Privacy policy
Privacy Policy
Last updated: 15 July 2026
This Privacy Policy describes how Irtemar d.o.o. collects, uses, processes, stores and shares personal data relating to customers and users of the Irtemar Grill online store available at irtemar.eu.
The data controller is:
Irtemar d.o.o.
Zona male privrede 5
34550 Pakrac
Croatia
OIB: 61425972284
VAT ID: HR61425972284
E-mail: info@irtemar.com
Phone: +385 99 694 3493
1. Personal Data We Collect
Depending on how you use the online store and the services you use, we may collect the following categories of personal data:
-
first and last name
-
delivery and billing address
-
e-mail address
-
telephone number
-
order and purchased product information
-
information necessary to process payments
-
information required for issuing invoices and complying with accounting and tax obligations
-
information relating to deliveries, returns, claims and complaints
-
communications you send to us by e-mail, contact forms or other communication channels
-
technical information relating to your use of the website, such as your IP address, device and browser information, and information collected through cookies and similar technologies.
Irtemar d.o.o. does not store complete payment card details. Card and other electronic payments are processed by the relevant payment service providers through the Shopify platform and associated payment processing systems.
2. Purposes of Processing Personal Data
We may process personal data for the following purposes:
-
receiving, processing and fulfilling orders
-
processing payments
-
issuing invoices and complying with accounting, tax and other legal obligations
-
arranging delivery or personal collection
-
communicating with customers regarding orders, payments, deliveries, returns, claims or complaints
-
providing customer support
-
handling requests relating to the exercise of consumer rights
-
preventing and detecting fraud, misuse and security incidents
-
protecting the security and functionality of the online store and information systems
-
analysing and improving the functionality and user experience of the online store where such processing is permitted
-
sending marketing communications, news and offers where an appropriate legal basis exists, including consent where required.
3. Legal Bases for Processing
We process personal data where there is an appropriate legal basis, including:
-
performance of a contract or taking steps prior to entering into a contract, for example when processing an order, payment or product delivery
-
compliance with legal obligations, including accounting, tax and other statutory obligations
-
legitimate interests, for example protecting our business, maintaining system security, preventing fraud, defending legal claims and providing certain forms of customer support, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject
-
consent, for example for certain marketing activities or the use of optional cookies and similar technologies where consent is required.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
You may unsubscribe from marketing communications by using the unsubscribe link included in a marketing message or by contacting us at:
4. Shopify Platform
The Irtemar Grill online store uses the Shopify platform to provide and manage online store functionality, including product display, shopping cart, checkout, order processing, customer accounts, payments and other related functions.
Information that you provide or that is generated through your use of the online store may be processed through Shopify and its affiliates and service providers in accordance with their respective roles in processing personal data and applicable data protection laws.
Shopify may act as a data processor on behalf of the merchant for certain processing activities and may process personal data in accordance with its own privacy policies for certain services and purposes for which it determines the means and purposes of processing.
5. Recipients of Personal Data
We share personal data with third parties only where necessary for the performance of a contract, provision of services, operation of the online store, compliance with legal obligations or other lawful processing purposes.
Recipients of personal data may include:
-
Shopify and associated technical service providers
-
payment service providers and card processors
-
delivery and logistics service providers, including DPD where used for delivery
-
accounting service providers
-
IT, hosting, security and other technical service providers
-
providers of communication, analytics or marketing tools where such tools are used and an appropriate legal basis exists
-
legal, tax and other professional advisers where necessary
-
competent public authorities where disclosure is required by law
-
other service providers necessary to fulfil an order or provide a requested service.
We provide delivery service providers only with information necessary to arrange and complete delivery, which may include the recipient's name, delivery address, telephone number, e-mail address and information necessary for shipment labelling and tracking.
6. International Transfers of Personal Data
Due to our use of the Shopify platform and other digital service providers, certain personal data may be processed in countries outside the European Union or European Economic Area.
Where personal data is transferred to a third country, the transfer is carried out in accordance with applicable data protection laws and, where required, using appropriate safeguards.
