Privacy Statement

Privacy Statement

This Privacy Statement pertains to the confidentiality of personal data collected during the registration process of Customers on the nakit.eu website or during the registration of Users who receive notifications about products and promotions on the nakit.eu website. This Privacy Statement is an integral part of Nakiteu's General Terms of Business. 
ILU j.d.o.o., as the service provider of the nakit.eu website, complies with applicable regulations to protect the privacy of its Customers and Users, particularly the EU General Data Protection Regulation. This document describes how the data controller ILU j.d.o.o., Kaštel Gomilica ul. FraŽarka Careva 8 (hereinafter Nakiteu) processes personal data. 

Customers of the Nakiteu website (hereinafter Customers) and Users who receive product and promotion notifications from Nakiteu (hereinafter Users) are invited to read everything on this page to better understand what data ILU j.d.o.o. collects and processes, for what purpose, on what legal basis, with whom and why it is shared, what security measures are implemented, and what your rights are regarding access to personal data, correction, deletion, and your right to object. 

Any Customer or User with questions about personal data may send an email to 925split@gmail.com.  
By accepting this Privacy Statement when registering as a Customer or signing up on the nakit.eu website as a User receiving product and promotion notifications, the Customer or User confirms that they have read, understood, and agree to the processing of personal data as set out in this Statement.  

What types of personal data does Nakiteu collect and process through the nakit.eu website?  

When registering a person as a Customer on the nakit.eu website, ILU j.d.o.o. will request the future Customer to provide certain personal information such as first and last name, address (including postal code), email address, phone number, date of birth (optional), username, and password.   
After a person registers as a Customer, they can access the Loyalty Program located within the Customer’s profile. Access to the Loyalty Program is not mandatory in any way. Upon login, ILU j.d.o.o. will request the Customer’s personal data: first and last name, address, city and postal code, phone number (optional), mobile number, date of birth, and gender. The Customer confirms consent to the processing of personal data by clicking the login button.  

When registering a person as a User who receives product and promotion notifications on the nakit.eu website, ILU j.d.o.o. will ask the future User to provide personal information: name (optional) and email address.   

Providing personal data is the decision of the Customer or User. If the Customer or User does not provide the required mandatory information for a specific activity that requires it, they will not be allowed to participate in that activity, because without that data the activity cannot be technically performed.  

In addition to this data, we automatically collect data from your computer, which may include the IP address, and there are situations where we automatically collect other types of data such as the date and time of access to the website nakit.eu, information about the hardware, software, or web browser you use, as well as your computer’s operating system, the application version, and your language settings. 

We may also collect information about clicks and nakit.eu pages that are displayed to you. Nakiteu recommends that Customers take care of their login password for the Nakiteu website user account. When choosing a password, we recommend combining uppercase and lowercase letters and numbers, and using a password of at least six characters. We also recommend changing the password periodically (at least once a year). 

For what purpose does Nakiteu collect and process personal data? 

Nakiteu collects and processes Customers' personal data from the website nakit.eu in order to conduct a secure authenticity check of Customers accessing the Nakiteu website, to fulfill purchase contracts for goods or services, to deliver goods to the Customer, to communicate with the Customer, to handle any legal proceedings related to contract performance, and partly we also use automated processing to continuously improve our processes in the interest of Customers, to make the offer more individualized for the Customer, and to tailor our product and service offerings as closely as possible to Customers' habits and needs. Nakiteu collects and processes personal data of Customers enrolled in the Loyalty Program for the purpose of creating personalized content through automated data‑processing procedures. 

Nakiteu collects and processes personal data of Users who receive notifications about products and promotions in order to send notifications, invite participation in prize contests via e‑mail, social networks or other communication channels to which you have previously subscribed, to handle any legal proceedings related to contract performance, and to create a user profile aimed at receiving individualized notifications, conducting market research, and improving the efficiency and quality of our services. 

We do not collect data about children. If we find that such data has been transferred to us without the consent of the parents or guardians of children under 16, we will delete it without delay. Minors under 16 are not allowed to use the Nakiteu website. No part of the Nakiteu website is designed to attract anyone under 16. 

What is the legal basis for processing personal data?  

By entering their personal data and confirming (by clicking) acceptance of the General Terms of Business and this Privacy Statement, the Customer establishes a contractual relationship that forms the basis for purchasing products and services of their choice on the Nakiteu website, as set out in the General Terms of Business; therefore the processing of this personal data is lawful because actions are taken at the Customer’s request to fulfill the purchase of products and services ordered by the Customer. A Customer who registers for the Loyalty Program, by entering their personal data and confirming (by clicking) the “Sign Up” button, gives consent for the processing of their personal data. 

A User who registers to receive notifications about products and promotions by entering their data on the Nakiteu website and double‑confirming the correctness of their email address gives consent for the processing of their personal data. The User may withdraw this consent at any time by notifying the Data Protection Officer at 925split@gmail.com.
                          
With which recipients does Nakiteu share personal data? 
 
Nakiteu will not share the Customer’s or User’s personal data with third parties except in the cases listed in the following point and when required by applicable law. 
When the performance of a contract for the purchase of products or services ordered by the Customer requires it, Nakiteu will share the Customer’s personal data with:  
Service providers handling goods distribution for order fulfillment, package delivery, and the sending of postal and e‑mail correspondence. The distribution service provider may request to see the Customer’s personal identification at the time of package delivery for personal pickup, solely for the purpose of completing the delivery service and recording who received the package. If the Customer refuses to provide this information, the package will not be delivered.
Authorized service providers in case the Customer files a complaint, makes a warranty claim, or requires product inspection or servicing of a purchased product, for the purpose of carrying out repair, service, or inspection by the authorized service.  


