1. General Information
Dubrovnik’s Cats d.o.o. respects the privacy of its customers, webshop users and visitors to the Nest Cats website and processes personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and applicable laws of the Republic of Croatia.
This Privacy Policy explains what personal data we collect, for what purposes we use it, the legal basis for processing, to whom it may be disclosed, how long it is retained, and the rights of data subjects.
The data controller is:
Dubrovnik’s Cats d.o.o.
Zlatarska 3
20000 Dubrovnik
Croatia
OIB: 73143328685
Phone: +385 91 150 8018
E-mail: Dubrovniks.cats@gmail.com
Nest Cats is the trade name and brand operated by Dubrovnik’s Cats d.o.o.
2. Personal Data We Collect
Depending on how the Nest Cats webshop and services are used, we may process the following categories of personal data:
- first and last name;
- e-mail address;
- telephone number;
- delivery address;
- city;
- postal code;
- country;
- order details;
- information about purchased products;
- payment amount and payment status;
- information required for delivery and shipment tracking;
- communications relating to orders, returns, complaints or claims;
- information voluntarily provided through the NestCats Club form;
- information regarding consent to marketing communications;
- technical information about website use when collected through permitted analytics and similar technologies.
We do not collect or store customers’ complete payment card details. Card data is processed by an authorised payment service provider.
3. Data Required for Purchase and Order Fulfilment
When a purchase is made through the webshop, we process personal data necessary to receive and process the order, confirm payment, issue and fiscalise invoices, communicate with the Customer, prepare and dispatch the order, deliver and track the shipment, process returns, replace products, handle complaints and written claims, and comply with accounting, tax and other legal obligations.
The legal basis for this processing is the performance of a contract or taking steps at the Customer’s request prior to entering into a contract and, where applicable, compliance with the Seller’s legal obligations.
The data required to fulfil an order is mandatory. If the Customer does not provide the necessary information, it may not be possible to process the order or complete delivery.
4. Card Payments
Payments through the webshop are made by bank card via the Monri Payments system.
The data required to process payments is handled in accordance with the rules and security standards of the payment service provider.
Dubrovnik’s Cats d.o.o. does not store full payment card numbers, card security codes or other confidential card data.
For order processing purposes, we may receive information about transaction status, amount, transaction time and transaction identifiers necessary to associate a payment with a specific order.
5. Product Delivery
For the purpose of delivery, we may provide necessary personal data to the selected postal service, courier or other delivery provider.
Depending on the delivery method, this may include the recipient’s first and last name, delivery address, telephone number, e-mail address and other information necessary for delivery and shipment tracking.
Only the data necessary to perform the specific delivery is transferred to the delivery provider.
6. Accounting, Fiscalisation and Legal Obligations
Certain order, invoice and transaction data may be processed and disclosed to providers of accounting, fiscalisation and related business services where necessary for issuing invoices, fiscalisation, maintaining business records, tax and accounting reporting, and compliance with other legal obligations.
Such data is processed only to the extent necessary for these purposes.
7. NestCats Club
Participation in the NestCats Club programme is voluntary.
Through the NestCats Club form, we may collect information voluntarily entered by the user. Depending on the content of the form, this may include the user’s name, country or place of origin, information about how the user learned about Nest Cats, information about visits to the physical store, interests and preferences relating to Nest Cats products and concept, interest in personalised products, preferred communication channel and contact details voluntarily provided by the user.
The data is used to manage the NestCats Club programme, better understand users’ interests, improve products and services and, where the user has given appropriate consent, for marketing communications.
Participation in the NestCats Club programme is not a condition of purchasing products.
8. Newsletter and Marketing Communications
Marketing messages, news, product information, special offers and information about other Nest Cats activities are sent to users who have given appropriate consent.
Consent to marketing communications is voluntary and is not a condition of purchasing through the webshop.
Users may withdraw their consent at any time by using the unsubscribe link in a marketing message, where available, or by sending a request to Dubrovniks.cats@gmail.com.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Nest Cats may retain records of consent, including the date, time, source and method by which consent was given, in order to demonstrate compliance with legal obligations.
9. Google Analytics and Website Usage Analysis
The Nest Cats website uses Google Analytics, a web analytics service that helps us understand how visitors use the website and webshop.
Depending on service settings and the user’s consent, Google Analytics may process information such as the source of the visit, country and approximate geographic location, device type, operating system and browser, pages visited, products viewed, duration of the visit, interactions with the website, products added to the shopping cart, checkout initiation, completed purchases and transaction data required to analyse webshop performance.
Google Analytics must not be used to transmit data that directly identifies a Customer, such as first and last name, e-mail address, telephone number or full delivery address.
Google Analytics and related analytics cookies are activated in accordance with the user’s choices through the cookie consent management system where consent is required by applicable law.
Detailed information about cookies used, their purpose and duration is provided in the Cookie Policy.
10. Social Media and Traffic Sources
Nest Cats may use social media and other digital channels to communicate and promote its products.
If a user arrives at the webshop through a social network, advertisement or other tagged link, we may process information about the source of the visit and behaviour on the webshop in accordance with the user’s privacy settings, cookie settings and consents given.
