Privacy policy
Last updated: August 13, 2026
Medena Caffe d.o.o., operating under the name Pizzeria Medena, respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains what personal data we may collect when you visit the Pizzeria Medena website, use the reservation form, contact us or otherwise use the content and functionality available on our website.
The website uses the Shopify platform, which provides the technical infrastructure and hosting required for the website to function.
Personal data we collect
Depending on how you use our website, we may collect the following information.
Information you provide directly to us
When you use the table reservation form, we may collect:
your name
your phone number
reservation date
reservation time
number of guests
any additional information you voluntarily provide in the notes field
When you contact us by email or through another communication channel, we may process the information you provide to us.
Technical information
When you use our website, certain technical information may be processed automatically, including:
IP address
device type
browser type
operating system
information about how you use and interact with the website
other technical information required for the secure and proper functioning of the website
Such information may be processed through the Shopify platform and related technologies.
How we use your personal data
We use personal data only for the purposes for which it was collected or where another appropriate legal basis applies.
Table reservations
We use the information submitted through the reservation form to receive and process your reservation request and, where necessary, to contact you regarding the reservation.
Submitting a reservation request through the form does not necessarily mean that the reservation has been automatically confirmed.
Communication with you
If you contact us by email, phone or through a form on the website, we may use your information to respond to your inquiry or provide the requested information.
Website functionality and security
Certain technical data may be processed to ensure the proper functioning of the website, maintain system security, identify technical issues and prevent misuse.
Improving the website
Where permitted by applicable law and depending on your privacy preferences, we may use information about website usage to better understand how visitors use the website and to improve its content and functionality.
Legal basis for processing
Depending on the circumstances, we may process personal data on the basis of:
your request prior to the provision of a particular service, such as a reservation request
our legitimate interests in ensuring the secure and efficient operation of the website and communicating with users
your consent, where required, for example for certain types of cookies
compliance with our legal obligations
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
Cookies
Our website may use cookies and similar technologies.
Cookies are small files that a website may store on your device in order to enable proper website functionality, remember certain preferences or collect information about website usage.
Some cookies are strictly necessary for the technical operation of the website and cannot be disabled where they are required to provide essential functionality.
Other cookies, such as those related to analytics, personalization or marketing, are used only where there is an appropriate legal basis and, where required, with your consent.
You can manage your cookie preferences through the cookie banner or the Cookie Preferences option available on our website.
Shopify
Our website uses the Shopify platform for hosting and technical operation.
Shopify may process certain technical and personal data related to your use of the website in order to provide its services, maintain platform security and ensure proper functionality.
Certain data may be processed outside the country in which you live. Where required by applicable law, appropriate safeguards are used for such transfers of personal data.
Service providers and recipients of personal data
We may share your personal data with service providers only where this is necessary for the operation of the website or the provision of a requested service.
This may include Shopify and other technical service providers that support website hosting, maintenance, security and functionality.
We may also disclose personal data to competent authorities where required by law or pursuant to a valid legal request.
We do not sell personal data to third parties.
Links to third party websites
Our website may contain links to external websites, social media platforms or other services operated by third parties.
When you leave our website and visit a third party website, the privacy practices of that third party apply.
We are not responsible for the content, security or personal data processing practices of websites that we do not control.
Data retention
We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as required to comply with legal obligations, protect our rights or resolve possible disputes.
Retention periods may vary depending on the type of personal data and the purpose of processing.
Information related to reservations is not used for other purposes unless there is an appropriate legal basis for doing so.
Security of personal data
We apply reasonable organizational and technical measures to protect personal data against unauthorized access, loss, misuse or unauthorized disclosure.
However, no method of transmitting or storing information over the internet can guarantee absolute security.
Your rights
Under applicable data protection laws, you may have the right to:
request access to your personal data
request correction of inaccurate or incomplete personal data
request deletion of personal data where the legal requirements are met
request restriction of processing
object to certain types of personal data processing
request data portability where the legal requirements are met
withdraw your consent where processing is based on consent
lodge a complaint with the competent data protection authority
Complaints
If you have any questions or complaints regarding the way we process your personal data, you may first contact us using the contact details provided below.
You also have the right to lodge a complaint with the competent data protection authority.
In the Republic of Croatia, the competent authority is the Croatian Personal Data Protection Agency (AZOP).
International data transfers
Certain service providers we use may process personal data outside the European Economic Area.
Where personal data is transferred to a country that has not been recognized as providing an adequate level of protection, appropriate safeguards are used in accordance with applicable law, where required.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the way the website operates, the technologies we use or legal and regulatory requirements.
The current version will always be available on this website together with the date of the latest update.
Contact
If you have any questions about this Privacy Policy, the way we process your personal data or if you wish to exercise any of your rights, you can contact us by email at:
Medena Caffe d.o.o.
Slavonska avenija 7
10000 Zagreb
Croatia
Pizzeria Medena location:
Sortina 1E
10000 Zagreb
Croatia
For the purposes of applicable data protection laws, Medena Caffe d.o.o. is the controller of your personal data.