Privacy Policy

Last update: October 22, 2026.

These rules explain which personal data we collect when you use the oplate-situm.com website, why we collect it, with whom we share it, how long we keep it and what your rights are. We process personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, „GDPR”), the Law on the Implementation of the General Data Protection Regulation (OG 42/18) and the Law on Electronic Communications (OG 76/22).

1. Data controller

PAYMENTS ŠITUM d.o.o. (OPLATE ŠITUM limited liability company for the production of metal structures and their parts)
Headquarters: Ćubiča put 12, 21256 Cista Provo, Croatia
OIB: 87627449944 · MBS: 060290959, entered in the Commercial Court Register in Split
Branches: Cista Provo, Ćubiča put 12, 21256 · Split, Solinska 49, 21000 · Zagreb, Oreškovićeva 12/A, 10000
E-mail: info@oplate-situm.com
Phone: +385 99 33 44 997

For any questions about personal data protection and to exercise your rights, please contact us at info@oplate-situm.com.

2. What data do we collect and why

2.1. Request for quote and contact form

Data: name and surname, company name, phone number, email address, type of inquiry, payment system, quantity, duration of the rental and the content of the message you type yourself, as well as the page from which the inquiry was sent and the time of sending. Only the name and email address are mandatory, because without them we cannot respond; the remaining fields are voluntary.

Purpose: response to your inquiry, preparation of a quote and further business communication regarding the inquiry.

Legal basis: taking action at your request before concluding the contract (Article 6(1)(b) of the GDPR) and our legitimate interest in business communication with representatives of companies that contact us (Article 6(1)(f) of the GDPR).

The inquiry is sent by email to our business mailbox; the website does not store it in its database.

2.2. Registration for e-news

Data: Email address, language of the page you signed up on, time of registration and confirmation that you have given consent.

Purpose: sending e-news about our products and services.

Legal basis: your consent (Article 6(1)(a) of the GDPR). You can withdraw your consent at any time by sending a message to info@oplate-situm.com or via the unsubscribe link in the email. The withdrawal does not affect the legality of the processing before the withdrawal.

2.3. Direct communication

If you contact us by email or telephone, we process the data you provide to us (e.g. name, contact details and the content of the communication) for the purpose of responding and conducting business, on the same legal basis as in point 2.1.

2.4. Protection of forms from abuse (Google reCAPTCHA v3)

We protect the forms with Google reCAPTCHA v3, which automatically assesses whether the form is submitted by a real person or an automated program based on data about the page and the device (e.g., IP address, browser data, page navigation). If the assessment is too low, the form is not submitted; in that case, you can contact us directly by email or phone.

Legal basis: our legitimate interest in protecting the site and the shopping carts from unwanted and malicious messages (Article 6(1)(f) of the GDPR). The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. More information: Google's privacy policy.

2.5. Technical data and page display

With every visit, the server automatically records technical data (IP address, date and time, page opened, browser and device type) in order to deliver the page, for security and error correction purposes. The page fonts are loaded from Google servers (Google Fonts), whereby your IP address is transmitted to Google. The legal basis is our legitimate interest in the secure and proper operation of the page (Article 6(1)(f) GDPR).

2.6. Measurement and advertising (only with your consent)

If you allow this in the cookie settings, we use tools for measuring traffic and the effectiveness of advertising (see points 3 and 4). The legal basis is your consent (Article 6(1)(a) of the GDPR), which you can withdraw at any time.

3. Cookies and similar technologies

Cookies are small files that are stored in your browser. We use essential cookies without your consent because without them the site does not work properly; we only use all the rest if you accept them in the cookie settings bar that appears the first time you visit it. Until you choose, analytical and marketing tools do not store cookies.

You can change your choice at any time by clicking on the cookie settings icon in the corner of the page, and you can delete cookies in your browser settings as well.

Google Tag Manager is the tool we manage the aforementioned measurement and advertising tools with. It does not store cookies itself, and only runs the other tools in accordance with your choice (Google Consent Mode).

4. Meta Pixel and Conversions API

If you accept marketing cookies, the Meta Pixel is loaded on the page (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland). It records visits to the pages and successfully submitted requests, so that we can measure the effectiveness of ads and display relevant ads on Facebook and Instagram. Data about the browser and device, IP address, visited page, and random event identifier are transmitted to Meta. The name, email address, phone number, and message content are not sent.

With your marketing consent, we can send the data of a successfully submitted inquiry directly to Meta from our server (Meta Conversions API), along with your email address and phone number in in a summarized (hashed) form From which the original data cannot be read, the IP address, browser data, and Meta cookie identifiers. Without consent, none of this is sent.

For the collection and transfer of this data, Meta and I are the joint controllers; Meta is responsible for further processing. More information: Meta's privacy policy.

5. Recipients of the data

We do not sell your data. We can only receive it:

• our employees who need them to process your request;
• service providers with whom we have a data processing agreement: website hosting, email, and site maintenance and IT support;
• Google Ireland Limited (reCAPTCHA, Google Fonts, Google Tag Manager and, with consent, analytics);
• with your consent: Meta Platforms Ireland Limited and LinkedIn Ireland Unlimited Company;
• the competent authorities, when we are legally obliged to do so.

6. Transmission outside the European Economic Area

Google, Meta and LinkedIn may also process data in the United States. The transfer is based on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, to which these companies are subject, and on the European Commission's standard contractual clauses.

7. How long we keep the data

• Inquiries and business communication: up to 2 years from the last communication if no cooperation is reached. If we conclude a contract, we keep the data for the duration of the business relationship and for as long as required by regulations (e.g., accounting and tax).
• E-news: until you withdraw your consent.
• Cookies: within the deadlines specified in the table in point 3.
• Technical server logs: for a short time, in accordance with the settings of the provider of the accommodation service of the site.

8. Your rights

In accordance with the GDPR, you have the right to:

• on access to and obtaining a copy of their data (Article 15);
• to correct inaccurate data (Article 16);
• the deletion of data (Article 17);
• on the restriction of processing (Article 18);
• on the portability of data (Article 20);
• to the objection to processing based on a legitimate interest (Art. 21);
• withdraw consent at any time, without affecting the legality of the processing before the withdrawal.

Send the request to info@oplate-situm.com. We will respond without unnecessary delay, and no later than within one month. To protect your data, we may request confirmation of your identity.

If you believe that the processing of your data violates the regulations, you can file a complaint. The Agency for the Protection of Personal Data (AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr, azop.hr.

9. Data security

The site uses an encrypted connection (HTTPS), forms are protected from automated submission, and only authorized personnel who need them for work have access to the data.

10. Links to social networks

The page contains regular links to our profiles on Facebook, Instagram, and LinkedIn, without embedded plugins from these networks. The data is only transmitted to these networks when you click on the link and open their page, after which their privacy policies apply.

11. Minors

Our services are intended for business users. We do not knowingly collect personal data from persons under 16 years of age.

12. Amendments to the rules

We may update these rules when our services change, the tools we use, or regulations change. The current version is always posted on this page, with the date of the last update at the top.