Privacy Policy

This website is operated by a paušalni obrt registered in the Republic of Croatia.

Business name: Bombusmart

Registered seat: Ulica Antuna Kanižlića 5A, 31000 Osijek, Croatia

OIB: 58929171314

Contact email: info@bombusmart.com

The business is not registered in the VAT system, in accordance with Article 90 of the Croatian VAT Act.

Depending on how you use the website, we may collect the following data:

• Name and surname
• Email address
• Billing and delivery address
• Order and payment-related information
• IP address and technical data (browser type, device, cookies)
• Any information you voluntarily provide via forms or email

Legal Basis for Processing

In accordance with the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contractual Necessity (Art. 6(1)(b) GDPR): Processing is necessary to fulfill your order, process payments, and deliver products. Without this data, we cannot complete the purchase contract.
• Legal Obligation (Art. 6(1)(c) GDPR): We are required by Croatian law to retain certain information (such as billing data and OIB) for accounting, tax reporting, and archiving purposes.
• Consent (Art. 6(1)(a) GDPR): For non-essential actions, such as storing cookies for marketing, leaving comments, or subscribing to newsletters, we rely on your explicit and voluntary consent, which you may withdraw at any time.
• Legitimate Interest (Art. 6(1)(f) GDPR): We process data to ensure website security, prevent fraud (e.g., spam detection in comments), and improve our services through anonymized analytics.

When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string, to help with spam detection.

An anonymized string (hash) created from your email address may be provided to the Gravatar service to determine whether you use it. The Gravatar service privacy policy is available at: https://automattic.com/privacy/

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors to the website may be able to download and extract location data from images published on the site.

Our website uses cookies to ensure proper functionality and improve user experience.

Analytical and Marketing Cookies

• We may use third-party services (such as Google Analytics) that use cookies to collect information about how visitors use our site.
• This data is used to improve our services and may include information such as your IP address, browser type, and pages visited.
• These cookies are processed only with your prior consent, which you provide via the cookie consent banner when you first visit the website.
• You can manage, customize, or withdraw your consent at any time through your browser settings or the cookie management interface on our website.

Essential and Functional Cookies

• Comments: If you leave a comment, you may opt to save your name and email in cookies for one year.
• Login: Temporary cookies check browser acceptance and store login/screen preferences for durations ranging from two days to one year.
• Security: Technical cookies are used to protect the website and are essential for its operation.

For more details, please see our Cookie Policy.

Articles on this site may include embedded content (e.g. videos, images, articles). Embedded content from other websites behaves in the same way as if you visited the other website directly.

These third-party websites may collect data about you, use cookies, embed additional tracking, and monitor your interaction with that embedded content, especially if you are logged in to their services.

We do not sell personal data.

Personal data may be shared only when necessary with:

• payment service providers
• delivery and logistics partners
• IT and hosting providers
• legal or accounting service providers (where legally required)

If you request a password reset, your IP address may be included in the reset email.

• Comments and their metadata are retained indefinitely to enable automatic approval of follow-up comments.
• Registered users can view, edit, or delete their personal information at any time (except usernames).
• Order and billing data is retained as required by Croatian accounting and tax regulations.

You have the right to:

• Access your personal data
• Request correction or deletion of your data
• Restrict or object to processing
• Withdraw consent at any time
• Request data portability
• File a complaint with the Croatian Personal Data Protection Agency (AZOP)

Requests can be sent to: info@bombusmart.com

Visitor comments may be checked through an automated spam detection service.

We reserve the right to update this Privacy Policy at any time. Changes will be published on this page with an updated revision date.