Privacy policy
What personal data we process, why, for how long and what rights you have.
This is a translation. The Croatian version of this page is legally binding.
Data controller
The controller of personal data is SE-KRA d.o.o. za proizvodnju i trgovinu, Neretvanska ulica 20, 10361 Sesvetski Kraljevec, OIB 37645988001. Other company details can be found in the Legal notice.
For any questions about personal data, write to us at se-kra@se-kra.hr.
What data we process
We only process the data you send us yourself by e-mail or phone: your first and last name, e-mail address, phone number and the content of your enquiry.
If you consent, we also record how the website is used: pages visited, clicks on phone numbers, e-mail addresses, branch directions and brochures, the type of device and browser, and approximate location (country and city). This data does not include your name or contact details.
The website has no data entry form and does not display adverts.
Purpose and legal basis
- Replying to enquiries and preparing offers: we use your data to reply to you and, if you wish, to prepare an offer or conclude a contract (Article 6(1)(b) of the General Data Protection Regulation, GDPR).
- Website security: the server records technical access data, including IP addresses, to protect against attacks and fix errors. The legal basis is our legitimate interest (Article 6(1)(f) GDPR).
- Visitor statistics: Google Analytics shows us which pages are useful and what needs improving. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time in “Cookie settings” at the bottom of the page.
How long we keep data
We keep enquiry data for as long as is needed to reply to you and for the duration of our business relationship. Offers, invoices and other business documents are kept for as long as the law requires.
Visit data in Google Analytics is kept for 14 months and then deleted automatically.
Hosting and processors
The website uses three external services, which process data on our behalf:
- Vercel (website hosting): the server keeps access logs with IP addresses, for the security and operation of the website.
- Supabase (content database and photos): the data is located in the European Union (Frankfurt). Photos are delivered via the Cloudflare network, which also sees your IP address in the process.
- Google Analytics (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland): visitor statistics, only with your consent. Google signals and ad personalisation are switched off, and we do not use the data for advertising.
Vercel and Supabase are companies from the United States of America, and Google Ireland Ltd. is part of the Google group, headquartered in the USA. If data is transferred outside the European Union, the transfer is based on the European Commission's standard contractual clauses or on the EU-U.S. Data Privacy Framework.
We do not sell personal data or share it with others for advertising.
External links
Links to Facebook and Instagram, branch directions (Google Maps) and sharing a product page on WhatsApp open these services only when you click. From that moment on, their privacy policies apply, not this one.
Your rights
With regard to your personal data, you have the right:
- to access the data we hold about you,
- to have inaccurate data corrected,
- to have your data erased,
- to restrict processing,
- to object to processing based on legitimate interest,
- to data portability,
- to withdraw consent to analytics at any time, which does not affect the lawfulness of processing before withdrawal.
Send your request to se-kra@se-kra.hr. If you believe that we process your data in breach of the regulations, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP, azop.hr).
Cookies
What the website stores in your browser is described on the Cookies page.
Last updated: 29 September 2026
