Privacy Policy – croatia-med.com

Last Updated: 20 Feb. 2026
Main language: English (controlling language)

Main language: English (controlling language)

This Privacy Policy explains how Jana Dory Trade d.o.o. (“CroatiaMed”, “we”, “our”, “us”) processes personal data on croatia-med.com (the “Website”) in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable Croatian data protection laws.

1. Data Controller

The data controller responsible for processing personal data is:

Jana Dory Trade d.o.o.
Carla D‘Ambrosia 524
52466 Novigrad
Croatia

Email: legal@croatia-med.com

2. Personal Data We Collect

We may process the following categories of personal data:

Contact information (name, email address) if voluntarily provided
Account data (if user registration is available)
Technical data (IP address, browser type, device information)
Website usage data (only where analytics consent is given)

We do not intentionally collect special categories of personal data (such as health data). If users voluntarily submit such information, it is processed solely for the purpose of responding to their request.

3. Purpose and Legal Basis of Processing

a) Website Operation and Security

Legal basis: Article 6(1)(f) GDPR (legitimate interest)

This includes:

Server logs
Website security
Protection against misuse or fraud
Performance optimization (e.g., caching)

b) Analytics (Google Analytics 4)

Legal basis: Article 6(1)(a) GDPR (consent)

We use Google Analytics 4, provided by Google Ireland Limited, to understand general website usage patterns.

Analytics cookies are activated only after explicit user consent via the cookie banner.
If consent is not given, no analytics tracking takes place.

IP anonymization is enabled where applicable.

c) Communication

Legal basis: Article 6(1)(b) or 6(1)(f) GDPR

If you contact us via email or contact form, we process your data to respond to your inquiry.

4. Cookies and Technical Services

The Website uses:

Strictly necessary cookies (e.g., LiteSpeed Cache for performance and security)
Language preference cookies (translator functionality)
Google Analytics cookies (only after consent)

Non-essential cookies are not activated without prior consent.

Further details are provided in our Cookie Policy.

5. Data Sharing

We may share personal data with:

Hosting providers
IT and technical service providers
Google Analytics 4 (only if consent is provided)

We do not sell, rent, or trade personal data.
We do not use advertising networks.
We do not conduct behavioral tracking or profiling.

All service providers are contractually required to process personal data in compliance with applicable data protection laws.

6. International Data Transfers

Some service providers, such as Google Analytics 4, may process data outside the European Union.

Where such transfers occur, appropriate safeguards are applied in accordance with the GDPR, such as:

Standard Contractual Clauses approved by the European Commission, or
Transfers to countries with an adequacy decision.

7. Data Retention

Personal data is retained only for as long as necessary:

Server logs: limited retention period
Contact inquiries: until the request is resolved
Account data: until account deletion (if applicable)
Analytics data: according to configured GA4 retention settings

When no longer required, data is securely deleted or anonymized.

8. Your Rights

Under the GDPR, you have the right to:

Access your personal data
Rectify inaccurate data
Request erasure of your data
Restrict processing
Object to processing
Request data portability

You also have the right to lodge a complaint with:

Croatian Personal Data Protection Agency (AZOP)
or another competent supervisory authority within the European Union.

Requests may be sent to:
legal@croatia-med.com

9. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

10. Minors

The Website is not intended for children under 16 years of age.

If we become aware that personal data of a minor has been collected without appropriate consent, such data will be deleted without undue delay.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal or operational changes.

The latest version will always be available on the Website.

12. Contact Information

For questions, requests, or complaints regarding data protection:

Jana Dory Trade d.o.o.
Carla D‘Ambrosia 8
52466 Novigrad
Croatia

legal@croatia-med.com