Effective Date: November 6, 2026

Welcome to the privacy policy of TIKA j.d.o.o., the operator of the e-commerce website www.tikajdoo.com. This document is designed to clearly outline how we collect, use, store, disclose, and protect your personal information when you access, browse, or make purchases on our platform. We prioritize the protection of your privacy rights in full compliance with applicable data protection regulations in the Republic of Croatia, the General Data Protection Regulation (GDPR), and other relevant global data protection standards for e-commerce operations. We encourage you to read this policy carefully to understand our practices regarding your personal data, as using our website signifies your explicit agreement to all terms laid out in this document. If you do not agree with any part of this policy, please refrain from accessing or using our e-commerce services.

1. Data Controller Information

The data controller responsible for your personal information processing activities is:

• Full Legal Name: TIKA j.d.o.o.
• Registered Address: Ulica Ivana Gundulića 11, 42240 Ivanec, Croatia
• Contact Email: myth@tikajdoo.com
• Contact Telephone Number: +385 42 771 790

You may reach out to us at any time via the listed contact methods for any inquiries, concerns, or requests related to your personal data and privacy rights. Our dedicated data protection team will respond to all valid requests within 7 business days, in accordance with legal requirements.

2. Types of Personal Information We Collect

We only collect information that is necessary for delivering a secure, seamless, and high-quality e-commerce shopping experience to you. The categories of personal information we may gather include:

2.1 Information You Provide Voluntarily

When you create an account, place an order, sign up for our newsletter, submit contact forms, or interact with customer support on our website, you may voluntarily provide the following data:

• Full name, billing address, shipping address, and postal code
• Contact details including email address and mobile/telephone number
• Payment-related information such as billing name, payment card number (processed exclusively through our PCI DSS-compliant third-party payment processors, with no full card details stored on our internal servers), and transaction billing records
• Account credentials including username and encrypted password for your registered user profile
• Optional preference information such as product category interests, size preferences, and marketing communication preferences that you choose to share with us
• Any additional content you submit to us via customer service messages, product review submissions, or feedback forms

2.2 Information Collected Automatically Through Website Usage

When you browse our www.tikajdoo.com website, we automatically collect certain technical data to optimize platform performance, prevent fraud, and improve your shopping experience:

• Device information including your browser type, operating system, device model, unique device identifier, and IP address
• Website usage data including pages you visit, products you view, time spent on our platform, click-through patterns, search queries entered on our site, and referral source URLs that directed you to our website
• Cookie and similar tracking technology data, as further detailed in Section 3 of this policy
• Geolocation data (general regional level only, no precise real-time location tracking is performed unless you explicitly grant us separate permission) to show you region-specific product pricing, shipping options, and relevant local promotions.

3. Use of Cookies and Tracking Technologies

Our e-commerce website uses cookies, web beacons, pixel tags, and other similar tracking tools to distinguish your browsing session from other users, remember your preferences, and deliver a personalized shopping experience.

• ‌Necessary Cookies‌: These cookies are strictly required for the core functionality of our website to operate, including maintaining your logged-in session, saving items to your shopping cart, processing checkout workflows, and preventing unauthorized access to your account. You cannot disable these cookies through standard browser settings without breaking critical functions of our e-commerce platform.
• ‌Performance Cookies‌: These cookies collect anonymous aggregated data about how visitors interact with our website, to help us identify performance bottlenecks, resolve technical errors, and optimize page loading speeds for a smoother shopping experience. All data collected by performance cookies is anonymized and cannot be linked back to individual users.
• ‌Functional Cookies‌: These cookies remember your custom preferences, such as your selected language, saved shipping addresses, and favorite product filters, so you do not need to re-enter these settings every time you return to www.tikajdoo.com.
• ‌Marketing Cookies‌: With your explicit prior consent, these cookies are used to display targeted product advertisements and promotional offers that are relevant to your past browsing and purchase behavior on our platform, both on our website and on partnered third-party advertising platforms. You have the full right to opt out of marketing cookie usage at any time via the cookie settings panel on our website, or through your general browser privacy settings.

