Last updated: March 25, 2026

1. Who we are

PLANTMANIA is a webshop owned by VELES TRANSPORT D.O.O., with its registered office at Ulica Stjepana Mikuša 22, 10360 Sesvete, Croatia. OIB: 41445054649.

Plantmania operates this online store and webshop to provide you with a carefully curated shopping experience. The webshop is built and hosted on the Shopify platform.

For all privacy-related questions, you can contact us:

  • E-mail: info@plant-mania.com

  • Address: Ulica Stjepana Mikuša 22, 10360 Sesvete, Croatia

Data Protection Officer (DPO): Matea Majić, e-mail: matea@plant-mania.com

2. What data we collect

Depending on how you use our Services, we may collect the following categories of personal data:

  • Order data: first name, last name, shipping address, email address, phone number

  • Billing data: billing address and payment card information — processed exclusively through the secure payment processor Revolut Business Payment Gateway; PLANTMANIA does not store card data

  • Account data: username, password, security questions, settings, and preferences

  • Browsing and device data: IP address, device and browser type, pages you visited, via Google Analytics and Meta Pixel

  • Newsletter: email address, only if you have subscribed

  • Communication with us: data you provide us through customer support or inquiries

3. Why we collect data (GDPR Art. 6)

We use personal data exclusively for the purposes listed below and on the basis of an appropriate legal basis in accordance with the General Data Protection Regulation (GDPR):

Purpose

Legal basis

Order processing and delivery

Performance of a contract (Art. 6(1)(b))

Customer support

Performance of a contract (Art. 6(1)(b))

Email marketing (newsletter)

Consent (Art. 6(1)(a))

Analytics and advertising (GA, Meta Pixel)

Legitimate interest / Consent (Art. 6(1)(a)(f))

Fulfilling legal obligations

Legal obligation (Art. 6(1)(c))


We never sell data to third parties or use it for purposes not specified in this Policy.

4. Cookies

We use the following types of cookies:

  • Necessary cookies — essential for the functioning of the webshop (cart, login, session)

  • Analytical cookies — Google Analytics for tracking visits and user behavior to improve Services

  • Marketing cookies — Meta Pixel for tracking conversions and displaying relevant ads

We collect and manage cookie consents through the Consentmo GDPR application. You can manage cookies via the cookie banner on your first visit or through your browser settings. You can opt out of non-essential cookies at any time without affecting your use of the webshop.

5. With whom we share your data

We do not sell your data to third parties. We share data exclusively with trusted partners who help us provide Services, to the extent necessary to perform these functions:

  • Shopify Inc. — platform for hosting and managing the webshop (data storage and processing). More information: privacy.shopify.com

  • GLS courier service — name, shipping address, and phone number for order delivery purposes

  • Revolut Business — secure payment processing (PLANTMANIA does not store card data)

  • Google LLC — analytics via Google Analytics

  • Meta Platforms Inc. — advertising via Meta Pixel

  • Consentmo — consent management and GDPR requests

Note: In the event of business transactions (merger, acquisition, bankruptcy), your personal data may be transferred as part of assets, with notice to users.

Relationship with Shopify

The Services are hosted on Shopify, which collects and processes your personal data to provide and improve our Services to you. Information sent through the Services will be transferred to and shared with Shopify and third parties which may be located outside your location. You can learn more about how Shopify uses your data at: privacy.shopify.com. You can exercise your rights regarding data processed by Shopify at: privacy.shopify.com/en.

6. Data storage and protection

Your data is stored on secure servers within the European Union or with service providers that guarantee an adequate level of protection in accordance with GDPR, including the European Commission's Standard Contractual Clauses for international data transfers.

We retain data for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law — for example, accounting and financial data are kept for 11 years in accordance with Croatian regulations.

Note: No security measure is absolutely impenetrable. We recommend that you do not use insecure communication channels to send sensitive information

7. Your rights

In accordance with GDPR, you have the following rights regarding your personal data:

  • Right of access — to request a copy of the data we hold about you

  • Right to rectification — to request correction of inaccurate or incomplete data

  • Right to erasure — to request erasure of data ("right to be forgotten")

  • Right to object — to object to data processing for marketing purposes or based on legitimate interest

  • Right to data portability — to receive your data in a machine-readable format

  • Right to withdraw consent — at any time for newsletters or non-essential cookies, without retroactive effect

  • Right to restriction of processing — to request temporary suspension of processing of your data

You can send requests via e-mail: info@plant-mania.com

You can also manage your data using our GDPR page: https://plant-mania.com/pages/gdpr-zahtjevi-za-privatnost

You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP): www.azop.hr

If you reside in the EEA or the United Kingdom, these rights apply subject to any exceptions and limitations prescribed by local law.

8. Newsletter

If you have subscribed to our newsletter, we use your email address exclusively for sending promotional and informational messages. You can subscribe to the newsletter only voluntarily, and you can unsubscribe from receiving it:

  • By clicking on the "Unsubscribe" link in each email

  • By sending a request to: info@plant-mania.com

9. Child privacy protection

Our Services are not intended for children under 16 years of age, and we do not knowingly collect personal data of minors. If you are a parent or guardian of a child who has provided us with personal data, please contact us to delete it. We do not sell personal data of individuals under 16 years of age.

10. Third-party websites and links

Our webshop may contain links to third-party websites that are not under our control. We recommend reviewing their privacy policies. We are not responsible for the privacy practices or content of such sites.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. We will notify you of significant changes via email or a notice on the webshop. The date of the last update is always visible at the top of this document.

12. Contact

If you have questions about this privacy protection or wish to exercise any of your rights, please contact us:

We are the data controller of your personal data within the meaning of applicable data protection laws.