Privacy policy

Last updated: September 26, 2026

Controller

The controller responsible for processing personal data on this website is:

MAROLEX d.o.o. za proizvodnju, trgovinu i usluge
Ulica svete Ane 21, Katoličke Čaire
44320 Kutina
Croatia

Visiting the website and hosting

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. On every visit Cloudflare processes technically necessary connection data such as IP address, time, the page requested and browser information in order to deliver the website securely and without errors. The legal basis is our legitimate interest (Art. 6(1)(f) General Data Protection Regulation, GDPR).

Cloudflare is our processor (Art. 28 GDPR) and deletes the data once it is no longer needed. Data may be transferred to the USA; Cloudflare is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR), and the EU standard contractual clauses apply in addition.

Cookies and settings

If you choose a language or colour scheme, your browser stores that setting (the language in a cookie for one year). This is necessary for the function you asked for and requires no consent. We use no analytics, tracking or marketing tools and no third-party content.

Enquiries

When you contact us through the form, by email or by phone, we process the details you send us: name, email address or phone number, optionally the location of your plot, your interest and the content of your message. We use them to answer your enquiry and, where relevant, to prepare an offer. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) and, for general enquiries, our legitimate interest in answering them (Art. 6(1)(f) GDPR).

Form entries are passed through Cloudflare (see above) to our mailbox. Our mailbox is run as our processor (Art. 28 GDPR) by [email provider, address].

Providing your details is voluntary, but without contact details we cannot reply. We delete your enquiry once it has been dealt with, at the latest 12 months after our last contact. If a contract is concluded, we keep the records for as long as statutory retention periods require, in particular under tax and accounting law.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). A short message to [email protected] is enough.

Right to object: you may object at any time (Art. 21 GDPR), on grounds relating to your particular situation, to processing based on our legitimate interest (Art. 6(1)(f) GDPR). We will then stop processing the data unless we demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims.

You also have the right to lodge a complaint with a supervisory authority. Our authority is the Croatian Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, Croatia, [email protected], azop.hr. You may also contact the supervisory authority in the EU country where you live or work.