Privacy policy

Last updated: 14 August 2026

This Privacy Policy explains how „MEDIAPARK” obrt za audio i video usluge i trgovinu collects, uses, processes, retains and shares personal data when you visit or use protective-cases.eu, make a purchase, access a customer account, submit an enquiry or quotation request, or otherwise communicate with us.

1. Data Controller

The controller responsible for your personal data is:

„MEDIAPARK” obrt za audio i video usluge i trgovinu, owned by Dražen Kovačević
Mihovila Krušlina 15
10290 Zaprešić
Croatia

Croatian tax identification number (OIB): 95452162371
Email: prodaja@mediapark.hr
Phone: +385 98 800 422

You may contact us using these details regarding this Privacy Policy or the exercise of your data protection rights.

2. Personal Data We Process

Depending on how you use our online store and services, we may process the following categories of personal data:

first and last name
billing address
delivery address
country and postal code
email address
telephone number
company, trade, tax or VAT identification information where such information relates to or identifies an individual
order and product information
returns, withdrawal, claims and warranty information
transaction history
payment method and payment status information
information required to deliver an order
customer account information
information you provide through contact forms, quotation requests, email or other communications
IP address
device type
browser and operating system
information about interaction with our online store
products viewed, added to cart or purchased
information collected through cookies, pixels and similar technologies, depending on your privacy choices and consent.

We do not store full payment card numbers or card security codes. Card information is processed by authorised payment service providers.

We do not request or intentionally collect special categories of personal data such as health information, biometric information, political opinions, religious beliefs or other specially protected personal information. Please do not submit such information through our contact forms unless necessary and supported by an appropriate legal basis.

3. Sources of Personal Data

We may obtain personal data:

directly from you, for example when you place an order, use a customer account, send an enquiry or request a quotation
automatically when you use our online store
from Shopify and service providers used to operate our store
from payment service providers
from delivery and logistics providers
from marketing and analytics partners where an appropriate legal basis exists
from other sources where you have consented to such processing or where processing is otherwise permitted by law.

4. Purposes and Legal Bases for Processing

4.1. Orders and Performance of the Contract

We process personal data in order to:

receive and process orders
process payments
issue invoices
arrange delivery
fulfil and provide information about orders
process returns
process withdrawal requests
process claims and warranty requests
communicate with you concerning your purchase.

Legal basis: processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract under Article 6(1)(b) GDPR.

4.2. Compliance with Legal Obligations

We process and retain certain personal data to comply with applicable tax, accounting, fiscal, consumer protection and other legal obligations.

Legal basis: compliance with a legal obligation to which we are subject under Article 6(1)(c) GDPR.

4.3. Enquiries, Quotation Requests and Customer Support

We use information provided through contact forms, quotation requests, email, telephone or other communications to:

respond to enquiries
recommend suitable products
prepare quotations
provide customer support
resolve issues relating to our products and services.

Where the communication concerns a potential or existing purchase, the legal basis may be performance of a contract or steps taken at your request before entering into a contract.

In other circumstances, the legal basis may be our legitimate interest in communicating effectively with customers and business partners, providing support and developing business relationships under Article 6(1)(f) GDPR.

4.4. Security and Fraud Prevention

We may process personal data to:

protect our online store and customer accounts
provide payment security
prevent abuse
detect fraud
investigate security incidents
protect our rights, customers and business.

Legal basis: our legitimate interest in protecting our business, customers, information systems and transactions and, where applicable, compliance with legal obligations.

4.5. Marketing and Newsletters

Where you have subscribed to marketing communications, we may use your contact details to send information about products, offers and other promotional content.

Where prior consent is required by applicable law, the legal basis is your consent under Article 6(1)(a) GDPR.

You may unsubscribe at any time using the unsubscribe link in a marketing communication or by contacting prodaja@mediapark.hr.

Where applicable law allows us to use an existing customer's email address to promote our own similar products, we provide a simple and free means of opting out.

Unsubscribing from marketing does not affect communications required for orders, customer support, security or compliance with legal obligations.

4.6. Right to Object to Direct Marketing

You have the right at any time and free of charge to object to the processing of your personal data for direct marketing purposes, including profiling to the extent that it is related to such direct marketing.

Where you object, we will no longer process your personal data for direct marketing purposes.

4.7. Abandoned Cart or Checkout

Where you start but do not complete a purchase, information relating to an incomplete cart or checkout may be processed for:

technical operation of the store
preserving checkout contents
fraud prevention
analysis of technical issues
sending reminders about an incomplete purchase where such communication is permitted by applicable law.

