Privacy & cookie policy
Last updated: 28 September 2026
This policy explains what personal data we collect when you visit the site or order our olive oil, why we collect it and what rights you have. We process data in line with the General Data Protection Regulation (GDPR) and Croatian law.
1. Data controller
The controller of your personal data is Leut Grupa, Pakoštane, Croatia.
For any privacy questions, contact us at leutgrupa@gmail.com.
2. What data we collect
- Order data: your name, email address, the message you enter, and the products ordered and total amount.
- Site usage data (only with your consent): pages visited, visit duration, device and browser type, approximate location and traffic source (e.g. campaign tags in a link).
- Technical data: IP address and browser details logged by the server for security and to keep the site running properly.
3. Purpose and legal basis
- Processing your order and communicating with you – performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR).
- Meeting legal obligations, e.g. accounting – legal obligation (Art. 6(1)(c)).
- Traffic analytics and marketing – your consent (Art. 6(1)(a)), which you can withdraw at any time.
- Security and basic operation of the site – legitimate interest (Art. 6(1)(f)).
4. Who we share data with
We do not sell your data. We share it only with service providers that help us run the site:
- Vercel Inc. – website hosting.
- Web3Forms – delivering the order form to our email address.
- Google (Google Tag Manager, Google Analytics, Gmail) – traffic measurement with your consent, and receiving email.
Some of these providers are located outside the European Economic Area (USA). In those cases, transfers rely on appropriate safeguards such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
5. How long we keep data
- Order data is kept for as long as needed to fulfil the order and communicate with you, and longer only where legal (e.g. accounting) obligations require it.
- Analytics data is kept according to the data retention settings in Google Analytics.
- Cookies are kept for the periods listed in the table below.
6. Cookies
Cookies are small files a website stores in your browser. We always use necessary cookies; analytics and marketing cookies are used only if you accept them in the cookie notice. We use Google Consent Mode v2: until you consent, Google tools do not store analytics or advertising cookies.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| leut_cc | Necessary | Remembers your choice in the cookie notice. | 6 months |
| leut_cart | Necessary (local storage) | Keeps your cart contents on your device. | Until you empty it or clear browser data |
| _ga | Analytics | Google Analytics – distinguishes visitors. | 2 years |
| _ga_<ID> | Analytics | Google Analytics – keeps session state. | 2 years |
You can change your choice here:
7. Your rights
At any time you have the right to:
- request access to your data and a copy of it,
- request correction of inaccurate data,
- request erasure of your data or restriction of processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent, without affecting the lawfulness of processing before withdrawal.
Send your request to leutgrupa@gmail.com. If you believe your rights have been infringed, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), www.azop.hr.
8. Changes to this policy
We may update this policy from time to time. The date of the latest change is shown at the top of the page.