1. Data controller
Kristall Diamant, service trade
owner: Tamara Karakhanova
Tršćanska 1, Zagreb
OIB: 01142261377
MBS: 98615220
E-mail: [email protected]
Phone: 097 752 4712
2. What personal data may we process?
- full name
- phone number and e-mail address
- address or location where the service is requested
- type, size and other information about the premises needed to assess and organise the service
- preferred appointment, content of the enquiry and communications
- photos of the premises that you voluntarily send us for assessment, if we request them or provide an upload option
- information required for quotations, contracting, invoicing and compliance with legal obligations
- technical data necessary for the security and operation of the website.
3. Where do we obtain the data from?
As a rule, we obtain data directly from you when you contact us, submit an enquiry, call, send a message or arrange a service.
4. Purposes and legal bases for processing
| Purpose | Legal basis |
|---|---|
| Responding to an enquiry, assessment and preparation of a quotation | Taking steps at your request before entering into a contract and, depending on the circumstances, legitimate interest in business communication |
| Arranging an appointment and providing the service | Performance of a contract |
| Issuing and retaining invoices and meeting tax and other obligations | Legal obligation |
| Complaints, objections and protection of legal claims | Legal obligation and/or legitimate interest |
| Optional analytics or marketing through cookies/tags | Consent, where such tools are used |
5. Contact form and communication
The data you enter in the form is used to respond to your enquiry, assess the request, prepare a quotation and, where applicable, arrange the service. Submitting the form does not by itself mean that a contract has been concluded. Required fields indicate information without which we cannot properly process the enquiry. If you use WhatsApp, Viber, SMS, a social network or another external communication channel directly, processing on that platform is also subject to the rules of the relevant service provider.
hCaptcha form protection
To protect our contact forms against automated and unwanted submissions, we use hCaptcha. When the security check loads or is completed, hCaptcha may process technical data relating to the device, browser and network connection. Further information is available in the hCaptcha Privacy Policy.
6. Recipients and processors
We do not sell or rent personal data. To the extent necessary for a specific purpose, data may be accessible to providers of hosting, e-mail, IT support, accounting services, the provider of the technical contact-form solution if activated, and competent authorities where required by law. We expect service providers to maintain an appropriate level of data protection.
7. Transfers outside the European Economic Area
If a service provider processes data outside the EEA, the transfer is carried out only using an appropriate legal mechanism and safeguards required by applicable law, such as an adequacy decision or standard contractual clauses where necessary.
8. How long do we keep data?
We retain data only for as long as necessary for the purpose for which it was collected. Data related to contracted services, invoices and business documentation is retained for the periods prescribed by applicable law. Enquiries that do not lead to a contract are kept only for as long as reasonably necessary for communication, a possible continuation of discussions and the protection of legitimate business interests, after which they are deleted or anonymised unless another legal basis applies.
9. Cookies and similar technologies
The website uses necessary storage technologies and may use functional, analytics or marketing technologies only in accordance with your choices. Optional categories are not activated before consent. Google Analytics 4 is used only with analytics consent. A detailed description of the technologies actually used is available in the Cookie Policy.
10. Your rights
Depending on the circumstances and legal basis, you have the right to request access to your personal data, correction of inaccurate data, erasure, restriction of processing, data portability, to object to processing based on legitimate interests, and to withdraw consent at any time for processing based on consent.
To exercise your rights, send a request to [email protected]. To protect your data, we may request reasonable proof of identity before acting on your request.
11. Complaint to the supervisory authority
If you believe your personal data is being processed contrary to applicable rules, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), the Croatian supervisory authority for data protection.
12. Automated decision-making
We do not make decisions through this website that produce legal or similarly significant effects solely through automated processing.
13. Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, destruction or unauthorised disclosure. No system is completely risk-free, so we regularly adapt our measures to the actual processing activities and technologies used.
14. Changes to this Policy
We may update this Policy when services, technologies, service providers or legal obligations change. The current version and the date of the latest update will always be published on this page.
15. Contact
Kristall Diamant, service trade · owner Tamara Karakhanova · Tršćanska 1, Zagreb · OIB 01142261377 · MBS 98615220 · [email protected] · 097 752 4712