Privacy policy

Last updated: 24 September 2026

DENTADERM COSMETICS d.o.o. operates the EASTOK online store and the associated website, including the content, features, products and services available through the store.

This Privacy Policy explains how we collect, use, process and protect your personal data when you visit our online store, purchase products, contact us or otherwise use our services.

Our online store uses the Shopify platform, which enables us to provide our online store services.

By using our online store, you acknowledge that you have read and understood this Privacy Policy.

Data Controller

The controller responsible for the processing of personal data is:

DENTADERM COSMETICS d.o.o.
Ulica Damira Tomljanovića Gavrana 7
10000 Zagreb, Croatia
OIB: 39185737033
Telephone: 01 7793 066
Email: info@dentaderm.hr

Personal Data We Collect

Depending on how you use our online store, we may collect and process the following categories of personal data:

  • first and last name
  • shipping address and billing address
  • telephone number
  • email address
  • information relating to orders and purchases
  • information relating to payment methods and payment confirmation
  • information about products you view, add to your cart or purchase
  • information you voluntarily provide when communicating with us
  • information about your device, internet browser and network connection
  • IP address and other technical identifiers
  • information about how you use our online store.

Payment card and payment information may be processed through the payment service providers we use to process transactions. Shopify’s existing policy also provides for the processing of financial and transaction information as part of the operation of the store.

How We Collect Personal Data

We may collect personal data:

  • directly from you, for example when you place an order, create a customer account or contact us
  • automatically when you use the online store, including through cookies and similar technologies
  • from service providers that process data on our behalf
  • from our business partners or other third parties where there is an appropriate legal basis for doing so.

These categories correspond to the sources of data described in Shopify’s existing policy.

Purposes of Processing Personal Data

We may process your personal data for the purposes of:

  • processing and fulfilling orders
  • processing payments
  • arranging delivery
  • communicating with you regarding your order
  • providing customer support
  • managing customer accounts
  • handling returns, complaints and other customer requests
  • improving the functionality and user experience of the online store
  • protecting the security of the store and preventing fraud or other misuse
  • complying with legal, accounting and other regulatory obligations
  • sending marketing communications where there is an appropriate legal basis for doing so.

Where marketing communications are sent on the basis of your consent, you may withdraw your consent or unsubscribe from such communications.

Shopify’s existing policy provides for the same general categories of purposes: providing services and completing transactions, marketing, security and fraud prevention, customer communications, and compliance with legal obligations.

Sharing Personal Data

We may share personal data with service providers only to the extent necessary for them to provide their services and for the operation of the online store.

This may include:

  • Shopify, as the platform on which our online store is hosted
  • payment service providers
  • delivery and logistics providers
  • IT and hosting service providers
  • analytics and customer support providers
  • other service providers necessary for processing and fulfilling orders.

We may also disclose data where required to do so by law, by a decision of a competent authority, or where necessary to protect our rights and the safety of our users.

Shopify’s existing policy expressly provides for the sharing of data with Shopify and service providers such as payment processors, IT providers, analytics providers, customer support providers, fulfilment providers and delivery services.

Shopify

Our online store uses Shopify.

Shopify processes certain personal data related to access to and use of the online store in order to enable the operation and improvement of its services. Data submitted through the store may be transmitted to Shopify and associated service providers necessary for the operation of the platform.

In certain circumstances, Shopify may act as an independent data controller for certain processing activities related to its services.

Cookies

Our online store may use cookies and similar technologies that are necessary for the operation of the store and, depending on your settings and consent, for analytics, personalisation and marketing.

Where consent is required under applicable law, non-essential cookies are used in accordance with the choices you make through the cookie settings.

You can manage your cookie preferences through the consent management options available on the website.

Data Security and Retention

We take appropriate technical and organisational measures to protect personal data.

However, no method of electronic transmission or data storage can guarantee complete security.

We retain personal data for as long as necessary for the purpose for which it was collected, including for the performance of contracts, maintenance of business records, compliance with legal obligations, resolution of disputes, and the establishment, exercise or defence of legal claims.

Your Rights

In accordance with applicable data protection laws, depending on the circumstances, you may have the right to:

  • request access to your personal data
  • request correction of inaccurate or incomplete data
  • request deletion of your personal data
  • request restriction of processing
  • object to certain processing of your personal data
  • request data portability
  • withdraw your consent where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. These rights and the possibility of withdrawing consent are also described in Shopify’s existing policy.

To exercise your rights, you can contact us at:

info@dentaderm.hr

Before acting on certain requests, we may ask you to provide information necessary to verify your identity.

Right to Lodge a Complaint

If you believe that your personal data is being processed in violation of applicable data protection laws, you may contact us so that we can attempt to resolve your concern.

You also have the right to lodge a complaint with the competent data protection supervisory authority. Shopify’s existing policy also provides for the right to contact your local data protection supervisory authority.

International Data Transfers

Due to our use of Shopify and other service providers, certain personal data may be processed or stored outside the country in which you reside.

Where personal data is transferred outside the European Economic Area to a country that has not been recognised as providing an adequate level of data protection, appropriate safeguards provided for under applicable law will be used, such as the European Commission’s Standard Contractual Clauses, where applicable.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, data processing practices, business processes or applicable laws and regulations.

The updated version will be published on this website together with the appropriate date of the latest update.

Contact

For any questions relating to privacy and the processing of personal data, or to exercise your rights, please contact us:

DENTADERM COSMETICS d.o.o.
Ulica Damira Tomljanovića Gavrana 7
10000 Zagreb, Croatia
OIB: 39185737033
Telephone: 01 7793 066
Email: info@dentaderm.hr