Skip to content
Auto Detailing Đeki
Effective from 7 October 2026.

Privacy Policy

Protecting your personal data matters to us. Below we explain which data we collect when you use this website or our services, for what purposes, on what legal basis, how long we keep it and what rights you have under the General Data Protection Regulation (GDPR).

Controller

Auto Detailing Đeki j.d.o.o.
Vladimira Nazora 12
40315 Mursko Središće
Croatia
OIB (tax number): 54481158845
E-mail: [email protected]
Phone: +385 91 567 1197

1. Contact form

When you send us a message using the form on the Contact page, we process your name, e-mail address, phone number (if provided) and the content of your message in order to answer your enquiry.

Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f)). We keep messages for no longer than 2 years.

2. Appointment booking

For a booking we process your name, e-mail address, phone number, vehicle details (make, model, category), the selected services, the appointment and the payment status. This data is required for the booking; without it we cannot carry it out.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and the legal obligation to keep business records (Art. 6(1)(c)). We keep booking and payment data for 11 years in accordance with Croatian accounting law.

3. Payment (PayPal)

The deposit can be paid via PayPal. The payment is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg, as an independent controller under its own privacy statement. We do not receive your card or PayPal account details, only a confirmation of successful payment.

4. E-mail notifications

With a booking we send you a confirmation, notices of changes and a reminder before the appointment (performance of a contract, Art. 6(1)(b) GDPR).

After the service is completed we may send you up to three short requests for a review on Google or Trustpilot. The legal basis is our legitimate interest (Art. 6(1)(f)). Sending stops as soon as you click a review link, and every e-mail lets you unsubscribe from further requests.

The first request is also sent in copy to the invitation address of Trustpilot A/S, Copenhagen, Denmark, so that Trustpilot can mark any review you leave as verified. Trustpilot receives your name and e-mail address. You may object to this at any time. We keep e-mail addresses for review requests for no longer than 1 year after the service.

5. Website visits, hosting and security

The website is hosted by STRATO GmbH, Berlin, Germany. On every visit the server technically processes your IP address, time of access, the page requested and browser details in order to deliver the website and protect it against abuse. Website traffic passes through Cloudflare, Inc. (attack protection and faster delivery), which also processes the IP address.

For visit statistics we also use Cloudflare Web Analytics, which sets no cookies and does not recognise individual visitors. Legal basis: our legitimate interest in the secure and proper operation of the website (Art. 6(1)(f) GDPR).

6. Cookies and services based on your consent

Necessary cookies (session, form protection, remembering your cookie choice) are required for the website to work and do not need consent. Everything else is loaded only once you allow it in the cookie settings (Art. 6(1)(a) GDPR):

  • Google Analytics (Google Ireland Ltd., Dublin): anonymised visit statistics.
  • Google Maps (Google Ireland Ltd.) on the Contact page: when the map loads, Google receives your IP address.
  • Meta Pixel (Meta Platforms Ireland Ltd., Dublin): measuring visits and the performance of our ads on Facebook and Instagram.

You can change or withdraw your consent at any time via the "Cookie settings" link in the footer of the page, where you will also find a list of all cookies and their duration.

7. Social media and reviews

The Facebook, Instagram, YouTube, LinkedIn and Trustpilot icons in the footer are plain links: data is sent to these networks only when you click a link. The reviews shown on the home page are public reviews from our Google profile.

8. Recipients and transfers outside the EU

We do not sell your data. Only authorised persons in our company and the service providers named above (STRATO, Cloudflare, Google, Meta, PayPal, Trustpilot) have access, to the extent required for their service.

Some providers (Cloudflare, Google, Meta, PayPal) may also process data in the USA. Such transfers are based on the EU–US Data Privacy Framework and/or the European Commission's standard contractual clauses.

9. Your rights

You have the right of access to your data, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interest. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Send us your request by e-mail; we will reply within one month.

You also have the right to lodge a complaint with a supervisory authority: the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, www.azop.hr, or the supervisory authority in the country where you live.

We do not make decisions based solely on automated processing and do not create profiles.

10. Security and changes

The website is transmitted exclusively in encrypted form (HTTPS), and access to the administration is protected by a password and an additional code sent by e-mail. We may update this policy when our services or the law change; the version published on this page always applies.