Privacy policy

This policy explains which data we collect through the Oaza Bee website, why we collect it and what your rights are. The data controller is OPG Oaza Bee, Koprivnička ulica 32, 48306 Sokolovac, Croatia (MIBPG 287585).

What data we collect

We collect data only when you send it to us yourself through the contact form or the order form:

• your name
• your e-mail address and phone number
• your delivery address (only for orders with delivery)
• the content of your message or order (products, quantities, note)
• for business inquiries: company name, approximate number of boxes and budget

The basket on the website is stored only in your browser (localStorage) and is not sent to us until you send an order.

With your consent we also collect visit statistics (pages visited, approximate city-level location, device and browser type, referring source). Without consent these statistics are not collected.

Why we collect it

• to reply to your inquiry (legal basis: consent, Art. 6(1)(a) GDPR)

• to process and confirm your order, arrange pickup or delivery and issue an invoice (legal basis: performance of a contract, Art. 6(1)(b) GDPR, and the legal obligation to keep business records)

• to see which content visitors read and improve the website accordingly (legal basis: your consent, Art. 6(1)(a) GDPR — given by clicking “Accept” in the cookie notice)

We do not use your data for newsletters or advertising and we do not sell it to third parties.

Who has access to the data

Messages and orders reach us by e-mail. The following service providers (processors) are involved in delivery:

• Vercel Inc. — hosting of the website and processing of the forms; Vercel Web Analytics is also used, an anonymised visit statistic without cookies and without tracking individuals
• Resend — sending of e-mail messages (the order confirmation to you and the notification to us)
• Google Maps — the map on the Contact page loads from Google’s servers, which may record your IP address
• Google Ireland Limited — Google Analytics 4 (tag G-WQW9X90GHP), visit statistics; it loads only after your consent and only then sets cookies in your browser. Data may be transferred to the USA under the EU-US Data Privacy Framework.

How long we keep the data

We keep inquiries until we reply and for at most 12 months after that. We keep order data for as long as accounting regulations require.

Your rights

At any time you can request access to your data, its correction or deletion, restriction of processing, data portability, and you can withdraw consent. To do so, call us on +385 91 723 5851 or use the contact form. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).

Cookies

Necessary local storage. The basket and your cookie choice are kept in your browser (localStorage) and are not sent anywhere. They need no consent.

Statistics with consent. If you accept, Google Analytics 4 loads and sets the _ga and _ga_* cookies (valid for up to two years) to tell visits apart and measure which pages are read. Until you accept, Google Analytics is not loaded at all and none of its cookies exist.

Withdrawing consent. You can change your choice at any time with the button at the bottom of this page; you can also delete the cookies in your browser settings.

Vercel Web Analytics works without cookies and without tracking individuals, so it needs no consent.