Privacy policy

Last updated: 7 September 2026

This policy explains which personal data DECO STAR d.o.o. processes through the website deco-star.eu, for what purpose, on what legal basis and what rights you have. The General Data Protection Regulation (Regulation (EU) 2016/679, GDPR) and the Croatian Act on the Implementation of the GDPR apply.

1. Controller

Controller: DECO STAR d.o.o., Ulica Vladimira Nazora 31, 10340 Vrbovec, Croatia
OIB: 68295493969
Responsible person: Željko Starčević, director
Data protection contact: info@deco-star.eu, +385 91 4047 690

The company is not legally required to appoint a data protection officer. All data protection matters are handled by the director in person.

2. What data we process

Data from forms

When you send an enquiry or get in touch as a partner, we process the data you enter yourself: full name, company, e-mail address, telephone, country, the brand you are interested in, the floor area and the content of your message. Only the name, e-mail address and message are required. All other fields are optional.

Technical data attached to an enquiry

With every enquiry we record the time of sending, the IP address, the browser identifier and the address of the page from which the enquiry was sent. This data serves to protect the forms against abuse and to prove that an enquiry was actually sent.

Data when visiting the website

The website uses no analytics tools, sets no cookies and loads no content from third-party servers. The server hosting the website may keep access logs with the IP address, time and requested address for security purposes. These logs are not linked to your identity and are deleted within the hosting provider's usual periods.

3. Purposes and legal bases

Answering your enquiry and preparing a quotation: steps taken at your request prior to entering into a contract, Article 6(1)(b) GDPR.
Protecting the forms against abuse and proving that an enquiry was sent: legitimate interest of the company, Article 6(1)(f) GDPR.
Compliance with legal obligations, such as retaining business records: Article 6(1)(c) GDPR.

4. Recipients of the data

We do not sell data and do not share it for marketing purposes. The following have access to the data:

the hosting and e-mail service provider, as a processor that processes data solely on our instructions,
the factory and the carrier, only to the extent necessary to deliver ordered goods to your address,
public authorities, where required by law.

Data is not transferred to third countries outside the European Economic Area. If you write to us via WhatsApp, the rules of that service's operator apply to that processing.

5. Retention period

We keep enquiries and the related correspondence for up to 24 months after the last contact. Quotations, contracts and invoices are kept for the periods prescribed by accounting and tax law, as a rule 11 years. Technical records of form submissions are deleted together with the enquiry.

6. Your rights

At any time you have the right to:

request access to your data and a copy of it,
request the correction of inaccurate data or the completion of incomplete data,
request erasure when the data is no longer needed for the purpose for which it was collected,
request restriction of processing,
object to processing based on legitimate interest,
request the data you have provided to us in a machine-readable format.

Send your request to info@deco-star.eu. We reply without undue delay and at the latest within one month. If you believe the processing breaches data protection law, you have the right to lodge a complaint with the Croatian supervisory authority, Agencija za zaštitu osobnih podataka, Selska cesta 136, 10000 Zagreb, azop.hr, or with the supervisory authority where you live.

7. Data security

Forms are submitted with a signed security token and a security question, without cookies. Enquiry records are stored on the server in a directory with no public access. Access to the server and e-mail is protected by passwords known only to the responsible person. On the production domain the website is served exclusively over an encrypted connection (HTTPS).

8. Cookies

The website sets no cookies. Details are given on the Cookies page.

9. Changes to this policy

We update this policy when the processing or the law changes. The version published on this page, with the date shown at the top, applies.