PRIVACY POLICY AND COOKIE POLICY

Website: https://optikaluna.com
Last updated: 5 November 2026

1. Data Controller

The data controller responsible for the processing of personal data collected through optikaluna.com is:

Napoletano d.o.o.
Giuseppe Garibaldi 13
52470 Umag, Croatia
Company ID (OIB): 37410142819
E-mail: info@optikaluna.com
Website: https://optikaluna.com

Hereinafter referred to as Optika Luna or the Data Controller.

Napoletano d.o.o. respects the privacy of its users, customers and website visitors and is committed to protecting their personal data in accordance with the General Data Protection Regulation (GDPR), the Croatian Act on the Implementation of the General Data Protection Regulation and other applicable laws of the Republic of Croatia and the European Union.

This document sets out the Privacy Policy and Cookie Policy applicable to the use of optikaluna.com.

2. What Personal Data Do We Collect?

Depending on how you use our website and services, we may collect the following categories of personal data:

• Identification data: first and last name.

• Contact details: e-mail address, telephone number and postal address.

• Purchase information: products purchased, orders, delivery address, payment method and purchase history.

• User account information: username, e-mail address and information necessary to manage your account.

• Information relating to loyalty programmes and reward points, where applicable.

• Communication data: messages, enquiries and requests you send to us.

• Technical data: IP address, browser type, operating system, device information and website usage data.

• Information relating to the use of our optical services, where necessary to provide the requested service.

Data relating to eyesight, vision prescriptions or other health information is processed only when necessary to provide a specific service and subject to an appropriate legal basis and safeguards. Such information may constitute special categories of personal data under the GDPR.

We do not collect more personal data than is necessary for the relevant purpose.

3. Why Do We Use Your Personal Data?

We process your personal data for the following purposes:

Order Processing and Purchases

• Receiving and processing orders placed through our online store.

• Confirming orders and communicating with customers about their purchases.

• Organising delivery and shipping products.

• Handling complaints, returns and product exchanges.

Legal basis: performance of a contract and compliance with legal obligations.

Enquiries and Customer Services

• Responding to enquiries submitted through contact forms and e-mail.

• Arranging appointments and providing information about optical services.

• Communicating with users and customers.

Legal basis: taking steps prior to entering into a contract, performance of a contract or legitimate interests, depending on the nature of the enquiry.

User Accounts and Loyalty Programmes

• Enabling registration and access to user accounts.

• Recording purchases and applicable benefits.

• Managing reward points and other loyalty programme benefits, where applicable.

Legal basis: performance of a contract or legitimate interests, depending on the relevant functionality and programme terms.

Marketing and Newsletters

• Sending information about news, products, promotions and special offers.

• Informing customers about benefits and Optika Luna marketing activities.

We send marketing e-mails on the basis of your consent where such consent is required. You may withdraw your consent at any time by using the unsubscribe link in the message or by contacting us at our e-mail address.

Legal basis: consent or another appropriate legal basis permitted under applicable law.

Accounting and Legal Obligations

• Issuing invoices.

• Maintaining business records.

• Complying with tax and other statutory obligations.

Legal basis: legal obligation.

Website Security and Improvement

• Maintaining website security.

• Preventing misuse and unauthorised access.

• Analysing website usage, where the required consent has been obtained.

Legal basis: legitimate interests or consent, depending on the specific activity.

4. Who Do We Share Your Personal Data With?

We do not sell your personal data or make it available to third parties for their own independent marketing purposes.

We may share your data with trusted business partners and data processors where necessary for our business operations, including:

• Website hosting and maintenance providers.

• Online store and information system providers.

• Delivery and logistics companies.

• Card payment and electronic payment providers.

• Accounting and bookkeeping service providers.

• Newsletter and business communication service providers.

• Analytics and marketing service providers, where used with the required consent.

• Competent public authorities where disclosure is required by law.

We enter into appropriate data processing agreements with our processors and take measures to ensure that personal data remains protected.

5. Transfers of Personal Data to Other Countries

Personal data is generally processed within the European Economic Area.

