Privacy Policy

Last updated: 3 November 2026

1. Introduction

MULTIMAT – t.t.i. d.o.o. (“we”, “us”, or “our”) operates the Iron Storm website at https://ironstorm.eu.

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what personal data we collect, how we use it, when we may share it, how long we retain it, and what rights you may have under applicable data protection laws, including the General Data Protection Regulation (GDPR).

By using our website or placing an order, you acknowledge that your personal data may be processed as described in this Privacy Policy.

2. Data Controller

The data controller responsible for the processing of your personal data is:

MULTIMAT – t.t.i. d.o.o.
Ulica Ottavio Zakinja 4
52470 Umag
Croatia

Website: https://ironstorm.eu
Privacy and customer support email: markomsekul@gmail.com

3. Personal Data We Collect

Depending on how you use our website, we may collect the following categories of personal data.

3.1. Order and customer information

When you place an order, we may collect information such as:

Your name and surname;
Billing address;
Shipping address;
Email address;
Telephone number, if provided;
Details of the products ordered;
Order number, order status and transaction-related information;
Amounts paid and other information necessary to administer your order.

We use this information to process orders, arrange delivery, provide customer support, manage returns and refunds, and comply with our legal obligations.

3.2. Payment information

Payments on our website are processed through PayPal.

We receive information necessary to confirm and manage your order and payment. Payment card and account details are handled by PayPal in accordance with its own privacy policy and payment-processing practices.

We do not intend to collect or store your full payment card details on our website.

3.3. Communications

If you contact us by email or through another available contact method, we may process your name, email address, message and any other information you choose to provide.

We use this information to respond to your enquiry, resolve issues and maintain relevant customer service records.

3.4. Technical information and cookies

When you visit our website, certain technical information may be processed by the website, its hosting infrastructure, WordPress, WooCommerce and the plugins or services used to operate the website.

Depending on the services and settings active at the time of your visit, this may include:

IP address and basic technical information;
Browser and device information;
Website preferences and language settings;
Shopping cart and session information;
Cookie consent preferences;
Information needed to maintain website security and functionality.

Some services may also process information relating to website usage or interactions. The cookies and similar technologies actually used on the website are described in our Cookie Policy.

You can review your cookie choices using the cookie banner or preference controls available on our website, where applicable.

4. Purposes and Legal Bases for Processing

We process personal data only where we have a valid legal basis under applicable law.

Depending on the circumstances, we may process personal data for the following purposes:

4.1. Processing and fulfilling orders

We process order and contact information to accept and administer orders, arrange payment, prepare shipments, provide delivery information, and handle customer enquiries.

Legal basis: performance of a contract or steps taken at your request before entering into a contract.

4.2. Legal, accounting and tax obligations

We may retain and process order, transaction and invoicing information to meet applicable accounting, tax, consumer protection and other legal requirements.

Legal basis: compliance with a legal obligation.

4.3. Customer service and handling complaints

We process information provided in communications to answer questions, investigate issues, handle returns and refunds, and respond to complaints.

Legal basis: performance of a contract, compliance with legal obligations, or our legitimate interests in providing customer support and protecting our legal rights, as applicable.

4.4. Website operation and security

Technical information may be processed to maintain website functionality, protect the website and its users, prevent abuse, troubleshoot technical problems and ensure the security of our systems.

Legal basis: our legitimate interests in operating and securing the website, or another applicable legal basis depending on the processing involved.

4.5. Cookies and optional services

Cookies and similar technologies may be used for essential website functionality and, where applicable, other purposes described in our Cookie Policy.

Where consent is legally required, the relevant non-essential cookies or services should be used only in accordance with your consent choices.

You may change your cookie preferences using the controls provided on our website.

5. Sharing Personal Data with Third Parties

We may share personal data with third parties where necessary for the purposes described in this Privacy Policy.

These third parties may include:

PayPal, for payment processing and related transaction services;
Cyprus Post and other relevant postal or delivery providers, for shipping and delivery;
Website hosting and infrastructure providers, for hosting and maintaining the website;
WordPress, WooCommerce and relevant plugin or software providers, to the extent necessary to operate, maintain, secure and support the website;
Professional advisers or public authorities, where disclosure is necessary to comply with the law, protect legal rights or respond to lawful requests.

Third parties may process personal data under their own privacy policies or as service providers acting on our behalf, depending on their role.

We do not sell your personal data.

6. International Data Transfers

Some service providers may process personal data outside Croatia or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will rely on an appropriate transfer mechanism where required by applicable data protection law, such as an adequacy decision or suitable safeguards.

Further information about a particular service provider’s data processing may be available in that provider’s privacy documentation.

7. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including order fulfilment, customer support, legal compliance, dispute resolution and the establishment or defence of legal claims.

Order, accounting and tax records may need to be retained for periods required by applicable law.

Communications and technical records are retained for as long as necessary to address the relevant enquiry, maintain security, resolve disputes or fulfil another legitimate purpose.

When personal data is no longer required, it will be deleted or anonymised where appropriate, subject to applicable legal retention requirements.

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies to support website functionality, remember preferences, maintain shopping cart and session functions, and support services integrated into the website.

Depending on the services enabled and your consent choices, additional technologies may be used.

For information about the cookies and services detected on our website, their purposes and how to manage your preferences, please read our Cookie Policy:

https://ironstorm.eu/cookie-policy-eu/

You can manage available cookie preferences through the cookie banner or preference controls on our website.

Blocking certain cookies may affect some website functions, including shopping cart or checkout functionality.

9. Data Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.

However, no website, electronic transmission or storage system can be guaranteed to be completely secure.

10. Your Data Protection Rights

Subject to the conditions and limitations set out in applicable law, you may have the right to:

Request access to your personal data;
Request correction of inaccurate or incomplete personal data;
Request deletion of your personal data;
Request restriction of processing;
Object to processing based on legitimate interests;
Request data portability where applicable;
Withdraw consent where processing is based on consent;
Lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, contact us at:

markomsekul@gmail.com

We may need to verify your identity before responding to certain requests.

If you are in Croatia, you may contact the Croatian Personal Data Protection Agency (AZOP) for information about your rights or to lodge a complaint.

11. Children’s Privacy

Our website is not intended to encourage children to provide personal data without appropriate authorisation.

If you believe that a child has provided personal data to us in circumstances where it should not have been collected, please contact us so that we can review the situation and take appropriate action.

12. Third-Party Websites and Services

Our website may contain links to third-party websites or use third-party services, including PayPal and delivery services.

We are not responsible for the privacy practices of independent third-party websites. We encourage you to review their privacy policies before providing personal data directly to them.