This Privacy Policy explains how Envelopia, a brand of Foto e-motion, collects, uses and protects personal data when you visit this website, place an order or contact us.
Controller
The controller responsible for processing your personal data is:
- Foto e-motion, fotografski obrt i usluge, vl. Simon Glavica
- Dore Pejačević 18, 48000 Koprivnica, Croatia, European Union
- Email: info@foto-emotion.hr
Information We Collect
Depending on how you use the website, we may process your name, billing and delivery address, email address, telephone number, order details, correspondence and information needed to handle your request. Payment card details are entered directly into the payment provider’s secure interface and are not stored in full on our server.
We also process limited technical information needed to keep the website secure and functional, such as IP address, browser/device information and server logs.
Purposes and Legal Bases
- Orders and customer service: to accept, process and fulfil orders, arrange delivery, provide support and communicate about an order. The legal basis is taking steps at your request and performing the contract (GDPR Article 6(1)(b)).
- Accounting and legal obligations: to issue and retain invoices, maintain required business records and comply with applicable tax and other legal duties. The legal basis is compliance with a legal obligation (Article 6(1)(c)).
- Security and operation: to prevent fraud and misuse, protect the website and resolve technical or legal disputes. The legal basis is our legitimate interest in operating a secure online shop (Article 6(1)(f)).
- Optional marketing or analytics: if we introduce optional analytics, advertising or marketing tools, they will be used only where there is an appropriate legal basis, including consent where required. No Google Ads purchase tracking or Meta advertising tracking is intentionally active on this website at present.
Payments
Payments are processed by Stripe and the payment methods displayed at checkout, which may include card payments, Apple Pay, Google Pay, Link and Klarna. Stripe and the relevant payment service may process personal and transaction data under their own privacy terms. We do not store your full payment card number or security code on our server.
Cookies
We use necessary cookies and similar technologies for core website functions, including security, shopping cart, checkout and session functionality. WooCommerce and the payment process may set cookies or store temporary information needed to complete an order.
Envelopia does not intentionally activate analytics or advertising cookies at present. If optional cookies are introduced, we will provide clear information and request consent where required. You can also review or restrict cookies in your browser settings, although disabling necessary cookies may affect shopping and checkout functionality.
Service Providers and Transfers
To operate the shop, personal data may be shared with service providers such as the hosting provider, WooCommerce/WordPress service components, Stripe and related payment services, delivery and fulfilment partners, email providers and professional advisers where necessary. These providers may process only the data needed for their services and are subject to appropriate contractual or legal safeguards.
Some providers may process data outside the European Economic Area. Where this occurs, we rely on an adequacy decision or appropriate safeguards recognised under GDPR, such as Standard Contractual Clauses, where applicable.
Retention
We retain order, invoice and accounting records for the period required by applicable tax, accounting and other legal obligations. Customer-service correspondence is kept only as long as needed to handle the request and protect our legitimate interests. Technical logs and temporary shopping data are kept for the period necessary for security and website operation. Data may be retained longer where needed to establish, exercise or defend legal claims.
Your Rights
Subject to the conditions in GDPR, you may request:
- access to your personal data and information about its processing;
- correction of inaccurate or incomplete data;
- erasure of data where there is no lawful reason to retain it;
- restriction of processing;
- data portability where applicable;
- objection to processing based on legitimate interests; and
- withdrawal of consent at any time where processing is based on consent.
To exercise a right, contact us at info@foto-emotion.hr. We may ask for information needed to verify your identity. We normally respond within one month; this period may be extended by up to two further months where permitted by GDPR, and we will inform you if an extension is necessary.
You also have the right to lodge a complaint with the Croatian supervisory authority, the Croatian Personal Data Protection Agency (AZOP).
Security and Changes
We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure. We may update this Privacy Policy when our services or legal obligations change. The current version will always be published on this page.
Last updated: 3 September 2026
Contact
For privacy questions or requests, contact info@foto-emotion.hr.
