Privacy Policy

Last updated: 18 October 2026

1. Who we are

The controller of your personal data is ECO CRAFT d.o.o., Nikole Tesle 24, 34220 Lapovo, Serbia (company reg. no. 22147722, VAT/PIB 115365752). For any question about your data, write to office@ecocrafteurope.com.

We process personal data in line with the Serbian Law on Personal Data Protection and, where it applies to visitors from the European Union, the General Data Protection Regulation (EU) 2016/679 (GDPR).

2. What we collect and why

Data	Purpose	Legal basis
Name, company, work email, country and the details of your request entered in the enquiry form	To answer your enquiry, prepare a quotation and send samples or documentation	Steps taken at your request before entering into a contract; your consent given in the form
Cookie and device identifiers, pages visited, ad clicks (only if you accept cookies)	To measure how visitors find us through our Google advertising and how many enquiries the ads bring	Your consent, which you can withdraw at any time
Technical server logs (IP address, browser type, time of visit)	To deliver the website securely and keep it running	Our legitimate interest in operating a secure website

We do not sell your data and we do not use it for automated decision-making or profiling with legal effect.

3. Cookies

When you first visit, a banner asks whether you accept cookies. If you decline, no advertising or measurement cookies are set and the site works exactly the same. If you accept, Google may set cookies used by Google Ads to measure ad performance and conversions. Your choice is stored in your browser, and you can change it at any time through the Cookie settings link at the bottom of every page.

4. Who receives your data

We use a small number of service providers who process data on our behalf:

• EmailJS — delivers enquiry form submissions to our mailbox.
• Netlify, Inc. — hosts this website.
• Google Ireland Ltd. / Google LLC — Google Ads advertising and conversion measurement (only with your consent).

Some of these providers are located in or transfer data to the United States. Such transfers rely on the safeguards the providers offer, such as the EU–US Data Privacy Framework or Standard Contractual Clauses.

5. How long we keep it

Enquiry data is kept for up to 24 months after our last contact, unless the enquiry leads to a business relationship, in which case it is kept as long as the relationship lasts and as required by accounting and tax law. Cookie data is kept for the period set by the relevant cookie, at most 13 months.

6. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting the lawfulness of processing before withdrawal. To use any of these rights, email office@ecocrafteurope.com; we reply within 30 days.

You can also lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection (www.poverenik.rs) or, if you are in the EU, with the data protection authority of your country.

7. Changes

We may update this policy when our services or the law change. The date at the top shows the latest version.