Pravila Privatnosti | Studio Marcela

Studio Marcela respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and Croatian legislation.

Last updated: 2024

1. Who are we?

Studio Marcela
Email: info@studiomarcela.hr
Website: www.studiomarcela.hr

Studio Marcela is the owner and controller of your personal data collected through our website and loyalty program.

2. What personal data do we collect?

We collect the following personal data through our loyalty program:

First and last name - for user identification
Email address - for communication and notifications
Phone number - for contact and reservations
Address - optional, for delivery and communication
Date of birth - optional, for personalized offers
Loyalty card number - for tracking the loyalty program

3. Why do we collect your personal data?

We collect and process your personal data for the following purposes:

Providing loyalty program services - managing your loyalty card, tracking discounts and rewards
Communication - responding to your inquiries and notifying you of service changes
Service improvement - analyzing how you use our services to improve them
Legal obligations - fulfilling legal obligations and requirements

4. Legal basis for data processing

We process your personal data based on:

Consent - when you have given consent to process your data
Contract performance - when necessary to provide loyalty program services
Legal obligation - when necessary to fulfill legal obligations
Legitimate interest - for improving our services and customer communication

5. How do we store your personal data?

Your personal data is stored and processed through a secure external loyalty program management system. Data is transferred via encrypted connections (HTTPS) and stored in secure databases.

We retain data only as long as necessary for the purposes stated in this Privacy Policy, or as required to fulfill legal obligations.

6. Sharing data with third parties

We share your personal data only with trusted service providers who help us provide the loyalty program. These service providers are required to respect data protection and use your data only for the purposes for which they are intended.

We do not sell, rent, or otherwise share your personal data with third parties for marketing purposes without your explicit consent.

7. Your rights

In accordance with GDPR, you have the following rights:

Right to access - you can request access to your personal data
Right to rectification - you can request correction of inaccurate or incomplete data
Right to erasure - you can request deletion of your personal data ("right to be forgotten")
Right to restriction of processing - you can request restriction of processing your data
Right to data portability - you can request transfer of your data to another service provider
Right to object - you can object to the processing of your data
Right to withdraw consent - you can withdraw your consent to data processing at any time

To exercise any of these rights, please contact us at: info@studiomarcela.hr

8. Data security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, destruction, or alteration. However, no data transmission system over the internet is 100% secure, so we cannot guarantee absolute security.

9. Cookies

Our website may use cookies to improve user experience. Cookies are small text files stored on your device. You can control and manage cookies through your web browser settings.

Data stored on your device

To make booking and signing in faster, the first name, last name, e-mail and phone number you enter when booking are kept in your browser's local storage. After you sign in with a code (WhatsApp or e-mail) on the Correction page we set a sign-in cookie valid for up to 12 months from last use, so you don't need a new code every time. This data stays on your device and is not shared with third parties. You can remove it with "Not you? Sign out" on the Correction page or by clearing your browser data; on request we also revoke the sign-in on all devices.

reCAPTCHA

We use Google reCAPTCHA on certain forms (e.g. booking, contact) to protect against spam and abuse. reCAPTCHA may process data such as your IP address and browser behaviour. This is governed by Google's Privacy Policy and Terms of Service. The reCAPTCHA badge may be hidden on our forms for a cleaner design, but the service is active. By submitting those forms, you acknowledge this use.

10. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy at any time. We will notify you of any significant changes via email or a notice on our website. We recommend that you regularly review this page to stay informed about how we protect your data.

11. Contact

If you have questions or concerns regarding this Privacy Policy or wish to exercise your rights, you can contact us at: