GDPR & Cookie Policy
GDPR
This Privacy Policy describes how 16 milja d.o.o. collects, uses, processes, stores, and protects personal data of website users in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable laws of the Republic of Croatia.
By using this website, you confirm that you are familiar with the manner in which personal data is collected and processed as described in this Privacy Policy.
Data Controller
16 milja d.o.o.
Hebrangova 9
10000 Zagreb
Croatia
VAT/OIB: 41384251530
E-mail: info@experience-all.com
Phone: +385 99 269 2953
What Personal Data We Collect
Depending on how you use the website and services, we may collect the following data:
Identification Data
- first and last name
- company name
- VAT number, for business users
Contact Information
- e-mail address
- phone number
- billing and/or shipping address
Order and Payment Data
- information about purchased products or services
- transaction information
- payment method
Please note that payment card information is not stored on our servers, but is processed by certified payment service providers.
Technical Data
- IP address
- device type
- browser type
- operating system
- access time
- website usage data
Marketing Data
- user preferences
- newsletter interactions
- marketing consents
How We Collect Data
Data may be collected through:
- contact forms
- user account registration
- purchases of products or services
- newsletter subscriptions
- cookies and analytics tools
- communication via e-mail or social media
Purpose and Legal Basis of Processing
We process personal data only where there is a lawful basis for doing so.
- Order processing and delivery — Contract performance
- Customer support — Legitimate interest
- Invoice issuing — Legal obligation
- Newsletter and marketing — Consent
- Analytics and statistics — Consent
- Website security — Legitimate interest
- Fraud prevention — Legitimate interest
Use of WooCommerce, Shopify and Custom Web Systems
Depending on the technical implementation of the website or online store, we may use:
- WooCommerce
- Shopify
- custom web solutions
- CMS systems
- ERP and CRM integrations
- payment gateway systems
These systems may process certain personal data solely for the purpose of:
- fulfilling orders
- processing payments
- delivering products
- customer support
- technical system maintenance
Service Providers and Third Parties
To ensure proper business operations, we may use trusted third-party service providers.
Analytics
- Google Analytics
- Meta Pixel
- Matomo
E-mail Marketing
- Mailchimp
- Klaviyo
- Brevo
Payment Providers
- Stripe
- PayPal
- CorvusPay
- WSPay
Delivery Services
- GLS
- DPD
- DHL
- Croatian Post
Hosting and Cloud Infrastructure
- hosting providers
- cloud services
- CDN services
Third parties process personal data solely according to our instructions and in compliance with GDPR.
Data Transfers Outside the EU/EEA
Certain service providers may process data outside the European Economic Area (EEA), including the United States.
In such cases, we ensure appropriate safeguards, including:
- Standard Contractual Clauses approved by the European Commission
- GDPR-compliant service providers
- additional technical and organizational security measures
Data Retention Periods
We retain personal data only for as long as necessary for the purpose of processing or as required by law.
- User account — Until account deletion
- Order data — 11 years
- Newsletter data — Until unsubscribe
- Contact forms — 12 months
- Analytics data — Up to 26 months
Your GDPR Rights
You have the right to:
- request access to personal data
- correct inaccurate data
- request deletion of data
- restrict processing
- object to processing
- withdraw consent
- request data portability
- file a complaint with a supervisory authority
To exercise your rights, contact us at:
info@experience-all.com
Right to Lodge a Complaint
If you believe that the processing of your personal data is unlawful, you have the right to lodge a complaint with:
Croatian Personal Data Protection Agency (AZOP)
Selska cesta 136
10000 Zagreb
Croatia
Data Security
We implement appropriate technical and organizational security measures, including:
- SSL encryption
- access control systems
- backups
- server and application protection
- restricted access to personal data
Although we take reasonable steps to protect personal data, no method of transmission over the Internet is completely secure.
Links to Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the content or privacy practices of such websites.
Changes to This Privacy Policy
We reserve the right to modify this Privacy Policy at any time to reflect legal or technical changes.
All updates will be published on this page.
Contact
16 milja d.o.o.
info@experience-all.com
+385 99 269 2953
Last updated: May 7, 2026
COOKIE POLICY
Cookie Policy
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They are used to ensure proper website functionality, improve user experience, provide analytics, and support marketing activities.
Types of Cookies We Use
1. Necessary Cookies
These cookies are essential for the operation of the website and cannot be disabled.
Examples:
- user login
- shopping cart and checkout
- website security
- saving cookie preferences
Legal basis:
legitimate interest
2. Analytics Cookie
We use these cookies to analyze website usage and improve performance.
They may include:
- Google Analytics
- Matomo
- Shopify Analytics
- WooCommerce Analytics
Legal basis:
user consent
3. Marketing Cookies
These cookies are used for personalized advertising and remarketing.
They may include:
- Meta Pixel
- Google Ads
- TikTok Pixel
- Pinterest Tag
Legal basis:
user consent
Managing Cookies
When visiting the website for the first time, you will be presented with a cookie consent banner.
You can:
- accept all cookies
- reject non-essential cookies
- customize your preferences
You may change your cookie settings at any time through your browser settings or the cookie banner.
Disabling Cookies
Most browsers allow you to control cookies through browser settings.
Disabling certain cookies may affect website functionality.
Third-Party Cookies
Certain website features use third-party services that may place their own cookies.
This may include:
- Meta/Facebook
- Stripe
- PayPal
- YouTube
- Mailchimp
For more information, please review their privacy policies.
Contact
For questions regarding cookies and privacy:
16 milja d.o.o.
info@experience-all.com
Last updated: May 7, 2026