Privacy policy
Last updated: October 13, 2026
Medena Caffe d.o.o., operating under the name Pizzeria Medena, respects your privacy and is committed to protecting your personal data.
This Privacy Policy describes the personal data we may collect when you visit the Pizzeria Medena website, contact us, or otherwise use the content and features of our website.
Our website uses the Shopify platform, which provides hosting and technical functionality.
Personal Data We Collect
Depending on how you use our website, we may collect the following types of data.
Information You Provide Directly
When you contact us by email or through other means, we may process the information you provide to us in connection with your communication.
Technical Data
When you use our website, certain technical data may be processed automatically, including:
IP address
device type
browser type
operating system
information about website usage and interactions
other technical information necessary for the secure and proper functioning of the website
Such data may be processed through the Shopify platform and related technologies.
How We Use Your Personal Data
We use personal data only for the purposes for which it was collected or where another appropriate legal basis for processing exists.
Communication With You
If you contact us by email or telephone, we may use your information to respond to your inquiry or provide the information you requested.
Website Functionality and Security
Certain technical data may be processed to ensure the proper functioning of the website, maintain system security, identify technical issues, and prevent misuse.
Website Improvement
Where permitted by applicable law and depending on your privacy settings, we may use website usage data to better understand how visitors use our website and to improve its content and functionality.
Legal Basis for Processing
Depending on the circumstances, we may process personal data on the following legal bases:
your request before providing a particular service
our legitimate interest in ensuring the secure and efficient operation of the website and communicating with visitors
your consent, where required, for example for certain types of cookies
compliance with our legal obligations
You may withdraw your consent at any time where processing is based on consent. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Cookies
Our website may use cookies and similar technologies.
Cookies are small files that a website may store on your device to ensure its proper functioning, remember certain settings, or collect information about website usage.
Certain cookies are necessary for the technical functioning of the website and cannot be disabled if they are required to provide essential features.
Other cookies, such as those related to analytics, personalization, or marketing, are used only where an appropriate legal basis exists and where your consent is required.
You can manage your cookie preferences through the cookie banner or the Cookie Settings option available on our website.
The privacy settings and cookie banner shown to visitors can be configured through Shopify's Customer Privacy settings.
Shopify
Our website uses the Shopify platform for hosting and technical functionality.
Shopify may process certain technical and personal data associated with the use of our website to provide its services, maintain platform security, and ensure proper functionality.
Certain data may be processed outside the country in which you reside. Where required by applicable law, appropriate safeguards are used for such transfers of personal data.
Shopify provides its own privacy tools and features to support GDPR compliance, including cookie banner management and privacy settings.
Service Providers and Data Recipients
We may share your personal data with service providers only when necessary for the operation of the website or the provision of a requested service.
These may include Shopify and other technical service providers that assist us with hosting, maintenance, security, and website functionality.
We may also disclose data to competent authorities where required by law or by a valid request from a competent authority.
We do not sell personal data to third parties.
Links to Other Websites
Our website may contain links to external websites and platforms, such as social media networks or other third party services.
When you leave our website and visit a third party website, that third party's privacy policy applies to the processing of your data.
We are not responsible for the content, security, or personal data processing practices of websites that we do not operate.
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required to comply with legal obligations, protect our rights, or resolve potential disputes.
The retention period may vary depending on the type of data and the purpose of processing.
Data Security
We implement reasonable organizational and technical measures to protect personal data against unauthorized access, loss, misuse, or unauthorized disclosure.
However, no method of transmitting or storing data over the internet can guarantee absolute security.
Your Rights
Under applicable data protection laws, you may have the right to:
request access to your personal data
request the correction of inaccurate or incomplete data
request the deletion of personal data where the legal requirements are met
request the restriction of processing
object to certain types of processing
request data portability where the legal requirements are met
withdraw your consent where processing is based on consent
lodge a complaint with the competent data protection authority
These rights correspond to the rights granted to individuals under the GDPR.
Complaints
If you have any questions or complaints regarding how we process your personal data, you may contact us using the contact details provided below.
You also have the right to lodge a complaint with the competent data protection authority.
In Croatia, the competent authority is the Croatian Personal Data Protection Agency (AZOP).
International Data Transfers
Certain service providers we use may process data outside the European Economic Area.
Where personal data is transferred to countries for which no adequacy decision has been adopted, appropriate safeguards are applied in accordance with applicable law, where required.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in how our website operates, the technologies we use, or legal and regulatory requirements.
The current version will always be available on this website, together with the date of the latest update.
Contact
If you have any questions about this Privacy Policy, how we process your personal data, or wish to exercise any of your rights, you can contact us by email:
Medena Caffe d.o.o.
Slavonska avenija 7
10000 Zagreb
Croatia
Pizzeria Medena location:
Sortina 1E
10000 Zagreb
Croatia
For the purposes of applicable data protection laws, Medena Caffe d.o.o. is the data controller.