PRIVACY POLICY
ZUNO design
Effective Date: 22 October 2026
1. DATA CONTROLLER
M Design, a design business registered as a sole proprietorship (obrt) in Croatia, trading under the name ZUNO design.
Full Registered Business Name: M-Design, obrt za dizajn
Registered Office: Crljenik 32b, Stankovci, Croatia
OIB (Croatian Personal Identification Number): [ENTER: OIB]
Privacy Contact Email: info@zunodesign.com
Website: zunodesign.com
2. CATEGORIES OF PERSONAL DATA
Depending on the nature of the interaction, we process identification and contact details, delivery addresses, order and invoice information, payment details and transaction status, communications, enquiries, quotations, project drawings, measurements or photographs of premises, complaints, website technical data, and records of consent.
Special categories of personal data are not requested unless necessary and supported by an appropriate legal basis.
3. PURPOSES AND LEGAL BASES FOR PROCESSING
Orders, Manufacturing and Delivery: Article 6(1)(b) of the GDPR — performance of a contract.
Enquiries and Quotations: Pre-contractual steps taken at the request of the individual (Article 6(1)(b) GDPR), and, for certain business contacts, legitimate interests where applicable (Article 6(1)(f) GDPR).
Invoices and Statutory Records: Compliance with a legal obligation (Article 6(1)(c) GDPR).
Complaints and Disputes: Applicable contractual and legal obligations and, where appropriate, legitimate interests in establishing, exercising or defending legal claims.
Website Security: Legitimate interests in protecting information systems, where the requirements of the GDPR are met.
NEWSLETTER AND MARKETING COMMUNICATIONS
ZUNO design processes the personal data of individuals who have voluntarily subscribed to receive newsletters and promotional communications.
The data are used to send information about new products, collections, projects, news and other promotional content relating to ZUNO design.
For this purpose, we process email addresses and any other personal data voluntarily provided during subscription, where necessary for the stated purpose.
The legal basis for sending newsletters following voluntary subscription is the data subject's consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR).
Newsletter subscription is not a condition of purchasing products or using other services.
Consent may be withdrawn at any time using the unsubscribe link included in newsletter emails or by sending a request to info@zunodesign.com.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
ZUNO design uses Wix Email Marketing, a service provided through the Wix platform, to manage newsletter subscriptions and send marketing communications.
The service processes subscribers' email addresses, subscription and unsubscription information, and data necessary to manage marketing campaigns.
Wix processes personal data as part of providing its services, in accordance with applicable contractual terms and data protection policies.
Subscribers may withdraw their consent at any time by using the unsubscribe link included in newsletter emails or by contacting info@zunodesign.com.
ANALYTICS AND ADVERTISING
ZUNO design uses Wix Analytics and Meta Pixel to analyse website usage, improve website performance and measure the effectiveness of marketing activities.
Wix Analytics provides statistical information about website traffic, including visits, page views, traffic sources and other website usage indicators.
Meta Pixel, a technology provided by Meta Platforms, is used to measure advertising effectiveness on Facebook and Instagram, track relevant website events and, depending on its configuration, create advertising audiences.
These tools may process information such as IP addresses, browser or device identifiers, pages visited, visit times and interactions with the website.
The legal basis for processing personal data through analytics and marketing cookies or similar technologies that are not essential for the operation of the website is the visitor's consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR).
Such technologies are activated only after the visitor has provided the appropriate consent. Visitors may refuse their use or subsequently withdraw or change their consent through the cookie settings available on the website.
Further information about the technologies used and their settings is available in the ZUNO design Cookie Policy.
4. REQUIREMENT TO PROVIDE PERSONAL DATA
Personal data required for ordering, delivery and invoicing are necessary for the performance of a contract or compliance with legal obligations. Without such data, it may not be possible to fulfil the order.
Providing personal data for optional marketing purposes is not a condition of purchase.
5. SOURCES OF PERSONAL DATA
SOURCES OF PERSONAL DATA
ZUNO design collects personal data directly from customers and other interested individuals when they place orders, submit enquiries, request individual quotations, arrange projects, communicate with us by email or through other communication channels, or subscribe to our newsletter.
Certain technical data and website usage information are collected through the Wix platform, Wix Analytics and Meta Pixel, in accordance with applicable law and visitors' consent preferences.
ZUNO design may receive payment status and transaction processing information from the payment service provider Stripe, to the extent necessary for order processing, performance of contractual obligations and compliance with legal requirements.
Personal data are not routinely collected from business partners or other third parties for the purpose of initiating contact with prospective customers.
6. DATA RECIPIENTS AND PROCESSORS
ZUNO design shares personal data with external service providers only where necessary to fulfil orders, provide contracted services, operate the online store, comply with legal obligations or pursue other lawful purposes described in this Privacy Policy.
Depending on the processing activity, recipients of personal data may include:
Wix — for website and online store services, order management, newsletter delivery through Wix Email Marketing and website analytics through Wix Analytics.
Stripe — for secure card payment processing and related transaction information.
Meta Platforms — in connection with the use of Meta Pixel for advertising performance measurement and other marketing purposes for which the appropriate consent has been obtained.
Delivery service providers — for delivering standard products to customers. Delivery providers receive the information necessary to complete delivery, such as the recipient's name, delivery address, contact telephone number and other essential shipment details.
For larger individual projects, ZUNO design may arrange delivery using its own transport, in which case customer information is used internally to organise transportation and delivery.
