Retro Design

Last updated: 19 August 2026.

This Privacy Policy explains which personal data we process through the online store retrodesign.shop, why we process it, with whom we may share it, how long we retain it and which rights you have. It applies to visitors, customers, shipment recipients, people who send us enquiries or complaints, customer portal users and newsletter subscribers.

1. Data controller and contact details

RETRO DESIGN d.o.o.
Dalmatinska ulica 22, 10360 Sesvete – Soblinec, Croatia
Croatian personal identification number (OIB): 48522168716
VAT identification number: HR48522168716
Email: info@retrodesign.hr
Telephone: +385 1 3464 790 and +385 99 8445 838

For privacy questions or to exercise your rights, contact us at info@retrodesign.hr or by post at the address above. We have not appointed a data protection officer because, given the scope and nature of our processing, we are not legally required to appoint one.

2. Processing principles

We process personal data lawfully, fairly and transparently, only for specified purposes and to the extent necessary. We endeavour to keep data accurate, retain it only for as long as necessary and apply appropriate technical and organisational safeguards.

3. Personal data we process

Depending on how you use the store, we may process:

  • identification and contact details, such as your first and last name, address, country, email address and telephone number
  • information about your order, selected product, price, discount, delivery, return and complaint
  • payment information received from a payment service provider, such as payment status, amount, currency and transaction reference
  • customer portal data and information needed to access orders, returns and cancellations
  • the content of messages, enquiries, written complaints, photographs and videos that you voluntarily send us so that we can handle a specific request
  • information about newsletter consent, subscription confirmation, unsubscribing and use of a promotional code
  • information contained in voluntarily submitted reviews, including the rating, text, displayed name and any attached photograph or video
  • technical information, such as IP address, device and browser type, cookie identifiers, language settings, session data and activity on the website

We do not receive or store your full card number, card security code or other complete card details. These details are processed directly by the selected payment service provider. If a purchase is agreed by separate quotation and paid by bank transfer, we process the information visible on the payment order or bank statement to the extent necessary to match the payment to the quotation and meet our accounting obligations.

4. Purposes and legal bases for processing

Purchase, payment and delivery

We process data to enter into and perform a contract, collect payment, confirm an order, manufacture products, arrange delivery, track shipments, provide customer support, handle returns and cancellations, and resolve complaints. The legal basis is performance of a contract or taking steps at your request before entering into a contract.

Legal obligations

We process certain data to issue and retain invoices, maintain business records, respond to written consumer complaints, comply with tax and accounting obligations, and respond to a lawful request from a competent public authority. The legal basis is compliance with our legal obligations.

Enquiries, security and the protection of legal claims

We process data to respond to enquiries, maintain store security, prevent misuse and fraud, support technical operation, prove transactions, and establish, exercise or defend legal claims. The legal basis is our legitimate interest in secure and efficient business operations and the protection of our rights, except where your rights and freedoms override that interest.

Newsletter and direct marketing

We send newsletters and promotional messages on the basis of your consent. Subscription is confirmed through a double opt-in message. You can withdraw your consent at any time by using the unsubscribe link in each message or by contacting info@retrodesign.hr. Withdrawal does not affect the lawfulness of processing carried out before withdrawal and does not affect your ability to shop without subscribing to the newsletter.

Reviews

If you voluntarily submit a review, we process the information to verify and publish genuine customer experiences. Before submission, it must be clear which information will be displayed publicly. We display reviews imported from connected sales channels in accordance with the rules of that channel and applicable law.

Cookies and similar technologies

Strictly necessary cookies are used to operate the store, shopping basket, security, language settings and functions that you have expressly requested. Analytics, personalisation and marketing cookies or similar technologies are activated only after you give consent. You can refuse consent or change your choice later through the cookie settings tool. More information is available in our Cookie Policy.

5. Sources of personal data

We receive most information directly from you when you browse the store, make a purchase, open the customer portal, subscribe to the newsletter, or submit an enquiry, complaint or review. Payment service providers send us confirmation and limited transaction information, while delivery services provide shipment status information. If a customer names another person as the recipient, we obtain the recipient's contact details from the customer and use them only for delivery and related communication.

