top of page
image001477-1.png

PRIVACY POLICY

AC Commerce and Services

This Privacy Policy is provided pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) and describes how personal data of users who visit and use the website are processed.

1. Data Controller

The Data Controller is:

AC Commerce and Services
Kmeti 21
52470 Kmeti, Umag
Croatia
Email: ac.servicesdoo@gmail.com

The Data Controller determines the purposes and means of processing personal data.

2. Types of Data Processed

The Data Controller may process the following categories of personal data:

a) Browsing Data

Data collected automatically during website use, including:

  • IP address;

  • access data;

  • device and browser information;

  • pages visited and time spent on the site.

b) Data Voluntarily Provided by the User

  • first and last name;

  • email address;

  • phone number;

  • shipping and billing address;

  • data necessary for order management (in the case of e-commerce);

  • any messages sent via the contact form.

c) Payment Data

Payments are processed through third-party providers (e.g., banking circuits or payment platforms integrated into Wix).
The Data Controller does not store full credit card details.

3. Purpose of Processing and Legal Basis

Personal data are processed for the following purposes:

PurposeLegal Basis

Website navigation and functionalityLegitimate interest (Art. 6(1)(f) GDPR)

Order and contract managementPerformance of a contract (Art. 6(1)(b) GDPR)

Responding to contact requestsPre-contractual measures

Tax and accounting obligationsLegal obligation

Marketing and newsletter (if activated)User consent

Profiling and personalized advertisingExplicit consent

4. Processing Methods

Data processing is carried out using electronic and IT tools, in compliance with the principles of:

  • lawfulness;

  • fairness;

  • transparency;

  • data minimization;

  • integrity and confidentiality.

Appropriate technical and organizational measures are adopted to protect data against unauthorized access, loss, or destruction.

5. Platform Used

The website is built using Wix, which acts as a data processor pursuant to Article 28 GDPR.

Wix may process data on behalf of the Data Controller, including hosting, security, and technical website management data.

6. Data Recipients

Data may be disclosed to:

  • IT service and hosting providers;

  • tax and accounting consultants;

  • couriers and shipping companies;

  • payment platforms;

  • analytics and marketing service providers, including:

    • Google LLC

    • Meta Platforms Inc.

These entities process data as data processors or independent data controllers.

7. Transfer of Data Outside the EU

Some data may be transferred to countries outside the EU (e.g., the United States).

Such transfers are carried out in compliance with Articles 44 et seq. of the GDPR, through:

  • adequacy decisions of the European Commission;

  • Standard Contractual Clauses (SCCs);

  • possible adherence to the Data Privacy Framework (where applicable).

8. Data Retention Period

Personal data are retained for the time necessary to achieve the purposes for which they were collected:

  • contractual data: 10 years (tax obligations);

  • marketing data: until consent is withdrawn;

  • browsing data: as indicated in the Cookie Policy.

9. Data Subject Rights

Pursuant to Articles 15–22 of the GDPR, users have the right to:

  • access their personal data;

  • request rectification;

  • request erasure (“right to be forgotten”);

  • restrict processing;

  • object to processing;

  • request data portability;

  • withdraw consent at any time;

  • lodge a complaint with the competent supervisory authority.

Requests may be sent to:
📧 ac.servicesdoo@gmail.com

10. Nature of Data Provision

Providing personal data is:

  • mandatory for the conclusion of a purchase contract;

  • optional for marketing purposes.

Failure to provide mandatory data may result in the inability to provide the requested service.

11. Minors

The website is not intended for individuals under the age of 18.
The Data Controller does not knowingly collect personal data from minors.

12. Changes to This Privacy Policy

This Privacy Policy may be updated at any time.
Users are encouraged to review it periodically.

bottom of page