4. Legal Basis and Purposes for Processing Your Personal Data

We process your personal information only when there is a valid legal basis under applicable data protection laws, for the following specified purposes:

1. ‌Contract Performance‌: Processing your personal data is necessary to fulfill the terms of our sales contract with you, including processing your order, verifying your payment, arranging shipping and delivery, sending you order status updates, handling returns and refunds, and providing after-sales customer support services.
2. ‌Legitimate Interests‌: We process a limited set of your data for our legitimate business interests that do not override your fundamental privacy rights, including preventing fraudulent transactions, securing our website from cyberattacks, analyzing platform usage trends to improve our product offerings, sending you service-related non-marketing notifications about critical website updates, and resolving disputes that may arise from our business relationship.
3. ‌Explicit Consent‌: For activities that require your separate agreement, including sending you our promotional newsletter, sharing your anonymized purchase data with trusted partner brands for exclusive co-branded offers, and processing your precise geolocation data for localized delivery recommendations, we will collect your clear, freely given, specific, and revocable consent in advance. You may withdraw your consent at any time by contacting us at myth@tikajdoo.com, and we will cease the relevant processing activity immediately without affecting the lawfulness of processing conducted prior to your consent withdrawal.
4. ‌Legal Compliance‌: We may process your personal data when it is necessary to comply with our legal obligations under Croatian tax laws, consumer protection regulations, court orders, or other mandatory legal requests from competent public authorities.

5. Disclosure and Sharing of Your Personal Information

We never sell, rent, or lease your personal identifiable information to unrelated third parties for their independent marketing purposes. We may share your data only with the following limited categories of trusted third parties, to the extent strictly necessary to deliver our e-commerce services:

• ‌Authorized Service Providers‌: We share necessary data with our carefully vetted third-party service vendors who perform critical functions on our behalf, including PCI-compliant payment processors, international and domestic shipping carriers, cloud hosting providers that store our website and customer data, customer support outsourcing partners (under strict data confidentiality agreements), email delivery service providers, and fraud detection tool vendors. All of these service providers are bound by strict data processing agreements that require them to protect your personal information at the same security standards we maintain, and they are prohibited from using your data for any purposes other than the explicit tasks we have contracted them to complete.
• ‌Legal Authorities and Regulatory Bodies‌: We may disclose your personal information if we are required to do so by a valid court order, government investigation, legal subpoena, or other mandatory legal requirement, or if such disclosure is necessary to protect our legal rights, the safety of our other customers, the integrity of our platform, or to defend against legal claims.
• ‌Business Transfer Scenarios‌: In the event of a merger, acquisition, full or partial sale of our business assets, corporate restructuring, or transfer of our e-commerce operations to another entity, your personal information may be transferred as part of the business assets. We will provide you with advance notice of such a transfer, and ensure that the receiving entity is bound by equivalent privacy protection obligations that comply with all applicable data protection laws.

6. International Data Transfers

As a Croatia-based company operating in the European Union single market, most of your personal data is stored and processed on servers located within the European Economic Area (EEA). In rare cases where we need to transfer your data to a third country outside the EEA that does not have an adequacy decision from the European Commission, we will ensure that appropriate safeguards are put in place, including using standard contractual clauses approved by the European Commission, or verifying that the receiving party has binding corporate rules that meet GDPR-compliant data protection standards. You may request a copy of these appropriate safeguard documents by contacting us at the contact details listed in Section 1.

7. Data Retention Period

We will not keep your personal identifiable information for longer than is strictly necessary to fulfill the specific purposes for which it was originally collected. For different categories of data:

• Order-related transaction data, including billing, shipping, and purchase records, will be retained for 10 years after the completion of your order, in compliance with Croatian tax and commercial record-keeping legal requirements.
• Registered user account data will be retained for the full duration that your account remains active on our platform. If you choose to permanently delete your account, we will erase all your related personal data within 30 days, except for the limited data we are legally obligated to retain for tax, accounting, or ongoing legal dispute resolution purposes.
• Marketing communication related contact data (such as your email address for newsletter delivery) will be retained until you opt out of our marketing communications, or request that we delete your contact information.
• Automatically collected anonymous usage and analytics data will be retained for a maximum of 24 months, after which it is fully anonymized and aggregated so that it can no longer be linked back to any individual user.

