Skip to content

Privacy Policy

Last updated: 28 May 2026

1. Who We Are

BB Replast d.o.o. (also operating as Replast Extrusion), Frankopanska ulica
68, 42230 Ludbreg, Croatia (“we”, “us”,
“the Company”) operates the website
bbreplast.hr (the “Site”).

We are the data controller for personal data collected through this Site. For
any questions regarding this Privacy Policy or your personal data, contact us
at info@bbreplast.hr.

2. What Data We Collect and Why

Contact form submissions

When you submit a contact or enquiry form on this Site, we collect:

  • Full name
  • Email address
  • Company name
  • Phone number
  • Subject and message content

Purpose: To respond to your enquiry and, where relevant, to
take steps prior to entering into a business relationship.
Legal basis: Article 6(1)(b) GDPR — processing necessary for
the performance of a contract or pre-contractual steps; and Article 6(1)(f)
GDPR — our legitimate interest in responding to business enquiries.

Server logs

Our hosting provider (Hostorion, Croatia) automatically records standard web
server logs, which may include your IP address, browser type, operating
system, referring URL, and pages visited.

Purpose: Security monitoring, abuse prevention, and technical
diagnostics.
Legal basis: Article 6(1)(f) GDPR — our legitimate interest
in maintaining the security and integrity of the Site.
Retention: Server logs are retained for up to 90 days and
then automatically deleted.

3. How Long We Keep Your Data

Contact form submissions are retained for as long as necessary to handle your
enquiry and any resulting business relationship, and for a maximum of 2 years
after the last communication, unless a longer retention period is required by
Croatian law or a contractual obligation.

4. Who We Share Your Data With

We do not sell your personal data. We may share it with the following service
providers acting as data processors:

  • Hostorion (hosting): Our web hosting provider stores
    website files and databases on servers located in the EU. Hostorion
    processes data solely on our instructions.
  • Cloudflare, Inc.: We use Cloudflare as a content delivery
    network and security layer. Cloudflare may process traffic data (including
    IP addresses) as part of its service. Cloudflare operates under a Data
    Processing Addendum compliant with GDPR. For more information, see
    Cloudflare’s Privacy
    Policy    .

We do not transfer your personal data to third countries outside the EU/EEA
except as covered by the appropriate safeguards described above.

5. Cookies

This Site uses only technically necessary cookies:

  • WordPress session cookies — used for site functionality
    (not for tracking).
  • Cloudflare cookies — used for security and performance
    (e.g. bot detection).
  • Language preference cookie — set by Polylang when you
    select a language; stores your language choice for the duration of your
    session.

We do not use analytics cookies, advertising cookies, or any third-party
tracking scripts. No cookie consent banner is required for technically
necessary cookies under GDPR.

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of access — you may request a copy of the personal data we hold about you.
  • Right to rectification — you may ask us to correct inaccurate data.
  • Right to erasure — you may ask us to delete your data where there is no overriding legal basis to retain
    it.
  • Right to restriction — you may ask us to restrict processing in certain circumstances.
  • Right to data portability — you may request your data in a structured, machine-readable format.
  • Right to object — you may object to processing based on legitimate interests.

To exercise any of these rights, email us at
info@bbreplast.hr. We will respond
within 30 days.

7. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR,
you have the right to lodge a complaint with the Croatian supervisory authority:

Agencija za zaštitu osobnih podataka (AZOP)
Selska cesta 136, 10 000 Zagreb, Croatia
azop.hr
azop@azop.hr

8. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date
at the top of this page reflects the most recent revision. We recommend
reviewing this page periodically to stay informed of any updates.