If we use service providers that process personal data outside the European Economic Area, such transfers are carried out only in accordance with the GDPR and subject to appropriate safeguards, such as an adequacy decision or Standard Contractual Clauses.

6. How Long Do We Retain Personal Data?

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or for as long as required by law.

Indicative retention periods:

• Order and purchase information: throughout the business relationship and thereafter for the periods required by accounting, tax and other applicable regulations.

• Enquiry information: for the duration of the communication and as long as necessary to resolve the enquiry or any related request.

• User account information: while the account remains active, or until a deletion request is made, unless there is a legal basis for retaining certain information.

• Newsletter information: until consent is withdrawn or the user unsubscribes, while retaining only the minimum information necessary to record the unsubscribe request where appropriate.

• Technical data and cookies: according to the retention period of individual cookies and the policies of the services used.

• Accounting information: for the periods prescribed by applicable law.

Once the applicable retention period expires, personal data is deleted, anonymised or securely disposed of, unless another lawful basis requires its retention.

7. Your Rights Regarding Personal Data

Under the GDPR, you have the right to:

• Request access to your personal data.

• Request the correction of inaccurate or incomplete data.

• Request the erasure of personal data where the legal requirements are met.

• Request the restriction of processing.

• Request the transfer of your data to another data controller where the legal requirements are met.

• Object to processing based on legitimate interests.

• Withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

• Not be subject to a decision based solely on automated processing, including profiling, where the conditions set out in the GDPR are met.

To exercise your rights, please contact us at info@optikaluna.com.

You also have the right to lodge a complaint with the supervisory authority:

Croatian Personal Data Protection Agency (AZOP)
Selska cesta 136
10000 Zagreb, Croatia
E-mail: azop@azop.hr
Website: https://azop.hr

8. Personal Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

Access to personal data is restricted to individuals who need such access to perform their business duties.

9. What Are Cookies?

Cookies are small text files stored on your computer or mobile device when you visit a website.

Cookies allow a website to recognise your browser, remember selected settings and ensure that certain website functions operate correctly.

Depending on their purpose, cookies may process information such as your IP address, browser identifier, pages visited and information about how you use the website.

10. Types of Cookies

The following categories of cookies may be used on our website:

Strictly Necessary Cookies

These cookies are required for the basic operation of the website, security, navigation, shopping cart functionality, user login and order processing.

These cookies do not require consent where they are technically necessary to provide a service explicitly requested by the user.

Functional Cookies

These cookies allow the website to remember your preferences and improve your browsing experience.

Where they are not necessary for the basic operation of the website, they are activated only with your consent.

Analytical Cookies

These cookies may be used to collect statistical information about website traffic and usage in order to improve the website's functionality and content.

They are activated only after you have given your consent.

Marketing Cookies

These cookies may be used to measure advertising effectiveness, display relevant advertisements and understand visitors' interests.

They are activated only after you have given your consent.

The specific cookies, their providers and retention periods are displayed in the website's cookie settings, depending on the tools actually used.

11. Managing Cookies and Consent

When you first visit our website, a cookie notice is displayed, allowing you to:

• Accept all cookies.

• Reject all non-essential cookies.

• Select individual cookie categories through the settings.

Strictly necessary cookies remain active because they are required for the website to function. All other categories remain disabled until you provide the appropriate consent.

You may change or withdraw your decision at any time through the cookie settings available on the website.

Continuing to browse the website does not constitute consent to the use of non-essential cookies.

12. Links to Other Websites

Our website may contain links to other websites and services.

Napoletano d.o.o. is not responsible for how personal data is collected and processed on external websites. We recommend that you read their privacy policies before using their services.

13. Changes to the Privacy Policy and Cookie Policy

We reserve the right to amend this document to reflect changes in legislation, business processes or website functionality.

All changes will be published on this page together with the date of the latest update.

14. Contact

For any questions regarding personal data protection, the use of cookies or the exercise of your rights, please contact us:

Napoletano d.o.o. - Optika Luna
Giuseppe Garibaldi 13, 52470 Umag, Croatia
E-mail: info@optikaluna.com
Website: https://optikaluna.com