Privacy policy

1. Data controller

The controller of your personal data is Pratto d.o.o., Pavla Štoosa 1a, 10290 Zaprešić, Croatia, phone +385 (0)95 38 171 23, email info@pratto.hr.

2. What data we collect

We only collect personal data when you provide it to us yourself through the contact form:

• your name,
• email address,
• phone number (optional),
• boat model (optional),
• the content of your message.

The website does not use tracking cookies or analytics tools that identify visitors.

3. Purpose and legal basis of processing

We use the data solely to reply to your enquiry and to prepare a quote for our products (stands, boat jacks, storage systems). The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by submitting the form, or steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

4. Processors and recipients

• Web3Forms (Web3Creative, India) – the service that delivers messages from the contact form to our email address. Its servers are located in the USA, so the data in your message is transferred outside the European Union. A copy of the message is also kept in our Web3Forms account, for no longer than the period stated in section 5.
• Vercel Inc. – website hosting. The server may log technical data (IP address, time of access, browser) for the security and operation of the service.
• Google Maps – a Google Maps map (Google Ireland Limited) is embedded on the Contact page. The map loads when you scroll to it; your browser then fetches content from Google’s servers, so Google may process your IP address and use cookies in accordance with its own privacy policy.

We do not sell your data or share it with third parties for marketing purposes.

5. Retention period

We keep messages from the contact form for as long as necessary to handle your enquiry and agree on the service, and for no longer than 12 months, unless the law requires longer retention (e.g. accounting regulations for concluded contracts).

6. Your rights

You have the right at any time to access, rectify, erase and restrict the processing of your data, the right to data portability, and the right to withdraw your consent and to object. Send your request to our contact details in section 1. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, Zagreb, azop.hr.

7. Security

The website is delivered exclusively over an encrypted HTTPS connection. Only authorised company staff have access to the data from enquiries.

8. Changes

We may update this privacy policy from time to time. The current version is always published on this page with the date of the last change.