Marketing or promotional reminders are sent only where an appropriate legal basis exists under applicable data protection and electronic communications laws.

4.8. Analytics, Personalisation and Advertising

With your consent where required, we may use cookies, pixels and similar technologies to:

understand use of our online store
improve functionality and user experience
personalise content
measure advertising performance
optimise marketing campaigns
display more relevant advertising.

Where consent is required for non-essential cookies, pixels or similar tracking technologies, the legal basis is your consent.

5. Whether Providing Personal Data Is Required

Certain personal data is necessary in order for us to enter into and perform a contract with you.

This may particularly include:

your name
billing address
delivery address
email address
information required for payment
information required for delivery.

If you do not provide information required to process payment, issue an invoice or deliver an order, we may be unable to accept or fulfil your order.

Information used solely for marketing, personalisation or non-essential analytics is not a condition of making a purchase.

6. Cookies and Privacy Preferences

Our online store uses necessary cookies required for the operation of the website, shopping cart, checkout, customer accounts, security features and other essential functionality.

With your consent, we may also use cookies for:

personalisation
marketing
analytics.

Where applicable, a cookie consent banner is displayed and allows you to:

accept all non-essential cookies
reject all non-essential cookies
select individual categories.

Optional cookies requiring consent are not enabled by default before you make the relevant choice.

You may change your choices at any time using the Cookie preferences link in the footer of our online store.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

7. Shopify

The protective-cases.eu online store uses the Shopify platform.

Shopify provides technical infrastructure required to operate our online store, including hosting, checkout, customer accounts, security features and other services.

Information submitted through or generated by your interaction with our online store may therefore be processed through Shopify's systems.

Shopify Network Intelligence and Enhanced Services

Shopify Network Intelligence is enabled on our store.

Shopify may use information concerning customer interactions and transactions with our store together with information concerning interactions with other Shopify merchants and Shopify to provide, develop and improve certain advanced features referred to as Enhanced Services.

These features may include:

product and experience personalisation
analytics and reporting
improvements to Shopify products and services
advertising and improved ad targeting.

For certain processing connected with Enhanced Services, Shopify may act as a separate controller, and rights relating to processing for which Shopify is the controller may be exercised directly with Shopify.

In the EEA, United Kingdom and Switzerland, Shopify requires appropriate consent for targeted advertising and the use of non-essential cookies or tracking technologies where required.

Where you do not consent to non-essential cookies or tracking technologies through our Shopify cookie banner, device data from our store is marked so that it is not used in Shopify Network Intelligence for non-essential purposes requiring such consent.

Further information is available in:

Shopify Consumer Privacy Policy
Shopify Privacy Portal

Where applicable, you may use the Shopify Privacy Portal to exercise rights relating to processing carried out by Shopify as a separate controller.

8. Payments

Payments through our online store may be processed through Shopify Payments and related payment service providers.

Payment providers may process information required to:

authorise and complete transactions
verify identity where required
prevent fraud
issue refunds
comply with their legal obligations.

MEDIAPARK does not store your full payment card number or card security code.

9. Delivery and Logistics

To fulfil orders, we may disclose necessary personal data to delivery or logistics providers.

For standard parcel delivery, we use carriers such as DPD.

For oversized, pallet or freight shipments, we may use other logistics providers.

Information provided to delivery or logistics providers may include:

name
address
email address
telephone number
shipment information.

10. Facebook, Instagram and Meta Business Tools

We use or may use services provided by Meta Platforms Ireland Limited for advertising on Facebook and Instagram.

Where Meta Pixel, Conversions API or other Meta Business Tools are connected and enabled, information about interaction with our online store may be collected or provided to Meta, including events such as:

visiting a page
viewing a product
adding a product to cart
starting checkout
completing a purchase
technical and identifying information associated with the browser or device, depending on the configuration used.

This information may be used for:

measuring advertising effectiveness
analytics
campaign optimisation
conversion attribution
displaying more relevant advertising.

In regions where consent is required for such tracking, Meta marketing tracking is activated only after the relevant consent has been provided.

Joint Controllership with Meta

Where Meta Business Tools are used to collect certain Event Data concerning actions taken on our online store and transmit that information to Meta Platforms Ireland Limited, MEDIAPARK and Meta Platforms Ireland Limited may act as joint controllers in relation to that collection and transmission.

Meta Platforms Ireland Limited acts as a separate controller for subsequent processing carried out after the data has been transmitted to Meta, in accordance with Meta's applicable terms and privacy policies.

