Privacy policy

Last updated: 7 October 2026

We use your personal data only to run the shop, deliver your order and, if you agree, to send you news. You can ask us to see, correct or delete your data at any time.

1. Who is responsible for your data

The controller of your personal data is Udruga Maritimo Recycling, Eugena Kumičića 19, 20000 Dubrovnik, Croatia (OIB 88901190107). Contact for all privacy questions: info@maritimo-recycling.com, +385 98 214 028.

2. What data we collect, why, and on what legal basis

Purpose

Data

Legal basis (GDPR)

Processing and delivering your order, customer support

Name, address, email, phone, order details, messages to us

Performance of a contract (Art. 6(1)(b))

Payments

Payment details are handled by our payment providers; we receive confirmation and transaction data

Performance of a contract (Art. 6(1)(b))

Invoices, accounting and tax

Order and invoice data

Legal obligation (Art. 6(1)(c))

Preventing fraud and keeping the Website secure

IP address, device and order information

Legitimate interest (Art. 6(1)(f))

Newsletter and marketing emails

Email address, name, how you interact with our emails

Consent (Art. 6(1)(a))

Website statistics and advertising

Device, browser, pages visited, cookie identifiers

Consent (Art. 6(1)(a)), given through our cookie banner

Answering your enquiries and complaints

Contact details and the content of your message

Legitimate interest (Art. 6(1)(f)) and, where relevant, contract

3. Who we share data with

We use several third-party tools to run the Website, process orders, measure how it is used, advertise and send emails. They include Shopify (the platform that hosts our store and checkout), payment service providers, GLS (delivery), analytics tools, advertising tools and email marketing tools. Where they handle data on our behalf, they do so under our instructions and a data processing agreement. Some of them, such as analytics and advertising tools, act under their own privacy policies and only after you accept the relevant cookies. We may also share data when the law requires it, for example with tax authorities. We do not sell your personal data.

4. Transfers outside the EU

Some of our providers, including Shopify, may process data outside the European Economic Area. When this happens, we rely on safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

5. Our relationship with Shopify

Our store is hosted by Shopify, which collects and processes personal data about how you access and use the Website, in order to provide and improve the service. Information you submit is transmitted to and shared with Shopify and with third parties that may be located in other countries. To help protect and improve our business, we also use certain Shopify features that use data from your interactions with our store, with other merchants and with Shopify. For these purposes Shopify is responsible for the processing of your personal data, including for answering your requests to exercise your rights. To learn more, see the Shopify Consumer Privacy Policy. To exercise your rights with Shopify, use the Shopify Privacy Portal.

6. How long we keep your data

  • Order and invoice data: for as long as Croatian accounting and tax law requires.
  • Messages and complaints: for as long as needed to deal with them, and complaint records for at least one year.
  • Newsletter: until you unsubscribe.
  • Cookie-based data: according to the lifetime of each cookie, as shown in our Cookie Policy.

7. Your rights

You have the right to access your data, correct it, have it deleted, restrict or object to its processing, receive it in a portable format, and withdraw your consent at any time (this does not affect processing done before). To use any of these rights, email info@maritimo-recycling.com. We answer within one month. You can unsubscribe from marketing emails at any time with the link in every email.

8. Complaints

If you think we have handled your data unlawfully, please contact us first. You also have the right to complain to the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP, www.azop.hr) or to the data protection authority in the country where you live.

9. Children

The Website is not meant for children, and we do not knowingly collect their personal data. If you believe a child has given us personal data, email us and we will delete it.

10. Security

We take reasonable technical and organisational measures to protect your data. No online service is perfectly secure, so please avoid sending sensitive information by email.

11. Cookies

We explain which cookies we use, and how to change your choice, in our Cookie Policy.

12. Changes

We may update this policy. We will change the date at the top and, if the changes are significant, tell you on the Website.