with:

Cratian Personal Data Protection Agency (AZOP)
Selska cesta 136, 10000 Zagreb, Croatia
Web: https://azop.hr

You may also contact your local data protection authority within the EU.

We encourage you to contact us first so we can try to resolve your concern directly.

11. Information from Linked Accounts

If you choose to link your social media or third-party accounts (such as Facebook, Instagram, Google, etc.) to our website, we may receive limited information from those accounts in accordance with their privacy policies.

We may use this information to:

  • Allow you to log in quickly without creating a separate account

  • Enable faster uploads of designs or images from your social profiles

  • Simplify the ordering process and improve user experience

  • Show product recommendations or content that may be more relevant to you

We will never post on your behalf or access your private messages.
You can disconnect your social media accounts at any time through your settings or by contacting us.

12. Surveys, Competitions, and Promotions

When you participate in our surveys, competitions, or promotional offers, we may collect information such as your name, email address, responses, and other relevant details.

We use this information to:

  • Run the survey, competition, or promotion

  • Notify winners and deliver prizes or discounts

  • Improve our products, services, and customer experience

You provide this information voluntarily, but without it, you may not be able to fully participate or benefit from the offer.

We may also anonymize and aggregate your responses for internal analysis, such as testing systems, developing new products, or optimizing our website. These anonymized insights do not identify you personally.

13. Marketing Messages

We send marketing communications based on your consent or our legitimate interest in promoting relevant products or services to existing customers, in accordance with GDPR and Croatian e-commerce regulations.

You can stop receiving marketing emails from us at any time by:

  • Clicking the “unsubscribe” link at the bottom of any marketing email

  • Contacting us at info@grafko-caspar.hr

Please note: You may still receive transactional or service-related messages (such as order confirmations or shipping updates), even after unsubscribing from marketing communications.

14. Online Advertising and Retargeting

We use online advertising platforms such as Facebook Pixel, Google Ads, and other digital marketing networks to show you targeted ads based on your interactions with our website and ads.

These technologies use cookies, pixels, web beacons, mobile identifiers, and similar tools to collect information about your browsing behavior on our site and elsewhere online. These technologies help us deliver more relevant ads and promotions.

The ads you see may be based on your activity on our website, your previous purchases, or your engagement with our marketing materials.

You can manage or opt out of these targeted advertising services through your browser settings, privacy controls on social media platforms, or opt-out tools provided by advertising networks.

15. Changes to This Privacy Policy

We may update this Privacy Policy at any time. All changes will be posted on this page and take effect immediately. Please check this page regularly for any updates. Changes will take effect immediately upon posting on this page.

16. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, feel free to contact us:

Email: support@casparcreate.com
Phone: +385 42 332 555 (Monday–Friday, 7:00–15:00)