Privacy Statement
1. Data controller within the meaning of Art. 4(7) GDPR
Insignum d.o.o.
Rujanska 11
10000 Zagreb
Croatia
Phone: +385 1 777 0 111
E-mail: vrbani@insignum.hr
2. Contact form / e-mail / phone / pickup request
Purpose / legal basis: Data you provide via the contact form, phone, e-mail or pickup request is used solely to handle your enquiry. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in responding to customers and visitors), or Art. 6(1)(b) where processing is necessary for pre-contractual steps or performance of a pickup service contract.
Recipients: We generally do not share data outside Insignum. Processors (e.g. courier for pickup) act on our instructions under Art. 28 GDPR. Where parts of a request must be forwarded to partners, we anonymise where possible and seek your consent before sharing personal data further.
Retention: Contact enquiry data is deleted or anonymised within 90 days after our last reply. Pickup-related data is kept for up to 180 days from receipt of the request for delivery verification, complaints and similar transport-related queries.
3. Web shop and payment
Purpose / legal basis: When you place an order we process data needed to perform the contract (name, address, phone, e-mail, order details, payment and delivery method). Legal basis: Art. 6(1)(b) GDPR, and where applicable Art. 6(1)(c) for statutory obligations (e.g. accounting).
Payment: We do not store card numbers on our server. Card payments are processed via Corvus Pay (Corvus info d.o.o., Buzinski prilaz 10, 10010 Zagreb, Croatia) under their rules. Bank transfer uses data you enter at checkout.
Recipients: Processors may include Corvus Pay (payment), GLS or other carriers (delivery), and IT/hosting providers. Art. 28 GDPR agreements are in place where required.
Retention: Order and customer data are kept as long as needed to fulfil the contract, warranty and complaint periods and statutory business record obligations. Afterwards data is deleted or anonymised unless further retention is legally required.
4. Customer accounts and newsletter
Account: If you register, we process account data (e.g. name, e-mail, address) to provide access to orders and the shop. Legal basis: Art. 6(1)(b) GDPR. Inactive accounts (no login or order) are automatically deleted after 90 days of inactivity.
Newsletter: Marketing e-mails are sent only with your consent (Art. 6(1)(a) GDPR). You may withdraw consent via the unsubscribe link in e-mails or by writing to webshop@insignum.hr.
5. Use of cookies
This website uses cookies — small files stored in your browser. They help the site work, remember settings and, with consent, basic order-related traffic attribution.
You can manage consent via the CookieYes banner (“Settings”). Necessary cookies remain always active. See What are cookies? and the CookieYes preference centre for details.
5.1 Cookie categories we use
Necessary — always active (Art. 6(1)(f) GDPR): CookieYes consent (cookieyes-consent), WooCommerce cart/session, WordPress login test cookie, Google reCAPTCHA (_GRECAPTCHA) for form protection.
Functional — e.g. insignum_lang (HR/EN); set with consent or legitimate interest depending on configuration.
Analytics — WooCommerce Order Attribution / Sourcebuster (sbjs_*); with consent (Art. 6(1)(a) GDPR).
Advertisement, Performance and Other — currently no active cookies in these categories.
We do not use Google Analytics or advertising-network cookies (e.g. Meta/Facebook Pixel).
Recipients: Technical providers required to operate the site (e.g. Google reCAPTCHA). Processor agreements under Art. 28 GDPR where applicable.
5.2 Cookie retention
Session cookies are removed when you close the browser. Persistent cookies last until their CookieYes-listed expiry or until you delete them. You may change consent in the CookieYes banner.
6. Your rights
Under Art. 15(1) GDPR you may request free information about your personal data. You also have rights to rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), objection (Art. 21), data portability (Art. 20) and withdrawal of consent (Art. 6(1)(a)) without affecting prior lawful processing.
You may lodge a complaint with a supervisory authority (AZOP). For requests and questions contact us using the details in section 7.
7. Privacy contact
Insignum d.o.o.
Rujanska 11
10000 Zagreb
Croatia
Phone: +385 1 777 0 111
E-mail: vrbani@insignum.hr