PRIVACY POLICY

Last updated: 12.2.2026

Hartland Barrels, joint craft business for the production of wooden packaging, owned by Vladimir Mrkela and Goran Banina (“Hartland Barrels”, “we”, “us”, or “our”), respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, process, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Croatian laws.

1. Data Controller

Business Name: HARTLAND BARRELS, joint craft business for production of wooden packaging
Address: Zagrebačka 89, 42000 Varaždin, Republic of Croatia
VAT / OIB: 44435760041
Email: hello@hartlandbarrels.com
Website: https://hartlandbarrels.com

If you have any questions regarding this Privacy Policy or your personal data, please contact us via email.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

a) Information You Provide to Us

First and last name
Company name (for B2B customers)
Billing and shipping address
Email address
Phone number
Order details (products purchased, transaction value, purchase date)
Messages sent via contact forms

b) Information Collected Automatically

IP address
Browser type and device information
Website usage data (pages visited, time spent, interactions)
Cookies and tracking technologies

3. Purpose of Processing

We process your personal data for the following purposes:

Processing and fulfilling orders
Issuing invoices
Customer communication and support
Responding to inquiries
Improving website functionality and user experience
Sending newsletters and marketing communications (only with your consent)
Complying with legal and tax obligations

4. Legal Basis for Processing

We process personal data based on:

Performance of a contract (e.g., when you purchase our products)
Legal obligation (e.g., accounting and tax requirements)
Legitimate interest (e.g., website security, business improvement)
Consent (e.g., newsletter subscription, marketing communications)

You may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. Sharing of Personal Data

We only share personal data when necessary for business operations, including with:

Shipping and logistics providers
Accounting and tax service providers
Web hosting providers
Payment service providers (e.g., Stripe, PayPal or similar, depending on implementation)
Email marketing service providers (if you subscribe to our newsletter)

All third-party partners are required to process personal data in compliance with GDPR and applicable data protection laws.

We do not sell or rent your personal data to third parties.

6. Data Retention

We retain personal data only for as long as necessary:

Invoice and transaction data – in accordance with Croatian tax regulations (minimum 11 years)
Newsletter data – until consent is withdrawn
Contact form inquiries – up to 12 months after communication ends

After the retention period expires, personal data is securely deleted or anonymized.

7. Cookies

Our website uses cookies to:

Ensure proper functioning of the web shop
Analyze website traffic (e.g., analytics tools)
Improve user experience

Upon your first visit, you can manage or accept cookie preferences via our cookie banner.

More details may be available in our separate Cookie Policy (if applicable).

8. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

SSL encryption
Restricted access to personal data
Secure hosting infrastructure
Regular security updates

While we take reasonable measures to protect your data, no internet transmission can be guaranteed to be completely secure.

9. Your Rights Under GDPR

You have the following rights:

Right of access to your personal data
Right to rectification of inaccurate data
Right to erasure (“right to be forgotten”)
Right to restriction of processing
Right to object to processing
Right to data portability
Right to withdraw consent at any time

To exercise your rights, contact us at: hello@hartlandbarrels.com

You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) or your local supervisory authority.

10. International Data Transfers

If we use service providers located outside the European Union (e.g., certain marketing or analytics tools), we ensure that appropriate safeguards are in place in accordance with GDPR, such as Standard Contractual Clauses or equivalent legal mechanisms.

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Updates will be published on this page with a revised “Last updated” date.