Privacy policy
Last updated: 12 October 2026
Trešnja d.o.o. respects your privacy. This policy explains which personal data we collect when you visit crocherry.com, send us an enquiry, book a visit to the plantation or buy our products, why we do so and what rights you have. We process personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Croatian Act on the Implementation of the General Data Protection Regulation.
Data controller
The controller of your personal data is:
TREŠNJA d.o.o.
II. Maksimirsko naselje 4, 10000 Zagreb, Croatia
OIB (tax no.): 12796001269
Production facility and plantation: Ninski Stanovi, by county road 6011
E-mail: info@crocherry.com
Phone: +385 1 2348 715
For any questions about the processing of your personal data or to exercise your rights, contact us at info@crocherry.com or by post to the address above, marked “Data protection”. [■ If a data protection officer has been appointed, add their contact details here.]
What data we collect
We only collect data that you give us yourself or that is necessary for the website to work:
- Enquiry and booking data – name, e-mail address or phone number, type of enquiry, preferred date, number of guests and the content of the message you send us through the form, by e-mail or by phone.
- Order data (once the webshop is live) – name, delivery and billing address, e-mail, phone, products ordered, payment method and transaction details. We never see or store payment card details – these are processed directly by the payment service provider.
- Business contacts – name, company, position and contact details of the people we work with (partners, agencies, wholesale customers).
- Technical data – IP address, browser type, time of access and pages visited, recorded automatically by the server for security and to keep the website working properly.
- Cookies – see our Cookie policy.
We do not collect special categories of personal data (e.g. health data). If you send us such data yourself (e.g. information about an allergy for a tasting), we will use it only to adapt the programme accordingly and delete it afterwards.
Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to an enquiry sent through the form, by e-mail or by phone | Your consent (Art. 6(1)(a)) and steps taken at your request before entering into a contract (Art. 6(1)(b)) |
| Booking and organising visits, tastings, celebrations and events | Entering into and performing a contract (Art. 6(1)(b)) |
| Processing orders, delivery, payment and returns | Performance of a contract (Art. 6(1)(b)) |
| Issuing invoices and keeping accounting records | Legal obligation (Art. 6(1)(c)) – tax and accounting regulations |
| Handling complaints | Legal obligation (Art. 6(1)(c)) – Consumer Protection Act |
| Age verification when selling alcoholic beverages | Legal obligation (Art. 6(1)(c)) |
| Website security and preventing misuse | Legitimate interest (Art. 6(1)(f)) |
| Business cooperation with partners and wholesale customers | Legitimate interest and performance of a contract (Art. 6(1)(b) and (f)) |
We do not use your data to send promotional messages without your explicit consent. If we introduce a newsletter in the future, signing up will be voluntary and you will be able to unsubscribe at any time.
How long we keep data
- Enquiries that did not lead to cooperation or a booking – up to 12 months from the last communication.
- Bookings and orders – for the duration of the contract and the period for complaints, and no longer than 5 years from performance, due to possible contractual claims.
- Invoices and accounting records – 11 years, as required by the Croatian Accounting Act.
- Consumer complaints – at least one year from submission, as required by the Consumer Protection Act.
- Server logs – no longer than [■ number] days, unless needed to investigate a security incident.
Once the period expires, we delete the data or permanently anonymise it.
Who we share data with
We do not sell your data or share it with third parties for marketing purposes. It is available only to employees who need it for their work and to carefully selected processors with whom we have a data processing agreement:
- our web hosting and e-mail provider ([■ provider name, e.g. Plus Hosting Grupa d.o.o.]),
- our accounting service ([■ name, if an external service is used]),
- once the webshop is live: the payment service provider ([■ name]) and the delivery service ([■ name]), only to the extent needed for payment and delivery,
- competent authorities (e.g. the Tax Administration), where required by law.
We process data within the European Union / European Economic Area. If data ever needs to be transferred outside the EEA, we will do so only with appropriate safeguards under the GDPR (e.g. a European Commission adequacy decision or standard contractual clauses).
Your rights
You have the right at any time:
- of access – to find out whether we process your data and to receive a copy,
- to rectification of inaccurate or incomplete data,
- to erasure (“right to be forgotten”), where the data is no longer needed or there is no legal basis for processing it,
- to restriction of processing, e.g. while we check the accuracy of the data,
- to data portability for data you gave us based on consent or a contract, in a structured, machine-readable format,
- to object to processing based on legitimate interest,
- to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
Send your request to info@crocherry.com. We will reply without undue delay and within one month at the latest. To protect your data, we may ask you to confirm your identity. Exercising your rights is free of charge.
If you believe your data is not processed in line with the regulations, you can lodge a complaint with the supervisory authority: Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr, azop.hr.
Children and minors
Our services are not intended for children under 16 and we do not knowingly collect their data. We sell alcoholic beverages (wine, liqueur) only to adults.
Automated decision-making
We do not make decisions based solely on automated processing, including profiling, that would have legal or similarly significant effects on you.
Data security
We apply appropriate technical and organisational measures: an encrypted connection (HTTPS), access to data limited to authorised persons, regular system updates and backups. Even so, no transfer of data over the internet is completely secure – if you suspect misuse, please let us know immediately.
Changes to this policy
We update this policy from time to time, for example when we launch the webshop or introduce a new service. The current version is always published on this page, with the date of the last update at the top. In case of any discrepancy, the Croatian version prevails.