6. Recipients of personal data

We share personal data only to the extent necessary for a specific purpose with the following categories of recipients:

  • Shopify and providers of technical infrastructure, hosting, the customer portal, forms and store communication functions
  • payment service providers, including Stripe and PayPal, depending on the selected payment method
  • delivery services, including DPD, FedEx and TNT, depending on the product and destination
  • our production partner in Latvia, which manufactures and dispatches wallpapers and receives the order and delivery information necessary for that purpose
  • providers of accounting, IT, security, email, analytics, advertising, social media and review services, when those services are active and an appropriate legal basis exists
  • banks, insurers, professional advisers and other parties when necessary to perform a contract or protect legal claims
  • public authorities when we are legally required to disclose the information or receive a valid official request

Providers that process personal data on our behalf may process it only on our instructions and with appropriate safeguards. Certain providers, especially payment service providers and social media platforms, may act as independent controllers for part of their own processing. Their own privacy policies apply to such independent processing.

7. Transfers outside the European Economic Area

Some service providers or their subprocessors may process personal data outside the European Economic Area. In such cases, we transfer data only where there is a European Commission adequacy decision or another appropriate safeguard, such as standard contractual clauses, together with supplementary measures where necessary. You may request information about the applicable safeguard or a copy of it through our privacy contact.

8. Retention periods

We do not retain personal data longer than necessary for the processing purpose, unless longer retention is required by law:

  • accounting documents and the information forming an integral part of them are retained for at least 11 years from the last day of the financial year to which they relate
  • records of written consumer complaints are retained for one year from the date the complaint is received
  • order, delivery, return and complaint information is retained during performance of the contract and afterwards for as long as necessary to meet legal obligations and address possible legal claims
  • general enquiries that do not lead to a contract are normally retained for no longer than 12 months after communication ends, unless longer retention is needed for a legal claim
  • newsletter information is processed until consent is withdrawn, after which we may retain a minimal record of the unsubscribe request and consent given to demonstrate compliance and prevent further sending
  • customer portal data is retained for as long as needed for its functions, subject to the retention periods applicable to the related order information
  • the duration of individual cookies is stated in the Cookie Policy and in the cookie settings tool

After the applicable retention period expires, we delete or anonymise the data, or securely restrict any further processing.

9. Whether providing personal data is mandatory

Information marked as mandatory during the purchase process is necessary to enter into and perform the contract, process payment and arrange delivery. Without it, we cannot accept or fulfil the order. Information required for invoices and business records is processed to meet legal obligations. Newsletter subscription, marketing consent, submission of a review and acceptance of non-essential cookies are entirely voluntary.

10. Automated decision-making

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 of the General Data Protection Regulation. Automated order confirmations, abandoned-basket messages, newsletter subscription confirmations and similar technical messages do not constitute such decision-making.

11. Your rights

Subject to the conditions set out in the General Data Protection Regulation, you have the right to:

  • obtain confirmation as to whether we process your personal data and access that data
  • request correction of inaccurate data or completion of incomplete data
  • request erasure where the legal conditions are met
  • request restriction of processing
  • receive data that you provided to us in a structured, commonly used and machine-readable format where the right to data portability applies
  • object to processing based on legitimate interests
  • object to direct marketing at any time
  • withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
  • lodge a complaint with a supervisory authority

You may send your request to info@retrodesign.hr or to our postal address. Before acting on it, we may request additional information reasonably necessary to verify your identity. We will respond to a valid request without undue delay and normally no later than one month after receipt. Exercising your rights is normally free of charge; where a request is manifestly unfounded or excessive, we may act in accordance with the options available under the General Data Protection Regulation.

You may lodge a complaint with the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka), Ulica Metela Ožegovića 16, 10000 Zagreb, Croatia, email: azop@azop.hr, website: azop.hr.

12. Privacy rights of users in the United States

Users in US states where the right to opt out of certain data sharing applies may submit a request using the privacy settings link displayed in the store footer, where available, or by contacting info@retrodesign.hr. We do not sell personal data for monetary compensation. However, the use of certain advertising or analytics technologies may be defined as a sale, sharing or targeted advertising under some laws, which is why we provide the applicable right to opt out.

13. Children

Our store and products are not directed at children. We do not knowingly collect a child's personal data without a valid legal basis and any required authorisation from the holder of parental responsibility. If we learn that we have collected such data without an appropriate basis, we will take reasonable steps to delete it.

14. Data security

We apply appropriate technical and organisational measures, including access restrictions, protection of user accounts, secure communications, system updates, backups and contractual confidentiality obligations where applicable. No transmission or storage system is entirely risk-free, but we regularly adapt our measures to the nature of the data and available security solutions.

15. Changes to this Privacy Policy

We may amend this Privacy Policy when legislation, our services or our processing activities change. The current version will always be published on this page with the date of the latest update. We will additionally highlight material changes that significantly affect your rights in an appropriate manner.