8. Your Privacy Rights

Under the GDPR and applicable Croatian data protection legislation, you hold the following comprehensive rights related to your personal data processing activities:

1. ‌Right of Access‌: You have the right to request a free copy of all personal information we hold about you, along with a detailed description of how we process that data.
2. ‌Right to Rectification‌: If you find that any of the personal data we hold about you is inaccurate, incomplete, or outdated, you may submit a request to us, and we will correct it without unnecessary delay.
3. ‌Right to Erasure (“Right to be Forgotten”)‌: Under specific circumstances, including when your personal data is no longer necessary for the original purposes it was collected, you withdraw your consent to processing, or our processing of your data violates applicable laws, you have the right to request that we delete all your personal identifiable information. We will honor this request unless we are legally required to retain certain data to fulfill our legal obligations.
4. ‌Right to Restriction of Processing‌: You have the right to request that we temporarily pause the processing of your personal data in scenarios where you contest the accuracy of the data, our processing of your data is unlawful, you no longer need the data but we require it for legal claim establishment or defense, or you have objected to our legitimate interest based processing during the period of verification for our overriding legitimate grounds.
5. ‌Right to Data Portability‌: You may request to receive all the personal data you have provided to us in a structured, commonly used, machine-readable format, or request us to transmit this data directly to another data controller, where technically feasible.
6. ‌Right to Object‌: You have the full right to object to our processing of your personal data for direct marketing purposes at any time, free of charge. You may also object to processing based on our legitimate interests, and we will cease the processing unless we demonstrate compelling legitimate grounds that override your rights, freedoms, and interests.
7. ‌Right to Lodge a Complaint‌: If you believe that our processing of your personal information violates applicable data protection regulations, you have the right to submit a complaint directly to the competent Croatian data protection authority, or your local national data protection supervisory body within the EEA.

To exercise any of the above rights, you may send your request to us via email at myth@tikajdoo.com, or via post to our registered address at Ulica Ivana Gundulića 11, 42240 Ivanec, Croatia. We may first verify your identity by requesting a copy of a valid government-issued identification document, to ensure that the request is submitted by the legitimate data owner, to prevent unauthorized third parties from accessing or modifying your personal data. We will respond to all valid requests without undue delay, no later than one month from the date we receive your verified request.

9. Security Measures for Your Personal Data

We implement industry-leading technical, administrative, and physical security measures to protect your personal information against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include end-to-end SSL encryption for all data transmitted between your browser and our www.tikajdoo.com server, regular monthly security audits and penetration testing of our platform, role-based access controls that limit employee access to your personal data only to the extent required to perform their job duties, regular staff data protection and privacy training, encrypted offline backups of all transaction data stored in physically secured server facilities, and up-to-date firewall and anti-malware systems to block cyber threats. While we strive to maintain the highest possible security standards, no data transmission or storage system can be guaranteed to be 100% invulnerable. If we ever detect a personal data breach that poses a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of discovering the breach, in full compliance with GDPR requirements.

10. Protection of Minors

Our www.tikajdoo.com e-commerce platform is not intended for use by individuals under the age of 16. We do not knowingly collect any personal identifiable information from minors under 16 years of age. If we become aware that we have collected personal data from a minor without verifiable parental consent as required by applicable law, we will immediately delete that information from all our systems. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at myth@tikajdoo.com, and we will take prompt action to remove the relevant data.

11. Third-Party Links

Our e-commerce website may contain hyperlinks to external third-party websites, including partner brand pages, social media platform links, or recommended product review sites that are not operated or controlled by TIKA j.d.o.o. This privacy policy applies exclusively to data processing activities conducted on www.tikajdoo.com. We hold no responsibility for the privacy policies, data practices, or content of any external third-party websites you navigate to via links on our platform. We strongly recommend that you review the separate privacy policy of every website you visit after leaving our platform, to understand their respective data collection and processing rules.

12. Updates to This Privacy Policy

We may occasionally update and revise this privacy policy to reflect changes in our business operations, new legal and regulatory requirements, new features added to our e-commerce platform, or feedback we receive from our customers. When we make material changes to this policy, we will update the “Effective Date” listed at the top of the document, and post a prominent notification on the homepage of www.tikajdoo.com to draw your attention to the updates. For changes that significantly expand the scope of our personal data collection or modify existing processing purposes, we will also obtain your explicit renewed consent before we implement the new policy terms. Your continued use of our website after the effective date of the revised policy will be considered as your acknowledgement and agreement to the updated terms.

13. Contact Us

If you have any questions, comments, or concerns about this Privacy Policy, our data processing practices, or wish to exercise any of your privacy rights outlined in this document, please do not hesitate to reach out to us:
By Email: myth@tikajdoo.com
By Phone: +385 42 771 790
By Post: TIKA j.d.o.o., Ulica Ivana Gundulića 11, 42240 Ivanec, Croatia

Our team is committed to addressing all your privacy related inquiries thoroughly and transparently, to ensure that your personal information is always protected to the highest possible standards while you enjoy a safe and convenient shopping experience on our e-commerce platform.