Privacy Policy

1. Data Controller

The data controller responsible for personal data processing is:

Kaleta Novalja d.o.o.
Dalmatinska 61
53291 Novalja, Croatia
OIB: 01501776395
Phone: +385 91 153 3119
Email: info@novaljasmart.com

2. Personal Data We Collect

Full name
Email address
Phone number
Order details
Transaction information (processed by Stripe)

We do not store credit or debit card details. Card data is handled by Stripe.

3. Purpose of Processing

Order processing and fulfillment
Customer communication
Legal compliance
Improving our services

4. Legal Basis

We process personal data based on one or more of the following legal grounds:
performance of a contract (order fulfillment), legal obligations (accounting/tax), and legitimate interests (service improvement),
or consent where applicable.

5. Payments (Stripe)

Online payments are securely processed by Stripe. Stripe may process personal data necessary to complete payment transactions
and prevent fraud, in accordance with its policies and PCI-DSS standards.

6. Data Retention

We retain personal data only for as long as necessary to fulfill contractual and legal obligations.

7. User Rights

Under applicable data protection laws (including GDPR), you have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of data (unless retention is legally required)
Restrict processing
Object to processing where applicable
Lodge a complaint with a supervisory authority

To exercise your rights, contact us at info@novaljasmart.com.

8. Security

We implement appropriate technical and organizational measures to protect personal data.
However, no method of transmission over the internet is 100% secure.