Privacy Statement (EU)

Name: BlackTech
Address: Ul. Silvija Strahimira Kranjčevića 3, Biograd na Moru, 23210, HR
Telephone: +385 98 935 6507

This Privacy Statement was last updated on 28 September 2026. It applies to all visitors and customers of the website, including citizens and legal permanent residents of the European Economic Area and Switzerland.

In this Privacy Statement we explain which personal data we collect when you use https://blacktech.equipment, why we collect it, how long we keep it and what rights you have. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Croatian law. This means, among other things, that we:

clearly state the purposes for which we process personal data;
collect only the personal data we need for those purposes;
ask for your consent where the law requires it;
take appropriate security measures and require the same from the service providers who process data on our behalf;
respect your right to access, correct or delete your personal data.

1. Controller

The controller responsible for processing your personal data is:

BLACKTECH j.d.o.o.
S.S. Kranjčevića 3, HR-23210 Biograd na Moru, Croatia
OIB: 16330313672 · VAT ID: HR16330313672
Email: [email protected]
Phone: +385 98 935 6507

2. Purposes, data, legal basis and retention

2.1 Orders and payment

Data: full name, email address, phone number, delivery address (street address, postal code, city, country), order notes, the products ordered, prices, shipping method and payment status.

Purpose: to process and deliver your order, send order and shipping confirmations, handle warranty claims and complaints, and issue invoices.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with our legal obligations under tax and accounting law (Art. 6(1)(c) GDPR).

Retention: order and invoice data are kept for the period required by Croatian accounting and tax law (generally 11 years after the end of the year in which the invoice was issued). Card details are entered directly on the Stripe payment page; we never receive or store your full card number.

2.2 Contact form, email and phone

Data: your name, email address, the subject and content of your message, and any other information you choose to share with us (for example your phone number when you call us).

Purpose: to answer your enquiry and give advice, for example on choosing the right fin hardness.

Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

Retention: for as long as needed to handle your enquiry and any follow-up, and no longer than two years after our last contact, unless the correspondence relates to an order, in which case it is kept together with the order.

2.3 Website security and abuse prevention

Data: technical data such as your IP address, browser type and the time of your request. To prevent spam, the contact form stores only a pseudonymised (hashed) version of your IP address and the time of submission, and Cloudflare Turnstile checks that the form is submitted by a person.

Purpose: to keep the website available and secure and to prevent spam and misuse.

Legal basis: our legitimate interest in the secure operation of the website (Art. 6(1)(f) GDPR).

Retention: only as long as needed for security and abuse prevention.

2.4 Website statistics (Google Analytics)

Data: information about how you use the website, such as the pages you visit, the time of your visit, the website you came from, your device and browser type and your approximate location (country or city), linked to a random identifier stored in a cookie.

Purpose: to understand how the website is used so that we can improve it.

Legal basis: your consent (Art. 6(1)(a) GDPR). Google Analytics is only loaded after you click “Accept all” in the cookie pop-up. You can withdraw your consent at any time via “Cookie settings” at the bottom of every page.

Retention: the Google Analytics cookies expire after 2 years; statistical data in Google Analytics is kept in line with the retention setting of our Google Analytics account.

2.5 Shopping cart, wishlist and preferences

Your shopping cart, wishlist, selected country and cookie choice are stored in your own browser and not on our servers until you place an order. For details see our Cookie Policy.

3. Cookies

Our website uses cookies and similar technologies. For a full list of the cookies we use and how to manage your consent, please see our Cookie Policy.

4. Recipients and service providers

We do not sell your personal data. We share it only with the following service providers, who process it on our behalf or as independent controllers to the extent necessary for the purposes described above:

Cloudflare, Inc. – website hosting, database, content delivery, security and spam protection (Turnstile).
Stripe Payments Europe, Ltd. – payment processing. Stripe processes your payment details as an independent controller in accordance with the Stripe Privacy Policy.
Resend (Plus Five Five, Inc.) – sending order confirmations and forwarding contact form messages by email.
Hetzner Online GmbH (Germany) – hosting of our business email mailboxes.
Google Ireland Limited – website statistics (Google Analytics), only with your consent.
Delivery and courier companies – your name, delivery address and phone number are passed on to the carrier that delivers your order.
Our accountant and competent authorities – invoice data is shared with our accounting service provider and, where required by law, with tax or other public authorities.

We also disclose personal data where we are required to do so by law or by a court order.

5. Transfers outside the European Economic Area

Some of our service providers (Cloudflare, Stripe, Resend and Google) are based in, or have affiliates in, the United States. Where personal data is transferred outside the European Economic Area, this is done on the basis of the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

6. Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. The website is only available over an encrypted connection (HTTPS), access to order data is restricted to authorised staff who sign in with a one-time email link, and payments are processed by Stripe on its own secure payment page.

7. Automated decision-making

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

8. Third-party websites

This Privacy Statement does not apply to third-party websites linked from our website, such as our Facebook and Instagram pages. Please read the privacy statements of those websites before using them.

9. Your rights

You have the following rights with respect to your personal data:

Right of access: you can ask which personal data we hold about you and receive a copy.
Right to rectification: you can ask us to correct or complete inaccurate or incomplete data.
Right to erasure: you can ask us to delete your data, unless we are required to keep it by law (for example invoices).
Right to restriction of processing: you can ask us to temporarily limit the use of your data.
Right to data portability: you can ask to receive the data you provided to us in a structured, commonly used format or to have it transferred to another controller.
Right to object: you can object to processing based on our legitimate interests. We will comply unless there are compelling legitimate grounds for the processing.
Right to withdraw consent: where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing before the withdrawal.

To exercise your rights, please contact us at [email protected]. Please state clearly who you are, so that we can make sure we do not disclose, change or delete the data of the wrong person. We will respond within one month.

10. Submitting a complaint

If you are not satisfied with the way we handle your personal data, please contact us first. You also have the right to lodge a complaint with the supervisory authority. In Croatia this is the Personal Data Protection Agency (Agencija za zaštitu osobnih podataka), Selska cesta 136, HR-10000 Zagreb, azop.hr.

11. Changes to this Privacy Statement

We may update this Privacy Statement when our services or the law change. The date at the top of this page shows when it was last updated.

12. Contact details

BLACKTECH j.d.o.o.
S.S. Kranjčevića 3, HR-23210 Biograd na Moru
Croatia
Website: https://blacktech.equipment
Email: [email protected]
Phone number: +385 98 935 6507