AbbysStore
Preparing cards, collection details and marketplace information.
Legal Information
This Privacy Policy explains how Occhi e mani j.d.o.o., operating the AbbysStore website, collects, uses, stores and protects personal data.
Last updated
30 August 2026
Section 1
The controller responsible for processing personal data through the AbbysStore website is:
Company
Occhi e mani j.d.o.o.
Responsible representative
Filip Golac
Registered address
Prešernova 3, 10000 Zagreb, Croatia
OIB
24328933412
Privacy contact
contact@abbysstore.com
References to “AbbysStore”, “we”, “us” or “our” in this policy refer to Occhi e mani j.d.o.o.
Section 2
We collect only personal data reasonably necessary to operate the website, respond to requests, review card collections, process orders, payments and order inquiries and comply with legal obligations.
Your name, email address, inquiry subject, message and any other information you voluntarily include in your message.
Your first and last name, email address, optional telephone number, country, public ManaBox link, additional notes and the information contained in the collection list you submit.
Your name, email address, telephone number, delivery address, country, selected products, quantities, selected purchase method and optional order notes.
Limited technical information may be processed automatically when required for security, error prevention, reliable operation and protection of the website.
Messages and records created when you communicate with AbbysStore regarding products, orders, sales, shipping, complaints or other business matters.
Please do not submit sensitive personal data, payment-card details, identity documents or information that is not necessary for your inquiry through contact forms or email. Card details for online purchases should be entered only in Stripe checkout.
Section 3
Personal data is processed only where a valid legal basis applies. Depending on the situation, processing may be necessary to respond to your request, enter into or perform a contract, comply with law, protect legitimate business interests or act on your consent.
Purpose
Data
Contact details and message content
Legal basis
Steps taken at your request, legitimate interests and, where applicable, performance of a contract
Purpose
Data
Identity, contact details, country, ManaBox link and notes
Legal basis
Steps taken at your request before entering into a potential agreement
Purpose
Data
Contact, delivery, order and product information
Legal basis
Steps taken at your request before entering into a contract and performance of a contract
Purpose
Data
Correspondence, transaction and complaint information
Legal basis
Performance of a contract, compliance with legal obligations and legitimate interests
Purpose
Data
Transaction, invoice and legally required customer information
Legal basis
Compliance with applicable legal obligations
Purpose
Data
Limited technical, access and security information
Legal basis
Legitimate interest in protecting the website, business and users
Where information is required to prepare or perform a contract, failure to provide it may prevent us from processing your order, collection review or other request.
Section 4
We do not keep personal data longer than necessary for the relevant purpose. Retention may be extended where required by accounting, tax, consumer-protection or other applicable laws, or where necessary for legal claims.
Unless the communication becomes relevant to an order, contract, complaint, legal claim or another legal obligation.
Retention
Up to 24 months
This allows AbbysStore to review the request, continue correspondence and respond to follow-up questions.
Retention
Up to 24 months
Unless longer retention is necessary for dispute handling, fraud prevention or legal claims.
Retention
Up to 24 months
Where information forms part of invoices, accounting documents, business books or legally required transaction records.
Retention
At least 11 years
Only information reasonably necessary to establish, exercise or defend legal claims is retained.
Retention
Until final resolution and expiry of relevant limitation periods
Withdrawal does not affect processing that was lawful before withdrawal.
Retention
Until consent is withdrawn
When a retention period expires, data is deleted, anonymised or securely restricted unless continued storage is legally required.
Section 5
We do not sell or rent personal data. Information may be shared only where necessary with trusted recipients that support our operations or where disclosure is required by law.
Gmail is currently used to receive, send and store business correspondence, contact inquiries, sell requests and order-related communications.
Technical hosting, security and infrastructure providers may process limited data required to deliver and protect the website.
Stripe processes online card payments. Order, contact and payment information needed to complete the payment is shared with Stripe. AbbysStore receives payment references and status information but does not store full card details.
Accountants, legal advisers or other professional service providers may receive data where necessary for compliance, advice or dispute resolution.
Data may be disclosed to courts, tax authorities, regulators, law-enforcement bodies or other competent authorities where legally required.
Where a transaction is completed, necessary delivery information may be provided to the selected postal, courier, tracking or insurance provider.
If you choose to continue a purchase through Cardmarket or CardTrader, the selected marketplace processes information under its own privacy terms.
Some service providers may process data outside the European Economic Area. Where applicable, we rely on lawful transfer mechanisms and appropriate safeguards required by data protection law.
Section 6
Subject to the conditions and limitations provided by applicable law, you may exercise the following rights:
You may ask whether we process your personal data and request a copy of the data and relevant processing information.
You may request correction of inaccurate data or completion of incomplete personal data.
You may request deletion where the data is no longer necessary, consent has been withdrawn or another applicable condition is met.
You may request that processing be restricted in circumstances provided by applicable data protection law.
Where applicable, you may request personal data you provided in a structured, commonly used and machine-readable format.
You may object to processing based on legitimate interests. We will stop unless compelling legitimate grounds or legal claims require continued processing.
Where processing is based on consent, you may withdraw it at any time without affecting earlier lawful processing.
You may lodge a complaint with the Croatian Personal Data Protection Agency or another competent supervisory authority.
Send your request to contact@abbysstore.comOpen contact form. Clearly describe the right you wish to exercise. We may ask for reasonable information necessary to verify your identity before acting on the request.
Section 7
We apply reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, misuse or access.
Personal data is accessible only where reasonably necessary for business purposes.
We use reputable communication, hosting and infrastructure services.
We request only information reasonably necessary for the relevant purpose.
No internet transmission or storage system can be guaranteed to be completely secure. Users should avoid sending payment-card information, passwords or unnecessary sensitive data through contact forms or email.
Section 9
Please contact us first if you have a question or concern about how your personal data is processed:
You also have the right to lodge a complaint with the Croatian supervisory authority:
Croatian Personal Data Protection AgencySection 10
This Privacy Policy may be updated when website features, processing activities, service providers or legal requirements change.
The current version will always be published on this page. The date shown at the beginning of the policy indicates when it was most recently updated.
Contact AbbysStore for access, correction, deletion or another privacy-related request.
Submit a Privacy Request