Who controls your data
CONFLUX, obrt za trgovinu i usluge, vl. Ivan Lendvaj is the data controller for this webshop. The shop does not offer customer accounts or profiles; every purchase is made as a guest.
Data we process
When you place an order, we process the details needed to fulfil it: your name, email address, optional phone number, delivery address or selected parcel-locker details when delivery is selected, ordered products, prices, payment and fulfilment status, and our order communication.
When you contact us, we process the information you provide and the related correspondence. Technical security records may include IP address, request time, device/browser information and error information.
Why and on what basis
- Contract: receiving and fulfilling your order, reserving stock, arranging delivery or pickup, sending the Predračun and handling payment.
- Legal obligation: keeping records required by tax, accounting and consumer-protection rules and responding to valid authority requests.
- Legitimate interests: protecting the shop against fraud and misuse, maintaining system security, resolving disputes and keeping an operational order history. We balance these interests against your rights.
- Consent: only where we expressly ask for it, for example before any future non-essential analytics or marketing technology is activated.
How long we keep it
Order, payment and accounting records are kept for the period required by applicable tax, accounting and consumer law. Support and complaint correspondence is kept until the matter is resolved and for the applicable limitation period where needed to establish or defend legal claims. Security logs are retained only for the period reasonably needed for security and diagnostics.
Guest cart contents and checkout recovery identifiers stay in the current browser session and are removed when the session ends or after a completed checkout.
Your rights
Subject to the conditions in data-protection law, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.
Contact us to exercise a right. We may need to verify your identity. You may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).
Security and changes
We use access controls, restricted administrator accounts, encrypted connections and service-provider safeguards appropriate to the risk. No internet service can guarantee absolute security.
We update this notice when our processing or legal obligations change. The date at the top identifies the current version.
Contact Conflux
Questions, withdrawal notices and written complaints can be sent using the details below. We reply to written consumer complaints within 15 days.
CONFLUX, obrt za trgovinu i usluge, vl. Ivan Lendvaj
Trg Ante Starčevića 10, Osijek
MB: 98391429
OIB: 21729326818