Such safeguards may include an adequacy decision adopted by the European Commission, Standard Contractual Clauses, Binding Corporate Rules or other legally recognised mechanisms for international transfers of personal data.
7. Cookies and Similar Technologies
The online store uses or may use cookies and similar technologies to enable the technical operation of the website, maintain security, remember shopping cart contents, facilitate checkout and order processing and, depending on store configuration, provide analytics, performance measurement and other functionality.
Strictly necessary cookies are required for the basic operation of the online store and related services.
For cookies and similar technologies that are not strictly necessary, where consent is required under applicable law, users are given the opportunity to give, refuse or manage their consent through an appropriate privacy or cookie management tool.
Further information about the cookies used may be available through the privacy or cookie settings on the website.
8. Marketing
We send marketing communications only where an appropriate legal basis exists.
Where consent is required for marketing communications, we send such communications only to users who have provided consent, for example by subscribing to a newsletter or selecting the relevant option during the purchasing process.
Marketing communications may include news, special offers, information about new products and other content relating to the Irtemar Grill store and its products.
You may unsubscribe from marketing communications at any time by using the unsubscribe link included in the communication or by contacting us at:
9. Retention of Personal Data
We retain personal data only for as long as necessary for the purpose for which it was collected or as required to comply with our legal obligations.
Information relating to orders, invoices and business records is retained for the periods required under applicable accounting, tax and other laws.
Information relating to claims, complaints, returns or potential legal claims may be retained for the period necessary to resolve the matter and protect or exercise legal rights and obligations.
Personal data processed solely on the basis of consent is retained until consent is withdrawn or the relevant processing purpose ceases, unless another legal basis exists for continued processing.
When personal data is no longer required for the purposes for which it is processed and there is no other legal basis for retaining it, it will be deleted or anonymised.
10. Personal Data Security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful access, use, alteration, disclosure, loss or destruction.
We also use service providers that apply their own security measures to the systems and data they process in connection with the services they provide.
Despite the measures taken, no electronic transmission or data storage system can guarantee absolute security.
11. Your Rights
Depending on the circumstances and the legal basis for processing, you may have the following rights under applicable data protection laws:
-
the right to information about the processing of your personal data
-
the right of access to your personal data
-
the right to rectification of inaccurate or incomplete personal data
-
the right to erasure where the applicable legal conditions are met
-
the right to restriction of processing
-
the right to object to certain processing of personal data
-
the right to data portability where the applicable conditions are met
-
the right to withdraw consent at any time where processing is based on consent
-
the right to lodge a complaint with the competent supervisory authority.
To exercise your rights, please contact us at:
To protect personal data, we may request additional information necessary to verify the identity of the person submitting a request.
We will respond to your request without undue delay and no later than one month after receiving it. Where permitted by applicable law, this period may be extended by a further two months where necessary due to the complexity or number of requests. In such cases, we will inform you of the extension and the reasons for it within the applicable period.
12. Complaints
If you believe that your personal data is being processed in breach of applicable data protection laws, you may contact us at:
You also have the right to lodge a complaint with the competent supervisory authority.
In the Republic of Croatia, the competent supervisory authority is:
Croatian Personal Data Protection Agency (AZOP).
13. Children's Data
The online store is not specifically directed at children, and we do not knowingly collect children's personal data in a manner that would require specific consent from a holder of parental responsibility under applicable law.
If a parent or guardian believes that a child has provided us with personal data contrary to applicable law, they may contact us at:
We will take appropriate action in accordance with applicable law.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business operations, personal data processing practices, technologies, service providers or applicable laws.
The updated version will be published on this page with a revised “Last updated” date.
Where changes are significant and where appropriate or legally required, we will provide additional notice to users.
15. Contact
For questions regarding this Privacy Policy, the processing of personal data or the exercise of your rights, please contact:
Irtemar d.o.o.
Zona male privrede 5
34550 Pakrac
Croatia
E-mail: info@irtemar.com
Phone: +385 99 694 3493