This privacy policy explains how Sweet Crust processes personal data in connection with its website, contact channels, and bakery services in Croatia. It applies to users who browse the site, submit enquiries, place orders, or otherwise interact with the website.
We use personal data to respond to contact form submissions, manage enquiries, confirm orders and collection preferences, process subscription-related communications, maintain website security, and support technical delivery of the site. Data may also be used to handle legal, accounting, or compliance obligations where applicable.
Data may be shared with service providers that support website hosting, technical delivery, security, or message handling, to the extent necessary for those functions. Any such recipient is expected to process the data only for the instructed purpose and under appropriate confidentiality and security conditions.
Personal data may be disclosed where required by law, court order, or a lawful request from a competent authority. Disclosure may also occur where necessary to establish, exercise, or defend legal claims, or to comply with record-keeping obligations.
We may process name, email address, phone number if provided, inquiry messages, order specifications, event date or collection preferences, and allergen information voluntarily supplied by the user. We also process technical data such as server request metadata and browser and device information when the website is used.
Data is received when a user submits the contact form, sends an email, calls by phone, places an order at the counter, or otherwise communicates with Sweet Crust. Technical data is generated automatically through the operation of the website and related security and delivery functions.
Confirmed cookie uses are limited to essential site operation and storing privacy preferences. No analytics or marketing cookies are confirmed as active. Cookie use is kept to what is necessary for the website to function and to record user choices where applicable.
The website uses essential cookies for site operation and cookies that remember privacy preferences. Users may control cookies through browser settings and, where available, through the site’s preference controls. Disabling essential cookies may affect basic website functions.
Subject to applicable law, individuals may have rights to access their data, correct inaccurate information, request deletion, object to certain processing, and seek restriction of processing. Requests are reviewed in light of the legal basis, the purpose of processing, and any retention obligation that applies.
A rights request should identify the relevant data and the nature of the request with sufficient detail for verification. Sweet Crust may ask for additional information where needed to confirm identity or to locate the relevant records before responding.
Personal data is kept only for as long as needed for the relevant purpose, including handling enquiries, managing orders, maintaining website security, and meeting legal obligations. When data is no longer required, it is deleted or anonymised according to the applicable retention practice and legal requirements.
This privacy policy may be updated from time to time to reflect changes in processing practices, legal requirements, or website functionality. The current version applies from the time it is published on the website unless a different effective date is stated.
Sweet Crust processes personal data as controller for the purposes described in this notice. The processing is based on website operation, handling of enquiries and orders, technical delivery, and security measures, together with any other lawful basis that may apply under GDPR to the specific processing activity.
Where GDPR applies, users in the European Economic Area are covered by the rights and safeguards described in this policy.
Where GDPR applies, individuals may request access, rectification, erasure, restriction, objection, and data portability, subject to legal limits and the circumstances of the processing. Where consent is used, it may be withdrawn for future processing without affecting prior lawful processing.
