Privacy Policy

This Privacy Policy governs the manner in which PROFESSIONAL OPTICS j.d.o.o., acting as the data controller, collects, processes, uses, stores, and protects the personal data of users and customers of the Holosun.hr online store.

The processing of personal data is carried out in accordance with Regulation (EU) 2016/679, namely the General Data Protection Regulation (GDPR), the Croatian Act on the Implementation of the General Data Protection Regulation, and other applicable laws of the Republic of Croatia and the European Union.

By using this website, the user confirms that they have read and understood this Privacy Policy. Where consent is required for a specific processing activity, such consent shall be obtained separately, explicitly, informed, and unambiguously.

Data Controller

The data controller responsible for the processing of personal data is:

PROFESSIONAL OPTICS j.d.o.o.
Cesta pape Ivana Pavla II 205A
21216 Kaštel Stari
Croatia
OIB: 55385231929
Email: info@holosun.hr

Phone: +385 99 1686 108

Categories of Personal Data

Holosun.hr may collect and process, in particular, the following categories of personal data:

• identification data, including first name and surname
• contact data, including billing address, shipping address, email address, and telephone number
• data necessary for order processing and invoice issuance
• data relating to orders, purchased products, payments, deliveries, returns, and complaints
• data arising from communications with customer support
• user account data, where an account is created
• technical data and online identifiers, such as IP address, browser type, language settings, device information, and access logs
• data collected through cookies and similar technologies

Special categories of personal data are not processed as a rule, unless such processing is required by law or necessary for the establishment, exercise, or defense of legal claims.

Purposes and Legal Bases of Processing

Personal data shall be processed only to the extent necessary to achieve a lawful purpose of processing.

Processing may be carried out, in particular, for the following purposes:

• to take steps at the request of the data subject prior to entering into a contract
• to conclude and perform the sales contract, including order processing, payment, shipping, and customer support
• to comply with legal obligations, in particular tax, accounting, consumer protection, and commercial obligations
• to pursue the legitimate interests of the data controller, especially for IT security, fraud prevention, internal administration, and the improvement of services and website functionality
• on the basis of the data subject’s consent, especially for newsletters or marketing communications
• to handle complaints, withdrawals, returns, and to establish, exercise, or defend legal claims

Recipients and Data Processors

Personal data may be disclosed only to those recipients for whom such data is necessary in order to achieve the relevant lawful purpose, in particular:

• shipping and delivery service providers
• payment service providers and payment processing partners
• IT, hosting, security, and technical service providers
• accounting, tax, legal, and other professional advisers where necessary
• competent authorities, courts, or other public bodies where disclosure is required by law

Where third parties process personal data on behalf of Holosun.hr, they act as data processors and are contractually bound to process personal data solely in accordance with documented instructions and applicable data protection legislation.

Payment Processing

In the case of card payments, personal data necessary for the authorization and execution of the transaction may be processed through authorized payment service providers.

Holosun.hr does not store full card details unless expressly stated and only where such storage is carried out through legally compliant, technically secure, and certified systems.

Cookies and Similar Technologies

The website may use cookies, local storage technologies, analytics tools, and similar technologies in order to:

• ensure the technical functionality of the website
• store user preferences
• analyze traffic and usage statistics
• improve website security and stability
• enhance user experience and website performance
• carry out marketing activities where the user has provided the necessary consent

Where cookies or similar technologies are not strictly necessary for the operation of the website, they shall be used only on the basis of prior user consent where required by law.

Direct Marketing

Where the user has expressly consented, Holosun.hr may use personal data to send information about products, offers, updates, and promotional activities.

The user may withdraw such consent at any time with effect for the future. In addition, every data subject has the right to object at any time to the processing of personal data for direct marketing purposes.

Retention Period

Personal data shall be stored only for as long as necessary to fulfill the relevant purpose or for as long as required by applicable retention obligations under law.

Data related to orders, invoices, payments, and business documentation shall be retained for the periods prescribed by applicable accounting, tax, consumer, and other mandatory legal regulations.

Data processed on the basis of consent shall be retained until consent is withdrawn, unless another legal basis justifies continued processing.

Rights of Data Subjects

Each data subject shall have, subject to the conditions laid down by law, the following rights:

• the right of access
• the right to rectification
• the right to erasure
• the right to restriction of processing
• the right to data portability
• the right to object to processing
• the right not to be subject to a decision based solely on automated processing, including profiling, where such decision produces legal effects or similarly significantly affects the data subject
• the right to withdraw consent at any time with effect for the future
• the right to lodge a complaint with a competent supervisory authority

In the Republic of Croatia, the competent supervisory authority is the Croatian Personal Data Protection Agency (AZOP).

Data Security

Holosun.hr implements appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.

Such measures may include, in particular, access controls, authorization management, security monitoring, backups, and internal procedures for handling security incidents.

International Data Transfers

If, in the course of providing services, personal data is transferred to countries outside the European Economic Area, such transfer shall be carried out only in compliance with the applicable legal requirements and subject to appropriate safeguards under the GDPR.

Links to Third-Party Websites

This website may contain links to external websites and third-party services. Holosun.hr accepts no responsibility for their content, availability, security, or privacy practices. Users are advised to review the privacy policies of such third parties independently.

Changes to this Privacy Policy

Holosun.hr reserves the right to amend or supplement this Privacy Policy at any time in order to reflect legal, technical, or business developments.

The current version shall be published on this page and shall enter into force on the date of publication.

Contact

For any questions relating to the processing and protection of personal data, you may contact us at:

PROFESSIONAL OPTICS j.d.o.o.
Cesta pape Ivana Pavla II 205A
21216 Kaštel Stari
Croatia
Email: info@holosun.hr
Phone: +38599 352-19-91