Personal data may also be disclosed to competent public authorities where required by law.
Each recipient's role as an independent controller or data processor depends on the specific service and processing activity.
ZUNO design does not sell customers' personal data to third parties.
Data processing agreements are put in place where required under Article 28 of the GDPR.
7. CARD PAYMENTS
Card payments made through the ZUNO design online store are processed by Stripe, a payment service provider integrated with the Wix platform.
During card payment processing, the information necessary to complete the transaction is processed through Stripe's payment system. This information may include payment card details, transaction amounts, order identifiers, customer information and technical data necessary for secure payment processing.
ZUNO design processes payment status information, transaction amounts, transaction identifiers and other necessary information for order processing, invoicing, refunds and compliance with contractual and legal obligations.
ZUNO design does not store full payment card numbers or card security codes (CVV/CVC) in its own business records.
The legal basis for processing personal data necessary to complete a payment is the performance of a contract under Article 6(1)(b) of the General Data Protection Regulation (GDPR). Information necessary to comply with tax and other legal obligations is processed under Article 6(1)(c) GDPR.
Stripe may also process certain personal data for its own lawful purposes, including fraud prevention, payment security and compliance with legal obligations, in accordance with its privacy policy.
Further information is available in Stripe's Privacy Policy: https://stripe.com/privacy
8. TRANSFERS TO THIRD COUNTRIES
Where personal data are processed outside the European Economic Area (EEA), such transfers must be based on an appropriate mechanism under the GDPR.
9. DATA RETENTION PERIODS
Personal data are retained for as long as necessary for the relevant purpose or to comply with a statutory obligation.
ENQUIRIES AND QUOTATIONS NOT RESULTING IN AN ORDER
ZUNO design generally retains personal data received through enquiries, requests for information and individual quotations that do not result in an order for no longer than six months from the last communication.
After this period, the data are deleted or anonymised unless further retention is required by law or necessary for the establishment, exercise or defence of legal claims.
Such data are not used to send newsletters without an appropriate legal basis.
ORDER AND CUSTOM PROJECT DATA
Personal data relating to orders and product purchases are retained for the period necessary to process and fulfil the order, deliver the products, process payments, handle complaints and comply with contractual and legal obligations.
For individual and custom projects, ZUNO design retains information necessary to prepare and perform the contract, including accepted quotations, agreed specifications, project revisions, records of approvals, payments, deliveries and other relevant documentation.
After an order or project has been completed, personal data are retained only for as long as necessary to comply with legal obligations, exercise contractual rights and establish, exercise or defend legal claims.
Invoices, tax records and other documentation subject to specific statutory retention requirements are retained for the applicable legally prescribed periods.
After the applicable retention periods have expired, personal data are deleted or anonymised unless another lawful basis justifies continued retention.
COMPLAINTS AND CUSTOMER CLAIMS
ZUNO design processes personal data necessary to receive, record, assess and resolve product complaints, formal written consumer complaints and other customer claims relating to statutory or contractual rights.
Such data may include the customer's identification and contact details, order and product information, the content of the complaint, supporting documentation, customer correspondence and information about how the matter was resolved.
Records of formal written consumer complaints are retained on a durable medium for one year from the date the complaint is received, in accordance with Croatian consumer protection legislation.
Documentation relating to product complaints, liability for product defects and other customer claims may be retained for longer where necessary to comply with legal obligations, exercise contractual rights or establish, exercise or defend legal claims.
Depending on the circumstances, the legal basis for processing may be performance of a contract, compliance with a legal obligation or legitimate interests relating to the establishment, exercise or defence of legal claims, in accordance with Article 6(1)(b), (c) and (f) of the General Data Protection Regulation (GDPR).
Once the applicable retention periods have expired, personal data are deleted or anonymised unless another lawful basis justifies their continued retention.
NEWSLETTER DATA RETENTION
Personal data processed for newsletter communications are retained while the subscriber's consent remains valid or until another reason arises to discontinue processing for that purpose.
Following unsubscription or withdrawal of consent, ZUNO design ceases to use that individual's personal data to send newsletters on the basis of that consent.
Limited records of consent and its withdrawal may be retained for as long as necessary to demonstrate compliance with legal obligations or defend against legal claims.
Newsletter-related data are processed through Wix Email Marketing, subject to appropriate personal data protection measures.
At the end of the applicable retention period, personal data are deleted or anonymised unless there is a lawful reason for continued retention.
10. DATA SUBJECT RIGHTS
Subject to the conditions set out in the GDPR, individuals have the right to request access to their personal data, rectification, erasure, restriction of processing and data portability, to object to processing, and to withdraw consent.
In the case of direct marketing, individuals may object to the processing of their personal data at any time.
Requests should be sent to info@zunodesign.com.
A response is generally provided within one month, subject to any extension permitted by law.
11. RIGHT TO LODGE A COMPLAINT
Individuals have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), www.azop.hr, or another competent supervisory authority.
12. AUTOMATED DECISION-MAKING
[VERIFY: whether automated decision-making producing effects within the meaning of Article 22 of the GDPR takes place. If not, state this. If it does, explain the logic involved, its significance and the envisaged consequences.]
13. COOKIES
Cookies are described in the Cookie Policy.
Cookie consent preferences can be managed through.
14. DATA SECURITY AND POLICY UPDATES
Appropriate technical and organisational security measures are implemented.
This Privacy Policy is updated to reflect actual changes in personal data processing.
22 October 2026