Privacy Policy

wrap-wizards.com Data controller: ZUNART j.d.o.o., Selnik 106, 42243 Maruševec, Croatia OIB: 66942000054 · E-mail: info@zunart.eu

Last updated: 17/08/2026

Data

Purpose

Legal basis (GDPR)

Account data: name, e-mail, password (hashed), company name and VAT ID for business customers

Creating and managing your account, verifying B2B status (VIES)

Contract — Art. 6(1)(b)

Order data: products purchased, billing address, country, order history, download activity

Fulfilling your order, delivering files, managing your download allowance

Contract — Art. 6(1)(b)

Payment data: payment method, transaction ID, amount. Card numbers are processed only by our payment providers we never see or store them

Processing payment, refunds

Contract — Art. 6(1)(b)

Invoicing and tax data: name, address, country, VAT ID, evidence of your location (billing country, IP-derived country, payment country)

Issuing invoices, determining the correct VAT, statutory bookkeeping and VAT reporting (incl. OSS)

Legal obligation — Art. 6(1)(c)

Technical data: IP address, device and browser type, pages visited, referrer

Security, fraud prevention, keeping the Site working, basic aggregated statistics

Legitimate interest — Art. 6(1)(f)

Communications: e-mails, chat messages, complaint correspondence

Support, resolving complaints (statutory 15-day response)

Contract / legal obligation

Marketing data: e-mail address, newsletter preferences

Sending our newsletter and offers — only if you subscribe; every message contains an unsubscribe link

Consent — Art. 6(1)(a), or Art. 13(2) of the Croatian Electronic Communications framework for existing customers, with opt-out




This Policy explains how we process personal data when you visit wrap-wizards.com, create an account, buy our products or contact us. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Croatian data protection law. We have not appointed a Data Protection Officer, as we are not required to; for all privacy matters contact info@zunart.eu.

1. What data we collect and why

We do not collect special categories of data, we do not perform automated decision-making or profiling with legal effects, and the Site is not directed at children under 16.

2. Who receives your data (processors and recipients)

We share personal data only with service providers who process it on our behalf under data processing agreements, and only to the extent necessary:

·  Shopify — e-commerce platform hosting the Site, accounts and orders;

·  Payment providers (e.g. Shopify Payments/Stripe, PayPal, Klarna) — payment processing; they act as independent controllers for the payment transaction itself;

·  E-mail and chat providers — transactional e-mail, newsletter delivery, live chat;

·  Our accountant and tax advisors — invoicing and statutory reporting;

·  Public authorities (Croatian Tax Administration, courts) — where required by law.

We never sell personal data.

3. Transfers outside the EU/EEA

Some providers process data outside the EU/EEA (e.g. Shopify group companies in Canada and the USA). Such transfers rely on European Commission adequacy decisions (Canada; EU–US Data Privacy Framework for certified US providers) or Standard Contractual Clauses with supplementary measures. You may request a copy of the relevant safeguards via info@zunart.eu.

4. How long we keep data

·  Invoices and tax records: 11 years, as required by Croatian accounting and VAT law (including OSS evidence of customer location — 10 years).

·  Account data: for as long as your account exists; deleted or anonymised within 30 days of account deletion, except data we must retain (invoices, tax records).

·  Order and license records: for the duration of the license, so we can verify your right to use downloaded files.

·  Complaint records: at least one year, as required by the Croatian Consumer Protection Act.

·  Chat and support messages: up to 2 years after the last contact.

·  Newsletter data: until you unsubscribe.

5. Your rights

You have the right to:

·         access your data (Art. 15),

·         rectify it (Art. 16),

·         have it erased (Art. 17),

·         restrict processing (Art. 18),

·         data portability (Art. 20),

·         object to processing based on legitimate interest and to direct marketing (Art. 21),

·         withdraw consent at any time without affecting prior processing.

To exercise any right, e-mail info@zunart.eu from the address linked to your account; we respond within one month. You also have the right to lodge a complaint with a supervisory authority — in Croatia, the Personal Data Protection Agency (AZOP, Selska cesta 136, 10000 Zagreb, azop.hr) — or with the authority in your EU country of residence.

6. Cookies

The Site uses:

·  Necessary cookies — cart, login session, checkout, security. These are required for the Site to function and do not need consent.

·  Functional, analytics and marketing cookies — set only with your consent, which you give or refuse via the cookie banner on your first visit. You can change or withdraw your choice at any time via the cookie settings link in the footer.

Refusing non-essential cookies does not affect your ability to use the shop.

7. Security

Data is transmitted over encrypted connections (TLS/SSL) and stored on infrastructure with access controls. Payments are processed by PCI-DSS-certified providers. In the unlikely event of a breach likely to put your rights at risk, we will notify you and AZOP as required by Art. 33–34 GDPR.

8. Changes to this Policy

We may update this Policy to reflect changes in our processing or the law. The current version is always published on this page with its date; material changes affecting account holders are announced by e-mail.