Personal data protection
Privacy policy
Information about what personal data we process, why we process it and what rights you have.
Last updated: 23 July 2026
1. Data controller
The controller of personal data is BREZA, vl. Darko Knežević, B. J. Jelačića 4, Brezik, HR-31500 Našice, Croatia (hereinafter “BrezaTubes”). For privacy questions, contact us at breza.nasice@gmail.com or by phone at +385 98 980 7712.
2. Data we may process
- data you provide by email, phone or WhatsApp, such as your name, company name, contact details and the content of your enquiry;
- business and technical information required to prepare a quote, including dimensions, quantities, drawings, photos and specifications;
- technical logs that the web server may automatically record for security and operation of the website, such as IP address, request time, requested page, browser type and error information;
- your cookie preference selection stored locally in your browser.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to enquiries, preparing quotes and taking steps prior to entering into a contract | Taking steps at your request prior to entering into a contract and performance of a contract |
| Business communication and record keeping | Legitimate interest in orderly business operations and documenting communication |
| Compliance with tax, accounting and other legal obligations | Legal obligation |
| Security, prevention of misuse and technical maintenance of the website | Legitimate interest in system security |
| Optional analytics or marketing cookies, if introduced | Your prior consent |
4. Contact via WhatsApp
By clicking a WhatsApp link, you leave this website and continue communication through the Meta/WhatsApp service. The provider’s terms and privacy policy apply to that processing. For confidential technical, contractual or personal information, we recommend email or another agreed channel.
5. Recipients and processors
Data may be accessible to hosting, email, IT support, accounting and legal service providers only to the extent necessary to provide their services and subject to appropriate confidentiality obligations. Data may be disclosed to competent authorities where required by law.
6. Transfers outside the EEA
Use of third-party services, particularly WhatsApp, may involve processing outside the European Economic Area. Such transfers are carried out by the service provider under its own rules and applicable safeguards.
7. Retention periods
Enquiries that do not result in a business relationship are generally retained for up to two years after communication ends, unless longer retention is needed to resolve a dispute or protect legal claims. Data related to quotes, contracts and accounting records is retained for the duration of the relationship and for periods required by applicable law. Server security logs are retained for a limited period determined by the hosting provider and security needs.
8. Your rights
Depending on the legal basis and circumstances, you may request access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise your rights, contact breza.nasice@gmail.com. To protect your data, we may request proof of identity.
9. Complaint to a supervisory authority
If you believe your data is being processed contrary to applicable law, you may contact the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, Croatia.
10. Automated decision-making
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects for you.
11. Changes to this policy
We may update this policy from time to time. The current version is always published on this page with the date of the latest update.