PRIVACY POLICY

PRIVACY POLICY

This Privacy Policy applies to ORIGINAL STONE DESIGN d.o.o., Dračevac 116, 21000 Split, Croatia, the owner and operator of this website. ORIGINAL STONE DESIGN Ltd, Dračevac 116, 21 000 Split.

We take the protection of the personal data of our customers, website visitors, and anyone interested in our products and services very seriously. We process personal data in accordance with the General Data Protection Regulation (GDPR) and the applicable Croatian legislation implementing the GDPR.

Please read this Privacy Policy carefully to understand why we collect your personal data, how we use it, and how we protect it.

I. Purpose of Data Processing

We process your personal data where this is required by law, where it is necessary for the performance of a contract or to take steps prior to entering into a contract, or where processing is based on our legitimate interests, provided that such interests are not overridden by your interests or fundamental rights and freedoms requiring the protection of your personal data.

Where we cannot rely on one of the legal bases described above, we will ask for your consent before processing your personal data. If processing is based on your consent, you have the right to withdraw that consent at any time. You can withdraw your consent by contacting the Data Controller at info@brattia-originals.com or by writing to: ORIGINAL STONE DESIGN d.o.o. Dračevac 116 21000 Split Croatia The withdrawal of your consent does not affect the lawfulness of any processing carried out before your consent was withdrawn.

We collect only the personal data that is necessary for the purposes described in this Privacy Policy. We do not sell your personal data or make it publicly available.

II. Collection of Personal Data

We may collect certain personal data that you provide by completing forms on our website, including your name, surname, e-mail address, and telephone number. We also collect information about your visit to our website, including technical data that may identify you, such as your Internet Protocol (IP) address. Certain information is collected automatically through the use of cookies. You can find more information about our use of cookies in the Cookie Policy section.

Where video surveillance is used, personal data is collected only where justified and in accordance with applicable law, for the purpose of protecting our employees, visitors, and property.

III. Protection of Personal Data

We process all personal data using appropriate legal, technical, and organisational security measures designed to prevent unauthorised access, disclosure, alteration, or any other unlawful processing of personal data. Access to personal data is granted only to authorised employees and only to the extent necessary for them to perform their duties and provide our services.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or for the period required by applicable law.

IV. Your Rights

You may contact us at any time to exercise your rights under the GDPR, including:

• Right of access to your personal data
• Right to rectification of your personal data
• Right to erasure of your personal data
• Right to restriction of processing
• Right to object to the processing of your personal data

To exercise any of these rights, please contact our Data Protection Officer:

E-mail: info@brattia-originals.com ORIGINAL STONE DESIGN d.o.o. Data Protection Officer Dračevac 116 21000 Split Croatia

Right to Lodge a Complaint with the Supervisory Authority

In accordance with the applicable data protection legislation, every request, enquiry, or complaint will be handled as quickly as possible and, in any event, no later than 15 days from the date of receipt.

When responding to your request, we will take reasonable steps to verify your identity in order to prevent unauthorised access to or processing of your personal data.

If you believe that any of your rights under this Privacy Policy have been violated, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency:

Croatian Personal Data Protection Agency (AZOP) Selska cesta 136 10000 Zagreb Croatia E-mail: azop@azop.hr azop@azop.hr

COOKIE POLICY

I. GENERAL INFORMATION

Cookies are small text files that websites place on your device to improve your browsing experience. Cookies that are strictly necessary for the operation of the website may be stored on your device without your consent. All other types of cookies require your prior consent.

If you would like to learn more about cookies, please visit Cookiepedia – All About Cookies.

Types of Cookies We Use

• Strictly Necessary Cookies
  • These cookies are essential for the proper functioning of the website. They enable basic features such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
• Analytics Cookies
  • Name and Purpose
    • _gat – Google Analytics // Website analytics // 1 day
    • _gat_gtag – Google Analytics Website analytics // 1 day
    • _gid – Google Tag Manager // Website analytics // 1 day
    • _gcl_au – Google AdSense // Website analytics // 3 months
    • _ga – Google Analytics // Website analytics // 2 years

II. GOOGLE ANALYTICS

This website uses Google Analytics, a web analytics service provided by Google LLC ("Google"). Google Analytics uses cookies to help us analyse how visitors use our website. The information generated by these cookies, including your IP address, may be transmitted to and stored on Google's servers in the United States. IP anonymisation has been enabled for this website. As a result, Google truncates your IP address within Member States of the European Union or other countries that are parties to the Agreement on the European Economic Area before transmitting it further. Only in exceptional cases will the full IP address be transferred to a Google server in the United States and shortened there. Google uses this information on our behalf to evaluate the use of the website, compile reports on website activity, and provide other services relating to website and internet usage. The IP address transmitted by your browser through Google Analytics is not combined with other data held by Google. You may prevent the storage of cookies by selecting the appropriate settings in your web browser. Please note, however, that if you do so, some features of this website may not function properly. You can also prevent Google from collecting and processing data generated by cookies relating to your use of this website (including your IP address) by downloading and installing the browser add-on available at: https://tools.google.com/dlpage/gaoptout?hl=en

III. FACEBOOK

Our website uses social media plugins provided by Facebook, operated by Meta Platforms, Inc. These plugins are identified by the Facebook logo or the "Facebook Social Plugin" label.

When you visit a page on our website that contains a Facebook plugin, your browser establishes a direct connection with Facebook's servers. The plugin content is transmitted directly from Facebook to your browser and integrated into the website. Through this connection, Facebook receives information that your browser has accessed our website, even if you do not have a Facebook account or are not logged into Facebook at the time. This information, including your IP address, may be transmitted directly to Facebook's servers in the United States and stored there.

If you are logged into Facebook, Facebook may associate your visit to our website with your Facebook account. If you interact with the plugins—for example, by clicking the "Like" button or leaving a comment—this information will also be transmitted directly to Facebook and stored there. The information may also appear on your Facebook profile and be visible to your Facebook friends. Facebook may use this information for advertising, market research, and personalising its services. This includes creating user, interest, and relationship profiles to analyse your use of our website, display personalised advertising, inform other Facebook users about your activities, and provide other Facebook-related services. If you do not want Facebook to associate your visit to our website with your Facebook account, you should log out of Facebook before visiting our website. For more information about how Facebook collects, processes, and protects personal data, please refer to Facebook's Privacy Policy: https://www.facebook.com/policy.php https://www.facebook.com/policy.php.

IV. NEWSLETTER