Privacy policy

Last updated: 28 October 2026

Who is responsible

The data controller is DPS.SBS j.d.o.o., Franje Krežme 16, 31000 Osijek, Croatia, OIB 46920199989. Contact: improper@dps.sbs.

What we collect and why

• Orders: name, delivery and billing address, email, phone and order details, used to process and deliver your order and to issue invoices (legal basis: performance of a contract, and legal obligation for invoices).
• Payments: card and payment details are entered directly with our payment provider Revolut and are not stored by us. We receive only the payment status.
• Messages: what you send us by email, used to answer you (legitimate interest).
• Technical data: IP address and the cookies needed for the cart and checkout to work (legitimate interest / strictly necessary). We do not use advertising cookies.

Who receives your data

Only service providers we need to run the store: Revolut (payments), the courier delivering your parcel, our hosting and security providers, and our accountant. They process data on our behalf or as required by law. We do not sell your data.

How long we keep it

Invoices and accounting records are kept for 11 years as required by Croatian accounting law. Other order data is kept for as long as claims can arise from the purchase, and messages for up to 2 years.

Your rights

You can ask for access to, correction or deletion of your data, restriction of or objection to its processing, and a copy of it in a portable format. Write to improper@dps.sbs. You can also complain to the Croatian Personal Data Protection Agency (AZOP), azop.hr.