Privacy policy

General information

This Privacy Policy explains how VENTORIA društvo s ograničenom odgovornošću za usluge, Kozlikovo 13, 10450 Kozlikovo, OIB (personal identification number): 73884672707, Reg. no. (MBS): 081720809, collects, uses and protects the personal data of users of the website www.ventoria.hr.

Ventoria respects the privacy of users and processes personal data in accordance with the applicable regulations of the Republic of Croatia and the General Data Protection Regulation (GDPR).

What data we collect

We collect personal data when the user voluntarily provides them to us via the contact form, the enquiry form, e-mail, telephone or another form of communication.

The data we may process include first name and surname, company name and its OIB, address and delivery address, e-mail address, telephone number, message content, details of the products and quantities for which the user sends an enquiry, and other data that the user voluntarily provides in the course of communication with Ventoria.

The website may also automatically collect certain technical data, such as the IP address, device type, browser, operating system, time of access and data on the use of the website, depending on the cookie settings and the user’s consent.

Purpose of processing personal data

Personal data are used solely for the purposes for which they were collected.

We may process data in order to respond to enquiries, prepare and send quotes, process orders, communicate with customers, perform contractual obligations, provide customer support, comply with legal obligations and improve the functionality and security of the website.

If the user gives separate consent to marketing communications, the data may also be used to send notifications about products, services and news.

Legal basis for processing

We process personal data on the following legal bases under Article 6(1) of the General Data Protection Regulation:

• responding to enquiries and preparing quotes – taking steps at the request of the user prior to entering into a contract (point (b)),
• processing orders, delivery and communication relating to the contract – performance of the contract (point (b)),
• issuing invoices and retaining business documentation – compliance with Ventoria’s legal obligations (point (c)),
• responding to messages sent via the contact form, protecting the website and forms against misuse and unsolicited messages, and exercising and defending legal claims – Ventoria’s legitimate interest (point (f)),
• sending marketing notifications as well as analytics and marketing cookies – the user’s consent (point (a)).

Where processing is based on legitimate interest, Ventoria has assessed that this interest is not overridden by the interests, rights and freedoms of the user. The user may object to such processing at any time.

Where processing is based on consent, the user has the right to withdraw consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Is providing data mandatory?

The provision of personal data is voluntary. The data requested as mandatory in the enquiry form or the contact form are necessary for us to respond to the enquiry, prepare a quote, and enter into and perform a contract – without them, we cannot process the enquiry or order.

The data needed for issuing invoices are mandatory by law.

Retention of personal data

Personal data are retained only for as long as is necessary to fulfil the purpose for which they were collected or for as long as required by the applicable legal regulations.

Data related to business documentation, invoices, quotes and contractual relationships may be retained for the statutory periods. Invoices and other bookkeeping documents are retained for at least 11 years, as prescribed by the Accounting Act (Zakon o računovodstvu).

Data processed on the basis of consent are retained until consent is withdrawn, and thereafter only if there is another legal basis for doing so.

Enquiries sent via the enquiry form that did not result in a purchase are retained for a maximum of 12 months from the last communication with the user, and messages sent via the contact form for as long as is necessary for the response and further communication with the user. If a contractual relationship arises from an enquiry, the data are retained for the periods prescribed for business documentation.

Data collected through Google Analytics are retained for a maximum of 14 months, and the record of the selected cookie settings (the cc_cookie cookie) for 6 months.

Sharing data with third parties

Ventoria does not sell or pass on users’ personal data to third parties for commercial purposes.

Data may be shared with trusted processors that provide Ventoria with technical, hosting, IT, accounting, delivery or other related services (including Google Ireland Limited for Google Analytics and Google reCAPTCHA), solely to the extent necessary to perform those services and subject to appropriate data protection obligations.

Data may also be provided to the competent authorities where there is a legal obligation to do so.

Transfer of data outside the European Economic Area

If certain service providers process data outside the European Economic Area, Ventoria will ensure that the transfer is carried out in accordance with the applicable personal data protection regulations and subject to appropriate safeguards, for example on the basis of an adequacy decision of the European Commission (including the EU-U.S. Data Privacy Framework) or standard contractual clauses adopted by the European Commission.

The user may request information on the safeguards applied to such a transfer.

User rights

The user has the right to request access to their personal data, rectification of inaccurate data, erasure of data, restriction of processing and data portability, and to object to processing, where the legal conditions for this are met.

The user may at any time object to the processing of personal data for direct marketing purposes, after which the data will no longer be processed for such purposes.

The user also has the right to withdraw previously given consent.

To exercise their rights, the user may contact Ventoria at the e-mail address info@ventoria.hr. We respond to a request without undue delay and at the latest within one month of its receipt.

If the user believes that their rights have been infringed, they have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

Automated decision-making

Ventoria does not make decisions based solely on automated processing, including profiling, which would produce legal effects concerning the user or similarly significantly affect them.

Data security

Ventoria applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or destruction.

Despite the measures taken, no method of transmitting or storing data over the internet can be considered completely secure.

Cookies and analytics tools

The website may use cookies and similar technologies (for example the browser’s local storage) for proper functioning, improvement of the user experience, analytics and marketing.

Cookies that are not necessary are not activated without the user’s prior consent.

Google Analytics 4. With the user’s consent (Article 6(1)(a) of the General Data Protection Regulation), the website uses Google Analytics 4, a service provided by Google Ireland Limited, to monitor, in aggregated form, page traffic and the way visitors reach content. Pseudonymous identifiers from cookies, data on the pages visited, the device and browser, and approximate location are processed; Google Analytics 4 does not store IP addresses. Consent can be withdrawn at any time via the Cookie settings link.

Google reCAPTCHA. When Google reCAPTCHA protection is enabled on the contact form, Google Ireland Limited processes technical data about the device and browser (including the IP address) and data on interaction with the form in order to distinguish humans from automated programs. The processing is based on Ventoria’s legitimate interest in protecting the form against misuse (point (f)). Google’s Privacy Policy and Terms of Service also apply to this processing.

Google may also process data from these services in the United States of America; Google LLC is certified under the EU-U.S. Data Privacy Framework.

Detailed information on the use of cookies, including a list of cookies, is available on the Cookies page.

Changes to this Privacy Policy

Ventoria reserves the right to amend this Privacy Policy in order to align it with changes in legal regulations, business processes or the functionality of the website.

The updated version will always be published on this website.

This Privacy Policy applies from 8 October 2026.

Contact

For any questions relating to privacy and the processing of personal data, you can contact:
VENTORIA društvo s ograničenom odgovornošću za usluge
Kozlikovo 13, 10450 Kozlikovo
OIB: 73884672707
E-mail: info@ventoria.hr

This English version is a translation provided for convenience. In the event of any discrepancy between the Croatian and the English version, the Croatian version shall prevail.