Privacy Policy

Scope of this policy

This privacy policy explains how RINO METAL CRAFT d.o.o. ("we", "the company") collects, uses, stores, and protects personal data when you visit rinometalcraft.com and/or submit an inquiry via our contact form.

This policy applies to all language versions of the site (hr, en, de, es) and to all inquiries sent via the contact form on the Contact page or on individual product pages.

Data Controller

The data controller is RINO METAL CRAFT d.o.o., Vuići 7, 21231 Veliki Broćanac (Općina Klis), Croatia, OIB 92804972668, MBS 060509930.

For all questions regarding data protection and exercising your rights, contact us at: [email protected].

Data collected via the contact form

When you submit an inquiry via our contact form, we process the following data that you enter yourself:

• Full name (required) — to identify the sender and provide a personal response.

• Email address (required) — to reply to your inquiry and continue communication.

• Inquiry type (required) — to route your inquiry to the relevant product or service.

• Message (required) — the content of your inquiry or project description.

• Company / club / federation (optional) — if you are a business customer or organization.

• Phone (optional) — if you wish us to contact you by phone.

• Product of interest (optional) — if submitting from a product page or specifying a particular product.

We do not collect special categories of personal data (e.g. health data) and do not request such data via the form. Please do not include sensitive data in your message unless strictly necessary for your inquiry.

Technical data when visiting the site

When you visit the website, the server and hosting infrastructure may automatically record technical data necessary for operation and security, such as IP address, date and time of access, page URL, browser type, and operating system.

This data is used solely to ensure site operation, diagnose technical issues, and protect against misuse. We do not use it for profiling or marketing tracking.

The site loads fonts via Google Fonts (fonts.googleapis.com, fonts.gstatic.com). Google may process technical data such as your IP address for this purpose. More information is available in Google's privacy policy.

Purpose of Processing

We process contact form data solely for the following purposes:

• responding to your inquiry and providing requested information;

• preparing a quote or estimate for your project;

• further communication regarding orders, cooperation, or delivery;

• maintaining records of business inquiries for organizational purposes and protection of the company's legal interests.

We do not use your data for mass marketing, newsletters, or profiling without your explicit consent.

Legal Basis for Processing

For data you submit via the contact form, the legal basis is your consent (Art. 6(1)(a) GDPR), given by checking the consent box before submitting the form.

After you submit an inquiry, we may continue processing based on legitimate interest in responding to business inquiries and maintaining communication records (Art. 6(1)(f) GDPR), to the extent necessary to protect our legal and business interests.

If you enter into a contract or business cooperation with us, further processing may be based on contract performance (Art. 6(1)(b) GDPR) or legal obligations (Art. 6(1)(c) GDPR), such as accounting and tax requirements.

Recipients and Data Processors

We do not sell or rent your data to third parties. It is accessible only to authorized persons at RINO METAL CRAFT d.o.o. who need it to process inquiries.

For technical delivery of contact form messages, we use Web3Forms (api.web3forms.com), which acts as a data processor. Web3Forms forwards the form content to our email address [email protected].

We handle email communication via our email service provider. Website hosting is provided by our hosting provider within the EU/EEA or with appropriate safeguards.

We may disclose data only when explicitly required by law (e.g. to competent authorities) or when necessary to protect our rights.

Transfers outside the EU/EEA

Web3Forms and Google (Google Fonts) may process certain technical data on servers outside the European Union, including the USA. In such cases, transfers are based on applicable GDPR safeguards, such as standard contractual clauses or other mechanisms used by those service providers.

If you would like more information about data transfers via Web3Forms, contact us at the email address above.

Retention Period

We retain contact form data for as long as necessary to process inquiries and any potential business cooperation:

• inquiries that do not result in cooperation — up to 2 years from last communication, unless you withdraw consent earlier;

• inquiries resulting in an order or contract — for the duration of cooperation and thereafter within periods required by accounting and tax law (up to 11 years, depending on document type);

• hosting technical logs — according to hosting provider rules, typically up to 90 days.

After the retention period, we securely delete or anonymize data, unless law requires longer retention.

Data Security

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure. The website uses HTTPS encryption, and only authorized persons have access to inquiry data.

Although we take reasonable security measures, no internet data transfer is completely secure. We therefore cannot guarantee absolute security, but we work on continuous maintenance and improvement of security practices.

Automated Decision-Making and Profiling

We do not carry out automated decision-making or profiling that produces legal effects or similarly significantly affects you based on contact form data.

Voluntary Nature of Providing Data

Submitting the contact form is voluntary. However, without the required data (name, email, inquiry type, message) and your consent to processing, we cannot process your inquiry or respond to you.

Optional fields may be left blank without affecting other services on the site.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• right of access — to know what data we process about you;

• right to rectification — to correct inaccurate or complete incomplete data;

• right to erasure — to request deletion ("right to be forgotten"), subject to legal limitations;

• right to restriction of processing — in certain situations;

• right to object — to processing based on legitimate interest;

• right to data portability — to receive data you provided in a structured format;

• right to withdraw consent — at any time, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, send a request to [email protected]. We will respond without undue delay and within 30 days at the latest, except in complex cases where the deadline may be extended with explanation.

You also have the right to lodge a complaint with the supervisory authority: Croatian Personal Data Protection Agency (AZOP), Martićeva 14, 10000 Zagreb, www.azop.hr.

Withdrawal of Consent

If you gave consent via the contact form, you may withdraw it at any time by emailing [email protected] indicating that you withdraw consent to processing data from your inquiry.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. If processing is required to fulfill legal obligations or protect legal claims, we may retain data to the extent permitted by law.

Cookies and Third-Party Services

This website does not use analytics, advertising, or profiling cookies. We do not use Google Analytics, Facebook Pixel, or similar tracking tools.

Only technical cookies necessary for site operation or server sessions (SSR) may be used if set by the hosting infrastructure.

As noted, the site uses Google Fonts for typography. Google may process technical data for this purpose. Details are available in Google's privacy policy at policies.google.com/privacy.

Changes to this Privacy Policy

We may update this privacy policy from time to time to reflect changes in our business, technology, or legal requirements. The updated version will be published on this page with the date of last update.

For significant changes affecting contact form data processing, we will take reasonable steps to inform you, for example via this page.