‌Effective Date: March 31, 2026‌

‌Last Updated: March 31, 2026‌

This Privacy Policy describes the policies and procedures of ‌KUBOVIĆ AUTO j.d.o.o.‌ (“we,” “our,” or “Company”) regarding the collection, use, storage, and disclosure of your personal information when you use our website located at ‌www.kubovicauto.com‌ (the “Site” or “Website”) and our related e-commerce services (collectively, the “Services”). By accessing or using our Site and Services, you consent to the data practices described in this policy. If you do not agree, please do not use our Services.

This policy is designed to comply with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and local Croatian laws.

‌1. Information We Collect‌

We collect information to provide, operate, and improve our Services, as well as to communicate with you. The data we collect falls into the following categories:

• ‌Information You Provide Directly:‌
  • ‌Account and Profile Information:‌ When you create an account, place an order, or register for our services, we collect information such as your name, email address, phone number, shipping/billing address, and a password.
  • ‌Transaction and Payment Information:‌ When you make a purchase, we collect details about the transaction, including the products ordered, payment amount, and payment method information. Full credit/debit card details are processed directly by our secure, PCI-DSS compliant payment service providers and are not stored on our servers.
  • ‌Communications:‌ When you contact us via email (e.g., ‌cludsion@kubovicauto.com‌), telephone (‌+385 1 889 5701‌), or through contact forms, we collect the content of your communication, your contact details, and any associated correspondence.
  • ‌User Content:‌ Any reviews, comments, feedback, survey responses, or other content you submit on the Site.
• ‌Information Collected Automatically:‌
  • ‌Device and Log Data:‌ When you visit our Site, our servers automatically record information (“log data”) sent by your browser or device. This may include your IP address, browser type and version, operating system, device type, referring/exit pages, clickstream data, pages viewed, time spent on pages, and other diagnostic data.
  • ‌Cookies and Tracking Technologies:‌ We use cookies, web beacons, pixels, and similar tracking technologies to collect data about your activity on our Site. This data helps us remember your preferences, analyze website traffic, understand user behavior, and serve relevant advertisements.
  • ‌Location Information:‌ We may derive your approximate location (e.g., country, city) from your IP address to provide localized content, pricing, and shipping options.
• ‌Information from Third Parties:‌ We may receive limited information about you from third parties, such as social media platforms (if you connect your account) or payment processors to confirm a transaction.

‌2. How We Use Your Information‌

We use the collected information for the following business purposes:

• To process and fulfill your orders, including managing payments, shipping, and returns.
• To create, manage, and secure your user account.
• To provide customer support and respond to your inquiries.
• To communicate with you about your account, orders, service updates, security alerts, and administrative messages.
• To send you marketing and promotional communications (where you have given your consent). You can opt-out at any time.
• To personalize your experience on our Site, including recommending products and showing relevant offers.
• To monitor and analyze trends, usage, and activities in connection with our Services to improve functionality, security, and user experience.
• To detect, prevent, and investigate fraud, security breaches, and other potentially prohibited or illegal activities.
• To comply with our legal obligations, resolve disputes, and enforce our agreements.

‌3. Legal Basis for Processing (GDPR)‌

For users in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the context in which we collect it. We typically rely on the following bases:

• ‌Contractual Necessity:‌ Processing is necessary to perform our contract with you (e.g., to deliver the products you ordered).
• ‌Legitimate Interests:‌ Processing is in our legitimate interests (e.g., website security, fraud prevention, direct marketing) and not overridden by your data protection interests.
• ‌Consent:‌ You have given us explicit consent for a specific purpose (e.g., sending marketing emails).
• ‌Legal Obligation:‌ Processing is necessary for compliance with a legal obligation.

