Last updated: 2 September 2026
This Privacy Policy explains how PANARI collects and processes personal data through the panari.hr website, the purposes for which such data is used, the legal basis for processing, how long the data is retained, and the rights you have regarding your personal data.
1. Data Controller
The controller responsible for the processing of personal data is:
PANARI, product development and marketing craft business, owner Nikola Klisović
Tućanova ulica 5, Zagreb, Croatia
Email: info@panari.hr
Phone: +385 99 312 9254
For any questions regarding the processing of personal data or the exercise of your rights, you may contact us using the email address provided above.
2. Personal Data We Collect
Depending on how you use our website, we may process information that you provide to us directly, as well as certain technical data related to your use of the website.
Through our contact form, we collect:
- full name
- email address
- phone number, if you choose to provide it
- information about the service you are interested in
- the content of your message and any other information you voluntarily provide in your inquiry.
Your full name, email address and selected service are required in order for us to process your inquiry. Providing a phone number is optional.
When submitting the form, you are required to confirm that you have read the Privacy Policy and are familiar with how your personal data will be processed for the purpose of responding to your inquiry.
If you contact us directly by email or phone, we process the information you voluntarily provide to us in the course of that communication.
With your consent to statistical cookies, we may also process certain technical data relating to your use of the website, as described in more detail below.
3. Contact Form and Business Communication
We use the personal data you provide through the contact form to receive and process your inquiry, respond to you, communicate with you and, where appropriate, prepare an offer or take other steps at your request prior to potentially entering into a business relationship.
The processing of data submitted through the contact form is based on taking steps at your request prior to entering into a contract or, depending on the nature of your inquiry, on our legitimate interest in responding to business inquiries and conducting business communication. If the communication develops into negotiations or a business relationship, further processing may be based on taking steps prior to entering into a contract, performance of a contract, compliance with legal obligations, or our legitimate interest in maintaining business communication and records.
We do not use your data to send marketing communications solely because you have submitted an inquiry through our contact form.
Please do not send us personal data through the contact form or by email that is not necessary for us to process your inquiry.
4. Website Analytics
To understand how visitors use our website, we use Google Analytics 4, a service provided by Google.
Google Analytics provides us with information such as pages visited, the duration and manner of website use, the source through which visitors arrived at the website, approximate geographic location, and certain information about the device and browser used.
For users in the European Union, Google Analytics does not log or store individual IP addresses. The IP address is used to determine an approximate geographic location before being discarded.
We use Google Analytics together with a consent management system. Statistical tracking is activated in accordance with your choices in the cookie settings, and the legal basis for such processing is your consent.
You may subsequently change your choice or withdraw your consent through the Cookie Settings option available on the website. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
For users in the European Economic Area, Google requires the collection and transmission of appropriate consent signals for relevant uses of data.
5. Cookies
Our website uses cookies that are necessary for its proper and secure operation and, with your consent, statistical cookies.
We use Complianz to manage consent. Your choices are stored so that the website can remember whether you have accepted or rejected individual categories of cookies.
Necessary cookies do not require consent where they are required for the website to function. Statistical cookies are used in accordance with your choices.
A detailed and up-to-date list of cookies, their purposes and retention periods is available in our Cookie Policy.
You can change your choices at any time through the Cookie Settings option available on the website.
6. Recipients and Service Providers
In order to operate our website and provide our services, certain data may be accessible to service providers that process such data on our behalf or in accordance with their own terms of service.
These may include:
- our hosting and email service provider
- Google in connection with our use of Google Analytics
- providers of technical solutions required for the operation of the website and contact form.
We do not sell personal data to third parties.
We may disclose data to competent authorities where required to comply with a legal obligation.
7. Transfers of Data Outside the European Economic Area
The use of certain service providers may involve the processing or transfer of personal data outside the European Economic Area.
Where such transfers take place, appropriate safeguards provided for under applicable data protection legislation are applied.
In the case of Google Analytics, data from devices of users in the EU is initially collected through domains and servers located in the EU before further processing within Google’s infrastructure.
8. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as required to comply with legal, contractual, accounting or other legitimate obligations.
Data received through the contact form or by email is retained for as long as necessary to process and follow up on the inquiry. If the inquiry results in a business relationship, relevant data may be retained for a longer period in accordance with applicable legal and business obligations.
For data processed through Google Analytics, the retention periods configured in our Google Analytics property apply. Currently, the retention period is set to 2 months for event data and 14 months for user data.
Google states that the data retention settings do not affect most standard aggregated reports in Google Analytics.
The duration of individual cookies is specified in the Cookie Policy.
9. Your Rights
In accordance with applicable data protection legislation and depending on the circumstances of the specific processing activity, you have the right to:
- request access to your personal data
- request the correction of inaccurate or incomplete data
- request the deletion of your personal data
- request restriction of processing
- object to processing
- request data portability where the applicable conditions are met
- withdraw your consent at any time where processing is based on consent.
To exercise your rights, you may contact us at info@panari.hr.
Before acting on your request, we may ask you to provide additional information necessary to verify the identity of the person making the request.
If you believe that your personal data is being processed in violation of applicable legislation, you have the right to lodge a complaint with the competent supervisory authority:
Croatian Personal Data Protection Agency (AZOP)
Zagreb, Croatia
10. Personal Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, destruction or unauthorised disclosure.
Despite the measures we take, no method of transmitting or storing data over the internet can guarantee absolute security.
11. Links to Other Websites
Our website may contain links to third-party websites or services.
Once you leave our website, the processing of personal data on those websites is subject to the privacy policies of their respective operators. We are not responsible for how third parties process personal data and recommend that you review their privacy policies.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time due to changes in the way we process personal data, the services we use, or applicable legislation.
The current version of this Privacy Policy will always be available on this website together with the date of the most recent update.