Privacy Policy

1. Privacy statement

We undertake to protect customers’ personal data by collecting only the necessary, basic information about customers/users required to fulfil our obligations; informing customers about how the collected data is used; and regularly giving customers the opportunity to choose how their data is used, including the option to decide whether or not they wish to have their name removed from lists used for marketing campaigns. All user data is kept strictly confidential and is accessible only to employees who need such data to perform their work. All our employees and business partners are responsible for respecting the principles of privacy protection.

2. Data controller

The controller of personal data collected through www.aryvati.com is Hedonistria d.o.o., Vodnjanska ulica 22, Rovinj, Croatia, OIB 71552486426, privacy email: info@aryvati.com (“Hedonistria”, “ARYVATI”, “we”, “us”).

3. Data we process

Depending on how you use the website and the service, we may process: name and surname, company name, OIB/VAT ID, address, email, phone number, account data, property and licence data, contact enquiry data, order and transaction data, technical data such as IP address, access logs, device and browser information, and cookie and analytics data where you have given consent for it.

4. Purposes and legal bases

We process data in order to: perform a contract and provide the ARYVATI service; process orders, payments and invoices; provide support and respond to enquiries; maintain security, prevent misuse and protect our legitimate interests; comply with legal obligations; and send marketing communications where an appropriate legal basis or consent applies.

5. Payments

Card payments are processed through the payment service provider Monri. ARYVATI/Hedonistria does not need to store the full card number, the card security code or the card expiry date. For order and accounting purposes we may retain transaction information received from the payment provider, such as the transaction identifier, amount, currency and payment status.

How card payments are protected is described on the Payment security page.

6. Recipients and processors

We may share data with service providers that support us with hosting, system development and maintenance, email delivery, customer support, analytics, accounting and payment processing, only to the extent required for their service and subject to appropriate contractual and security safeguards.

7. Transfers outside the EEA

Where a provider processes data outside the European Economic Area, the transfer is carried out using an appropriate safeguard mechanism required by applicable data protection law, where such a mechanism is necessary.

8. Retention

We retain data only for as long as necessary for the purpose for which it was collected, or for as long as contractual, tax, accounting and other legal obligations require. Contact enquiries that do not lead to a contractual relationship are deleted or anonymised after 12 months. Account and licence data are retained for the duration of the relationship and afterwards for as long as necessary to meet legal requirements and to defend legal claims.

9. Your rights

Subject to applicable law, you may request access to your data, correction, erasure, restriction of processing and data portability, and you may object to processing. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of earlier processing. You also have the right to lodge a complaint with the competent data protection supervisory authority.

10. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. The website and checkout use HTTPS.

11. Children

ARYVATI is a business service intended for hosts and other business users, and it is not intended for children as purchasers of the service.

12. Changes to this policy

We may update this Privacy Policy from time to time. The new version and the date of the latest revision will be published on this page.