‌4. Data Sharing and Disclosure‌

We do not sell your personal information. We share your data only in the following circumstances:

• ‌Service Providers:‌ With trusted third-party vendors, agents, and consultants who perform services on our behalf under strict data processing agreements. These include payment processors, shipping and logistics companies, IT and hosting providers, email service providers, and marketing platforms.
• ‌Legal Requirements:‌ To comply with applicable laws, regulations, legal processes, or enforceable governmental requests; to protect the rights, property, and safety of KUBOVIĆ AUTO j.d.o.o., our users, or the public as required or permitted by law.
• ‌Business Transfers:‌ In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company. You will be notified via email and/or a prominent notice on our Site of any change in ownership or use of your information.
• ‌With Your Consent:‌ For any other purpose disclosed to you at the time of collection, with your explicit permission.

‌5. International Data Transfers‌

Your information may be transferred to — and maintained on — computers located outside of Croatia or the EEA where data protection laws may differ. We ensure such transfers are subject to appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, or your explicit consent. Our primary data processing activities are within the EU/EEA.

‌6. Data Security‌

We implement and maintain commercially reasonable administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These include encryption (SSL/TLS) for data in transit, secure servers, access controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

‌7. Data Retention‌

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and its purpose. For example, transaction records are kept for the period required by Croatian accounting and tax laws. When personal data is no longer necessary, we will securely delete or anonymize it.

‌8. Your Data Protection Rights‌

Depending on your location, you may have certain rights regarding your personal information:

• ‌Right to Access & Portability:‌ You can request a copy of the personal data we hold about you.
• ‌Right to Rectification:‌ You can request correction of inaccurate or incomplete data.
• ‌Right to Erasure (“Right to be Forgotten”):‌ You can request deletion of your personal data under certain circumstances.
• ‌Right to Restriction:‌ You can request we restrict the processing of your data.
• ‌Right to Object:‌ You can object to our processing of your data based on legitimate interests.
• ‌Right to Withdraw Consent:‌ Where processing is based on consent, you can withdraw it at any time.
• ‌Right to Lodge a Complaint:‌ You have the right to complain to a data protection authority about our collection and use of your personal data. For users in Croatia, the supervisory authority is the ‌Croatian Personal Data Protection Agency (AZOP)‌.

To exercise these rights, please contact us using the details in Section 10. We will respond within one month, as required by law, and may need to verify your identity before proceeding.

‌9. Cookies and Similar Technologies‌

Our Site uses cookies. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

• ‌Essential Cookies:‌ Necessary for the Site to function (e.g., shopping cart).
• ‌Analytics/Performance Cookies:‌ Allow us to analyze Site usage (e.g., Google Analytics).
• ‌Functionality Cookies:‌ Remember your choices (e.g., language, region).
• ‌Targeting/Advertising Cookies:‌ Track browsing habits to display relevant ads.

For more detailed information, please see our separate ‌Cookie Policy‌ (if applicable) or manage your preferences via our Cookie Consent Banner.

‌10. “Do Not Track” Signals‌

We do not currently respond to “Do Not Track” (DNT) browser signals. We adhere to the standards set out in this Privacy Policy.

‌11. Children’s Privacy‌

Our Services are not directed to individuals under the age of ‌16‌. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us. We will take steps to delete such information from our systems.

‌12. Third-Party Links‌

Our Site may contain links to other websites not operated by us. This Privacy Policy does not apply to those third-party sites. We strongly advise you to review the privacy policy of every site you visit.

‌13. Changes to This Privacy Policy‌

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last Updated” date. For material changes, we will provide a more prominent notice, such as an email notification. We encourage you to review this policy periodically.

‌14. Contact Us‌

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer (DPO) or relevant team at:

‌KUBOVIĆ AUTO j.d.o.o.‌
Baranovićeva ulica 6,
10000 Zagreb,
Croatia
‌Email:‌ ‌cludsion@kubovicauto.com‌ (For privacy inquiries, you may also use: ‌privacy@kubovicauto.com‌ if designated)
‌Phone:‌ ‌+385 1 889 5701