If marketing tools such as pixels, conversion tags or similar technologies are used, detailed information about them will be provided in the Cookie Policy.
11. Contacting the Seller
If a user contacts us by e-mail, telephone or another available communication channel, we may process the information voluntarily provided in order to respond to the enquiry and handle the specific request.
This data may include the user’s name, contact details, the content of the communication and other information voluntarily provided by the user.
12. Complaints, Returns and Written Claims
When handling a complaint, product return, replacement request or written claim, we may process the Customer’s first and last name, contact details, order number, information about the purchased product, description of the issue, photographs of the product, photographs of the packaging, information required for a refund or product replacement, and communications related to resolving the case.
The data is processed to fulfil the Seller’s contractual and legal obligations and to protect the rights of both the Customer and the Seller.
13. Personalised Products
For the production of personalised products, the Customer may voluntarily provide a photograph, illustration or other content.
Such content is processed solely for preparing the personalised product, communicating with the Customer about production, fulfilling the specific order and resolving any complaint relating to the product.
Photographs and other content provided by the Customer for the creation of a personalised product will not be used for marketing purposes, on social media or in other promotional materials without separate consent from the Customer.
14. Legal Bases for Processing
Depending on the purpose, we process personal data on one or more of the following legal bases: performance of a contract or taking steps prior to entering into a contract; compliance with the Seller’s legal obligations; the user’s consent; and the Seller’s legitimate interests, where applicable and where such interests are not overridden by the rights and interests of the data subject.
Where processing is based on consent, the user has the right to withdraw consent at any time.
15. Recipients of Personal Data
Where necessary, personal data may be disclosed to the following categories of recipients:
- the card payment service provider;
- the provider of invoice issuing and fiscalisation software;
- the accounting service provider;
- postal and courier services;
- website hosting and technical maintenance providers;
- newsletter and communication service providers, if used;
- analytics service providers, including Google Analytics, in accordance with applicable rules and the user’s consent where required;
- competent public authorities and other bodies where there is a legal obligation to disclose the data.
Access is limited to the data necessary for the specific purpose.
16. Transfers Outside the European Economic Area
Some providers of technical, analytics, communication or other digital services may process data outside the European Economic Area.
In such cases, data transfers are carried out only where there is an appropriate legal basis and applicable safeguards in accordance with the GDPR.
17. Retention of Personal Data
We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as required by applicable law.
Data relating to orders, invoices, payments and other business transactions is retained for the periods prescribed by applicable accounting, tax and other laws.
Data relating to complaints, returns and claims is retained for as long as necessary to resolve the specific case and protect legal interests, or for the periods required by applicable law.
Data processed for marketing communications on the basis of consent is processed until consent is withdrawn or the purpose of processing ceases, except for information that must be retained to demonstrate that consent was given or that an unsubscribe request was implemented.
Data and content relating to personalised products is retained only for as long as necessary to fulfil the order, resolve possible complaints and protect legal interests.
18. Security of Personal Data
Dubrovnik’s Cats d.o.o. implements appropriate technical and organisational measures to protect personal data against unauthorised access, unlawful use, loss, accidental destruction, alteration and unauthorised disclosure.
Access to personal data is limited to persons who require such access to perform their duties and contractual or legal obligations.
19. Rights of Data Subjects
In accordance with applicable law and depending on the circumstances, a data subject may have the right to:
- request information on whether we process their personal data;
- request access to their personal data;
- request correction of inaccurate or incomplete data;
- request deletion of data where the legal conditions are met;
- request restriction of processing;
- object to certain processing activities;
- exercise the right to data portability where applicable;
- withdraw previously given consent;
- object to the processing of personal data for direct marketing purposes;
- lodge a complaint with the competent supervisory authority.
20. How to Exercise Your Rights
For questions about the processing of personal data or requests to exercise data protection rights, users may contact:
Dubrovnik’s Cats d.o.o.
Zlatarska 3
20000 Dubrovnik
Croatia
Phone: +385 91 150 8018
E-mail: Dubrovniks.cats@gmail.com
To protect personal data, we may request additional information necessary to verify the identity of the person making the request.
We will respond to requests in accordance with the time limits and procedures prescribed by applicable law.
21. Right to Lodge a Complaint with a Supervisory Authority
If a user believes that their personal data is being processed in violation of applicable law, they have the right to contact the competent data protection supervisory authority.
In the Republic of Croatia, the supervisory authority is the Croatian Personal Data Protection Agency (AZOP).
22. Cookies
The website uses cookies and similar technologies.
Strictly necessary cookies are used for the basic operation of the website and webshop.
Analytics cookies associated with Google Analytics, as well as other analytics, marketing and similar cookies that require consent, are used only in accordance with the user’s choices and applicable law.
Detailed information about the types of cookies, their purposes, providers and duration is available in a separate Cookie Policy.
23. Changes to this Privacy Policy
Dubrovnik’s Cats d.o.o. may amend this Privacy Policy from time to time to reflect changes in business operations, webshop functionality, technologies used or applicable law.
The updated version will be published on the website together with the date of the latest revision.
24. Entry into Force
This Privacy Policy applies from July 9, 2026.
