AbbysStore
Preparing cards, collection details and marketplace information.
Legal Information
This Privacy Policy explains how Occhi e mani j.d.o.o., operating the AbbysStore website, collects, uses, stores and protects personal data.
Last updated
5 August 2026
Section 1
The controller responsible for processing personal data through the AbbysStore website is:
Company
Occhi e mani j.d.o.o.
Responsible representative
Filip Golac
Registered address
Prešernova 3, 10000 Zagreb, Croatia
OIB
24328933412
Privacy contact
abbys.storeeu@gmail.com
References to “AbbysStore”, “we”, “us” or “our” in this policy refer to Occhi e mani j.d.o.o.
Section 2
We collect only personal data reasonably necessary to operate the website, respond to requests, review card collections, process order inquiries and comply with legal obligations.
Your name, email address, inquiry subject, message and any other information you voluntarily include in your message.
Your first and last name, email address, optional telephone number, country, public ManaBox link, additional notes and the information contained in the collection list you submit.
Your name, email address, telephone number, delivery address, country, selected products, quantities, selected purchase method and optional order notes.
Limited technical information may be processed automatically when required for security, error prevention, reliable operation and protection of the website.
Messages and records created when you communicate with AbbysStore regarding products, orders, sales, shipping, complaints or other business matters.
Please do not submit sensitive personal data, payment-card details, identity documents or information that is not necessary for your inquiry.
Section 3
Personal data is processed only where a valid legal basis applies. Depending on the situation, processing may be necessary to respond to your request, enter into or perform a contract, comply with law, protect legitimate business interests or act on your consent.
| Purpose | Data | Legal basis |
|---|---|---|
| Responding to general inquiries | Contact details and message content | Steps taken at your request, legitimate interests and, where applicable, performance of a contract |
| Reviewing ManaBox lists and preparing buying offers | Identity, contact details, country, ManaBox link and notes | Steps taken at your request before entering into a potential agreement |
| Processing order inquiries | Contact, delivery, order and product information | Steps taken at your request before entering into a contract and performance of a contract |
| Customer service and dispute handling | Correspondence, transaction and complaint information | Performance of a contract, compliance with legal obligations and legitimate interests |
| Accounting and tax compliance | Transaction, invoice and legally required customer information | Compliance with applicable legal obligations |
| Website security and abuse prevention | Limited technical, access and security information | Legitimate interest in protecting the website, business and users |
Where information is required to prepare or perform a contract, failure to provide it may prevent us from processing your order, collection review or other request.
Section 4
We do not keep personal data longer than necessary for the relevant purpose. Retention may be extended where required by accounting, tax, consumer-protection or other applicable laws, or where necessary for legal claims.
Unless the communication becomes relevant to an order, contract, complaint, legal claim or another legal obligation.
Retention
Up to 24 months
This allows AbbysStore to review the request, continue correspondence and respond to follow-up questions.
Retention
Up to 24 months
Unless longer retention is necessary for dispute handling, fraud prevention or legal claims.
Retention
Up to 24 months
Where information forms part of invoices, accounting documents, business books or legally required transaction records.
Retention
At least 11 years
Only information reasonably necessary to establish, exercise or defend legal claims is retained.
Retention
Until final resolution and expiry of relevant limitation periods
Withdrawal does not affect processing that was lawful before withdrawal.
Retention
Until consent is withdrawn
When a retention period expires, data is deleted, anonymised or securely restricted unless continued storage is legally required.
Section 5
We do not sell or rent personal data. Information may be shared only where necessary with trusted recipients that support our operations or where disclosure is required by law.
Gmail is currently used to receive, send and store business correspondence, contact inquiries, sell requests and order-related communications.
Technical hosting, security and infrastructure providers may process limited data required to deliver and protect the website.
Accountants, legal advisers or other professional service providers may receive data where necessary for compliance, advice or dispute resolution.
Data may be disclosed to courts, tax authorities, regulators, law-enforcement bodies or other competent authorities where legally required.
Where a transaction is completed, necessary delivery information may be provided to the selected postal, courier, tracking or insurance provider.
If you choose to continue a purchase through Cardmarket or CardTrader, the selected marketplace processes information under its own privacy terms.
Some service providers may process data outside the European Economic Area. Where applicable, we rely on lawful transfer mechanisms and appropriate safeguards required by data protection law.
Section 6
Subject to the conditions and limitations provided by applicable law, you may exercise the following rights:
You may ask whether we process your personal data and request a copy of the data and relevant processing information.
You may request correction of inaccurate data or completion of incomplete personal data.
You may request deletion where the data is no longer necessary, consent has been withdrawn or another applicable condition is met.
You may request that processing be restricted in circumstances provided by applicable data protection law.
Where applicable, you may request personal data you provided in a structured, commonly used and machine-readable format.
You may object to processing based on legitimate interests. We will stop unless compelling legitimate grounds or legal claims require continued processing.
Where processing is based on consent, you may withdraw it at any time without affecting earlier lawful processing.
You may lodge a complaint with the Croatian Personal Data Protection Agency or another competent supervisory authority.
Send your request to abbys.storeeu@gmail.com. Clearly describe the right you wish to exercise. We may ask for reasonable information necessary to verify your identity before acting on the request.
Section 7
We apply reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, misuse or access.
Personal data is accessible only where reasonably necessary for business purposes.
We use reputable communication, hosting and infrastructure services.
We request only information reasonably necessary for the relevant purpose.
No internet transmission or storage system can be guaranteed to be completely secure. Users should avoid sending payment-card information, passwords or unnecessary sensitive data through contact forms or email.
Section 9
Please contact us first if you have a question or concern about how your personal data is processed:
You also have the right to lodge a complaint with the Croatian supervisory authority:
Croatian Personal Data Protection AgencySection 10
This Privacy Policy may be updated when website features, processing activities, service providers or legal requirements change.
The current version will always be published on this page. The date shown at the beginning of the policy indicates when it was most recently updated.
Contact AbbysStore for access, correction, deletion or another privacy-related request.
Submit a Privacy Request