Processing of personal data in the credit and debit card payment process

At the moment of payment on the nakit.eu website, as a condition for paying for products and services with a credit or debit card, Nakiteu requires the Customer’s consent to activate the payment process via PAYPAL, the card processing and acquiring service provider, Nakiteu’s contractual partner, and the Personal Data Processor. For this purpose, the Customer’s personal data (Customer’s name and surname, address, and card details) are temporarily stored with PAYPAL, which stores this information in compliance with PCI DSS certification, the highest level of protection and confidentiality. The Customer initiates the card processing and acquiring process by confirming (clicking) the „pay“ link.   

Nakiteu does not at any time possess, collect, or process personal data entered for the purpose of card processing and billing. Customers are directed to obtain information about the processing of personal data by PAYPAL on the website where the payment process takes place. Personal data stored with PAYPAL are deleted immediately after the card processing and billing procedure is completed. 

Retention period for personal data 

Nakiteu stores the personal data of registered customers of the nakit.eu website for the period necessary to fulfill the purpose of processing, which is until the registration remains active and for six months after the customer's registration ends, during which any complaints from the previous period will be resolved. Nakiteu also stores the personal data of registered users who receive notifications about products and promotions for the period necessary to fulfill the purpose of processing, i.e., until the registration remains active. 

Access to and correction of personal data  

The Customer and User may at any time access their personal data by logging into the site and navigating to „My Profile,“ where the Customer can review the personal data shared with Nakiteu. The Customer and User may request and receive from Nakiteu a complete report of the stored personal data, as well as request corrections by sending an e‑mail to the Data Protection Officer at: 925split@gmail.com. 

Deletion of personal data (right to be forgotten)  

The Customer and User have the right to request deletion of personal data at any time (right to be forgotten). The Customer can do this by sending a request to the Data Protection Officer’s e‑mail address 925split@gmail.com, and the data will be deleted without delay. The User may submit a deletion request in any communication received from Nakiteu via e‑mail, or by sending an e‑mail to the Data Protection Officer at 925split@gmail.com stating that their personal data should be removed. 

Right to lodge a complaint 

If, despite all measures taken to protect personal data, you believe you have grounds for a complaint, please contact the Data Protection Officer at 925split@gmail.com. Of course, you also have the right to file a complaint with the supervisory authority, the Agency for Personal Data Protection. 

Security measures for personal data protection  

The collected data is in electronic form and protected by an SSL certificate that encrypts the data, ensuring that communication between the Customer’s or User’s computer and Nakiteu occurs over a secure protocol. Nakiteu takes data protection seriously and implements various precautionary measures to keep personal data safe. Unfortunately, no data transmission over the Internet or any wireless network can be 100% secure. As a result, although Nakiteu employs reasonable protective measures, it cannot guarantee the security of any information transmitted to or from the Nakiteu website and is not responsible for the actions of any third party that receives such information. Nakiteu may choose to store personal data with service providers within the EU and only exceptionally outside the EU. This will be done only if there is a European Commission adequacy decision for that country and if contractual guarantees and compliance with binding data protection regulations are in place. 

Amendment of the Privacy Statement  

Nakiteu may amend this Privacy Statement at any time by publishing the revised text of the Privacy Statement on the Nakiteu website. Therefore, Nakiteu encourages Customers and Users to periodically review this Privacy Statement, where any new changes will be indicated if they occurred during the previous period. If a Customer or User does not agree with this Privacy Statement, we advise the Customer and User to leave and not access or use the nakit.eu website. The amendment to the privacy statement takes effect immediately upon publication on the nakit.eu website. Continued use of the Nakiteu website by the Customer and User after the amendments take effect implies that the Customer and User acknowledge and accept the amended Privacy Statement. 

Cookie Policy„  

Cookies and other tracking technologies may be used on the Nakiteu website in various ways, e.g., to enable the website to function, for traffic analysis, or for marketing purposes. 
A cookie is a small piece of data that a website stores on a visitor’s computer or mobile device. A cookie allows the website to „remember“ actions of the visitor from previous visits. Most browsers allow the use of cookies, but the user can delete them at any time or set the browser to block them. The most common reasons for using cookies are: identifying visitors, remembering specific user preferences, assisting with the entry of information previously entered during earlier visits, collecting data for analysis, and promotional campaigns. 
Cookies can be classified as: 
Session cookies – stored on the computer and automatically deleted after the web browser is closed. They enable the website to obtain temporary data, such as comments or shopping‑cart status for purchases.

Persistent cookies – Remain in your web browser after it is closed and usually have an expiration date. Nakiteu uses persistent cookies to facilitate access for registered users. They store data such as username and password, enabling the „remember me“ functionality during login so you do not have to enter your username and password each time you visit nakit.eu. 
First‑party cookie – These come from the website you visited and can be either temporary or permanent. They allow websites to store data that is used when the user returns to the site. Third‑party cookies – Several external services store limited cookies for the user (Facebook, Instagram, Google Analytics and AdWords).
These cookies are not set by Nakiteu and are typically used to help interpret user behavior and for marketing purposes. 
What options are available to you?  
In the settings of browsers such as Internet Explorer, Safari, Firefox, or Chrome you can specify which cookies you want to accept and which you will reject. The location of these settings depends on the type of your browser. Use the „Help“ option in your browser to find the settings you need. 
 If you choose not to accept certain cookies, you may not be able to use some features on the nakit.eu website.