Privacy policy

This policy describes how we process personal data in connection with the website ruskipeptidi.com. The site is informational: it contains no forms, user accounts, purchase process or newsletter sign-up. Processing is carried out in accordance with the General Data Protection Regulation (GDPR) and applicable Croatian legislation.

1. Data controller

The controller is the provider of the website RuskiPeptidi.com. For privacy questions and to exercise your rights, write to info@ruskipeptidi.com.

2. What data do we process?

• Communication data: if you write to us by email, we process your email address, name (if provided) and the content of the message.
• Technical data: IP address, browser type, device and time of access, normally logged by the hosting provider for security and operation.
• Analytics data (optional): if you allow analytics, Google Analytics 4 processes approximate location, device, browser, traffic source and events on the site.

We do not collect order, payment or delivery data because the site does not offer these services. Analytics is loaded only with your consent; without consent, the analytics script is not loaded. Details are in the cookie policy.

3. Legal bases

• Legitimate interest (Article 6(1)(f) GDPR) — site security, abuse prevention and responding to your message.
• Consent (Article 6(1)(a)) — for analytics and any notification you request yourself.
• Legal obligation (Article 6(1)(c)) — where retention is required by applicable regulations.

4. Purpose of processing

We use the data to respond to your message, ensure the security and operation of the site, and improve content. We use analytics events only if you have given consent. We do not use the data for automated decision-making, profiling or marketing.

5. Retention period

• Email correspondence: up to 24 months from the last contact, unless the law requires otherwise.
• Technical logs: usually up to 90 days, depending on the host.
• Analytics cookies: up to 14 months or as configured in GA4; you can withdraw consent earlier.

6. Recipients of data

Data may be processed by contracted processors providing hosting and email services. If you allowed analytics, data is also processed by Google Ireland Limited or Google LLC as the provider of Google Analytics 4. We conclude appropriate agreements with processors. We do not sell data or transfer it to third parties for marketing purposes.

If a processor is located outside the EU/EEA, the transfer is carried out on the basis of appropriate safeguards such as standard contractual clauses.

7. Analytics and data transfers

Google Analytics 4 is loaded only after consent and with consent mode configured to allow analytics storage while advertising options remain denied. The IP address is used for coarse geolocation and is generally not retained. Google may process data outside the EU/EEA; the transfer is based on appropriate safeguards such as standard contractual clauses. You can withdraw consent at any time in the cookie policy.

8. Your rights

Under the GDPR, you have the right to:

• access your data;
• rectify inaccurate data;
• erasure where there is no longer a legal basis for retention;
• restriction of processing;
• data portability;
• object to processing based on legitimate interest;
• withdraw consent where processing is based on consent.

Send a request to info@ruskipeptidi.com. We respond within the period prescribed by law. If you believe that processing is unlawful, you may lodge a complaint with the Croatian Personal Data Protection Agency (azop.hr).

9. Security

We use technical and organisational measures to protect data: restricted access, encrypted transmission (HTTPS), regular system updates and a password policy. No system is completely secure, so we recommend caution when sending sensitive data by email.

10. Children

The site is not intended for persons under 18. We do not knowingly collect data from children. If you learn that a child has provided us with data, notify us and we will delete it.

11. Changes to the policy

We may update the policy due to changes in legislation or services. The new version is published on this page with the effective date.