Privacy Policy

Controller

ProArt Group d.o.o. (for the address, see the Legal Notice).

What data we process

• Order data (name, address, email, configuration of your product): for the performance of the contract, Art. 6(1)(b) GDPR. Retained in accordance with commercial and tax law retention periods.
• Payment data: processed by our payment service provider Stripe Payments Europe Ltd. (Ireland); we do not store any card details.
• Configuration previews: anonymous image files generated from your inputs, cached for performance.
• Uploaded photos (only for photo products): exclusively for producing your product. Originals are deleted after completion of the order (no later than 30 days after delivery), are never used for AI training, and are processed only via processor API services that do not use them for training.
• Location preset: Your IP address is assigned locally on our server to a city (DB-IP database) in order to prefill the configurator with your approximate location. The IP address does not leave our server and is not stored for this purpose (Art. 6(1)(f) GDPR).
• Server logs: IP address, time, page accessed — for operational security (Art. 6(1)(f) GDPR), deleted after 14 days.

Marketing/Statistics

Meta Pixel and comparable measurement tools are loaded only with your consent (consent banner). Without consent, no tracking takes place.

Your rights

Access, rectification, erasure, restriction, data portability, objection — simply by email. You also have the right to lodge a complaint with a data protection supervisory authority (for Croatia: AZOP, azop.hr).