PERSONAL DATA WE PROCESS

Depending on how you use our website, we may process:

• Your name, billing address, delivery address, email address and telephone number
• Information about your orders, purchases, returns and complaints
• Customer account information
• Messages submitted through our website or customer service channels
• Newsletter subscription and marketing preferences
• Transaction information received from payment providers
• IP address, browser, device and website usage information
• Cookie identifiers and consent preferences

Payment card details are processed by our payment service provider. Fikus does not receive or store complete payment card details.

PURPOSES AND LEGAL BASES

We process personal data for the following purposes:

Order processing and delivery
We use identification, contact and order information to accept purchases, arrange payment, fulfil orders, deliver products and communicate about orders. The legal basis is the performance of a contract or taking steps at your request before entering into a contract.

Returns, complaints and customer support
We process relevant order and communication information to answer enquiries, manage returns, resolve complaints and protect legal claims. The legal bases are the performance of a contract, compliance with legal obligations and our legitimate interest in providing customer support and protecting our legal rights.

Accounting and legal compliance
We retain transaction, invoice and order information where required by tax, accounting, consumer protection or other applicable laws. The legal basis is compliance with a legal obligation.

Website security and fraud prevention
We process necessary technical and transaction information to protect our website, customers and payments against misuse, unauthorised access and fraud. The legal basis is our legitimate interest in operating a secure online store.

Newsletter and direct marketing
If you subscribe to our newsletter, we use your email address to send product news, offers and store updates. The legal basis is your consent. You may withdraw your consent at any time by using the unsubscribe link in any marketing email.

Optional analytics and advertising
If analytics or advertising tools are activated, they will be used only after obtaining any consent required by law. You may accept, reject or change your preferences through the website’s cookie settings.

INFORMATION REQUIRED TO PLACE AN ORDER

The information requested during checkout is necessary to process payment, fulfil the purchase and deliver the order. If you do not provide the required information, we may be unable to complete your order.

Newsletter subscription and optional cookie consent are voluntary and are not required to make a purchase.

DROPSHIPPING AND ORDER FULFILMENT

Fikus operates using a dropshipping model. Products may be prepared and dispatched directly by our partner suppliers.

For order fulfilment, we may provide Hertwill, the relevant product supplier and the selected courier or postal service with the customer’s name, delivery address, telephone number, email address and relevant order information.

Only information necessary to prepare, dispatch, deliver or manage the order is shared.

RECIPIENTS OF PERSONAL DATA

Personal data may be shared with the following categories of recipients where necessary:

• Wix.com, which provides our website, hosting and e-commerce platform
• Stripe and other activated payment service providers
• Hertwill and the supplier responsible for fulfilling the ordered product
• Couriers and postal services responsible for delivery
• Providers of email, customer support and website security services
• Analytics or advertising providers, if such services are activated and valid consent has been obtained
• Accounting, legal and professional advisers
• Courts, regulators, tax authorities or other public bodies where disclosure is required by law

These recipients may process only the information required to provide their services or comply with applicable law.

INTERNATIONAL DATA TRANSFERS

Some of our service providers may process personal data outside the European Economic Area.

Where required, such transfers are based on a European Commission adequacy decision, Standard Contractual Clauses or another safeguard recognised under applicable data protection law.

Information about transfers performed by individual service providers is available in their respective privacy policies.

DATA RETENTION

Personal data is retained only for as long as necessary for the purposes described in this Privacy Policy.

Order, transaction and accounting records are retained for the periods required by applicable tax and accounting laws.

Customer service and complaint records are retained for as long as necessary to resolve the matter and establish, exercise or defend legal claims.

Customer account data is retained while the account remains active and is deleted upon request, except for information that must be retained by law.

Newsletter information is retained until you unsubscribe or withdraw your consent. A minimal record may subsequently be retained to ensure that your marketing preference continues to be respected.

Cookie retention periods are shown through the website’s cookie settings or cookie information panel.

COOKIES

Our website uses cookies and similar technologies.

Essential cookies are used for website security, shopping-cart functionality, checkout and services requested by the visitor. They cannot be disabled where they are strictly necessary for the operation of the website.

Optional analytics, functionality and advertising cookies are used only in accordance with your cookie preferences and applicable law.

You can accept, reject or manage optional cookies through the cookie banner. Withdrawing consent does not affect processing performed before the withdrawal.

YOUR RIGHTS

Subject to the conditions established by the General Data Protection Regulation, you may have the right to:

• Access your personal data
• Correct inaccurate or incomplete information
• Request deletion of your personal data
• Restrict the processing of your personal data
• Object to processing based on legitimate interests
• Object at any time to direct marketing
• Receive eligible personal data in a portable format
• Withdraw consent at any time
• Submit a complaint to a supervisory authority

To exercise your rights, contact us at info@fikus.site

We may request additional information where reasonably necessary to confirm your identity before responding to a request.

You also have the right to submit a complaint to:

Croatian Personal Data Protection Agency — AZOP
Selska cesta 136
10000 Zagreb, Croatia
www.azop.hr

AUTOMATED DECISION-MAKING

Fikus does not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects.

Payment service providers may use automated systems for security and fraud prevention in accordance with their own terms and privacy policies.

CHILDREN’S DATA

Our products may be intended for children, but purchases, customer accounts and newsletter subscriptions are intended for adults.

We do not knowingly request or collect personal data directly from children. If you believe that a child has provided personal data through our website, please contact us.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy when our services, service providers or legal obligations change. The current version and its latest revision date will be published on this page.

DATA CONTROLLER

The Fikus online store is operated by:

Couturierista, obrt za trgovinu i digitalne usluge, vl. Fides Ravlić
Registered office: Sroki, Gornji Sroki 66, Republic of Croatia
Website: www.fikus.site
Email: info@fikus.site

Couturierista is the controller of personal data processed through the Fikus online store.