Privacy Policy
Last updated: 11 October 2026
1. Data controller
The controller of your personal data is CLISSA Plus d.o.o., Bani 75, 10010 Zagreb, email: info@clissa.eu (hereinafter “CLISSA Plus” or “we”).
CLISSA Plus d.o.o., Bani 75, 10010 Zagreb · Registered in the court register of the Commercial Court in Zagreb, MBS 080611564 · EUID: HRSR.080611564 · OIB: 70971346430 · MB: 02233541 · IBAN: HR8324020061101134580, Erste&Steiermärkische Bank d.d., Rijeka · Share capital: EUR 2,650.00, paid in full · Director: Andrej Mandić.
This Privacy Policy is prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Croatian Act on the Implementation of the General Data Protection Regulation (NN 42/18).
2. Personal data we collect
We collect the following categories of personal data:
- Identification data: first and last name
- Contact data: email address, telephone number, delivery/installation address
- Service data: appliance description, installation date and address, order details
- Technical data: IP address, browser type, pages visited (collected anonymously through cookies)
We do not collect special categories of personal data, such as health data, biometric data or data about racial or ethnic origin.
3. Purposes and legal bases of processing
| Purpose | Legal basis (GDPR Article 6) |
|---|---|
| Performance of installation and delivery contracts | Article 6(1)(b) – performance of a contract |
| Responding to contact form or email enquiries | Article 6(1)(f) – legitimate interest |
| Invoicing and tax records | Article 6(1)(c) – legal obligation |
| Warranty documentation and complaints | Article 6(1)(b) – performance of a contract |
| Website improvement (anonymous analytics) | Article 6(1)(f) – legitimate interest |
| Sending business communications (with permission) | Article 6(1)(a) – consent |
4. Recipients of personal data
We do not sell your personal data to third parties. We may share data with:
- Accounting providers — for bookkeeping and tax obligations
- IT providers — for website and email hosting, under appropriate data processing agreements
- Competent authorities — where required by law, such as tax authorities or courts
All recipients are required to maintain confidentiality and use the data only for the agreed purposes.
5. Transfers outside the EU/EEA
CLISSA Plus does not transfer your personal data outside the European Economic Area (EEA). If such a transfer occurs exceptionally, we ensure appropriate safeguards under the GDPR, such as the European Commission's standard contractual clauses.
6. Retention periods
- Contract and invoice data: 11 years after the end of the financial year (legal obligation)
- Warranty documentation: until the warranty expires, plus 2 years
- Contact form enquiries: 12 months after receipt if no contract is concluded
- Technical data (cookies): according to each cookie's duration (see section 8)
7. Your rights
Under the GDPR, you have the following rights:
- Access — request confirmation of processing and a copy of your data
- Rectification — request correction of inaccurate or incomplete data
- Erasure — request deletion where the legal conditions are met
- Restriction — request a temporary restriction of processing in certain cases
- Portability — receive data you supplied in a machine-readable format
- Objection — object to processing based on legitimate interests
- Withdrawal of consent — withdraw consent at any time without affecting the lawfulness of earlier processing
Send requests to info@clissa.eu. We will respond within 30 days. You may also complain to the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, Zagreb, azop.hr.
8. Cookies
Our website uses cookies to ensure proper operation and improve the user experience.
| Cookie type | Purpose | Duration |
|---|---|---|
| Necessary | Basic website functionality | Session |
| Functional | Remembering user preferences | 1 year |
| Analytics (anonymous) | Visitor analysis to improve the website | Up to 13 months |
You can disable or delete cookies in your browser settings. Disabling some cookies may affect website functionality.
9. Data security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or disclosure. The website uses HTTPS encryption. Access is limited to authorised persons who need the data to perform their duties.
10. Changes to this Policy
CLISSA Plus reserves the right to amend this Privacy Policy. Changes will be published on this page with the date of the latest update. We recommend checking this page periodically.
11. Privacy contact
For questions about personal data processing, contact:
- CLISSA Plus d.o.o.
- Bani 75, 10010 Zagreb, Buzin
- Email: info@clissa.eu