Further information is available in:

Meta Privacy Policy
Meta Business Tools Terms

11. Recipients of Personal Data

Where necessary for the relevant purpose, personal data may be disclosed to categories of recipients including:

Shopify
payment service providers
delivery and logistics providers
accounting and tax advisers
IT and hosting providers
security and fraud-prevention providers
marketing and analytics providers
Meta Platforms Ireland Limited where the relevant Meta functionality is enabled
professional advisers, including lawyers, where necessary
public authorities, courts, tax authorities or other competent bodies where disclosure is required by law or valid legal process.

Personal data is provided to service providers only to the extent necessary for the purpose for which they are engaged.

12. International Transfers of Personal Data

Although our Shopify store is configured with a European Union data hosting location, Shopify, Meta and other service providers may process or transfer certain personal data outside the European Economic Area.

Where personal data is transferred outside the EEA, an appropriate transfer mechanism is used depending on the provider and destination, such as:

a European Commission adequacy decision
European Commission Standard Contractual Clauses
the EU-U.S. Data Privacy Framework where applicable
another legally recognised transfer mechanism.

You may contact us for additional information about safeguards applicable to international transfers and, where applicable, information about how to obtain a copy of those safeguards.

13. Retention of Personal Data

We do not retain personal data for longer than necessary for the purpose for which it was collected unless longer retention is required or permitted by law.

When determining retention periods, we consider:

the duration of our contractual and business relationship
tax, accounting, fiscal and other statutory requirements
periods applicable to claims and contractual rights
warranty periods
limitation periods
the need to establish, exercise or defend legal claims
security requirements.

In particular:

order, invoice, payment and transaction data is retained for the periods required under applicable tax, accounting and other legislation
information relating to claims, returns, withdrawals and warranties is retained for as long as necessary to deal with those matters and protect legal interests
customer account information is retained while the account remains active or where another lawful reason for retention applies
enquiry and business communication data is retained for as long as necessary to deal with the enquiry, business relationship and protection of legitimate legal interests
marketing data is retained until consent is withdrawn, the individual unsubscribes or another applicable legal basis ceases to apply
information obtained through cookies and similar technologies is retained according to the duration of the relevant technology and your privacy settings.

After the applicable period expires, personal data is deleted or anonymised unless a legal obligation or another valid legal basis requires further retention.

14. Data Security

We apply appropriate technical and organisational measures designed to protect personal data against:

unauthorised access
unlawful processing
accidental loss
destruction
alteration
unauthorised disclosure.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

15. Automated Processing and Profiling

Automated tools and profiling may be used for marketing, analytics, personalisation and advertising to assess interests or behaviour and provide more relevant content or advertising.

Such marketing profiling is subject to your privacy preferences and consent where consent is required.

MEDIAPARK does not use solely automated decision-making in its own operations that by itself produces legal effects concerning you or similarly significantly affects you.

Certain service providers, particularly payment or fraud-prevention providers, may use their own automated systems for security and risk assessment in accordance with their own privacy notices and legal obligations.

16. Your GDPR Rights

Where the GDPR applies to the processing of your personal data, subject to the conditions provided by law you may have the right to:

obtain confirmation as to whether we process your personal data
access your personal data
correct inaccurate or incomplete information
request deletion of personal data
request restriction of processing
exercise the right to data portability
object to processing based on legitimate interests
object at any time to direct marketing
withdraw consent at any time where processing is based on consent
lodge a complaint with a competent supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise your rights, contact:

prodaja@mediapark.hr

We may request reasonable verification of identity before responding to a request in order to protect your personal data.

17. Right to Lodge a Complaint

If you believe that your personal data is being processed in violation of applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.

In Croatia, the competent authority is:

Croatian Personal Data Protection Agency (AZOP)
Ulica Metela Ožegovića 16
10000 Zagreb
Croatia

Email: azop@azop.hr
Phone: +385 1 4609 000

Individuals in other European Economic Area countries may also contact the competent data protection authority in their country.

18. Children

Our online store is not intended for children and we do not knowingly collect children's personal data.

If you believe that a child has provided personal data to us without an appropriate legal basis or authorisation, please contact us so that appropriate action can be taken.

19. Third-Party Links

Our online store may contain links to websites operated by third parties.

We are not responsible for the privacy practices, security or personal data processing carried out by those third-party websites. We recommend reviewing their privacy notices before using those services.

20. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

our business operations
technologies we use
service providers
legal or regulatory requirements.

The current version and the date of the latest update will always be published on this page.

Where a change is material and applicable law requires additional notice, we will provide such notice through an appropriate method.

21. Contact

For questions regarding this Privacy Policy or the exercise of your data protection rights, contact: