Data Controller
Data We Collect
Why We Use It
Data Sharing
Transfers
Your Rights
Security
Cookies
Minors
Language
Amendments
Privacy Policy
This Privacy Policy explains what personal data we collect when you use ice-bucket.eu, why we collect it, who we share it with, and what rights you have. It applies to all visitors, registered users, and customers.
Data Controller
BAR DREAM d.o.o.
Tina Ujevića 1, 21276 Vrgorac, Croatia
OIB: 24140352933
E-mail: support@ice-bucket.eu
Given our scope of operations, the appointment of a Data Protection Officer (DPO) is not required.
Data We Collect
You must be at least 18 years old to create an account and provide personal data.
Account & Contact Data
- Full name, e-mail address, password
- Shipping and billing address
- Phone number (optional)
- Company name and tax ID — if provided for invoicing
Order Data
- Products ordered, quantities, prices
- Payment references (we never see your card details — Stripe and PayPal handle that)
- Shipping details and tracking numbers
- Returns and complaint records
Customization Data
- Design files you upload (logos, images, text)
- Customization specifications and positions
Browsing Data
- Anonymized IP address, browser and device information
- Pages visited, traffic source, session duration
- Cookie data — see our Cookie Policy
Support Data
- E-mail content, attachments, and photographs sent to our support team
Why We Use Your Data
| Purpose | Legal Basis (GDPR) | Retention |
|---|---|---|
| Processing and delivering orders | Contract (Art. 6(1)(b)) | 7 years |
| Invoicing and fiscal compliance | Legal obligation (Art. 6(1)(c)) | 7–11 years |
| Managing your user account | Contract (Art. 6(1)(b)) | While account is active |
| Handling complaints and returns | Contract (Art. 6(1)(b)) | 3 years |
| Order and shipment notifications | Contract (Art. 6(1)(b)) | Duration of order |
| Website analytics (planned) | Consent (Art. 6(1)(a)) | 26 months |
Who We Share Your Data With
We share data only with partners essential to fulfilling your order. We do not sell your data.
| Partner | Purpose | Location |
|---|---|---|
| Stripe, Inc. | Card payment processing | Ireland / USA (SCC) |
| PayPal (Europe) | Payment processing | Luxembourg / USA (SCC) |
| UPS | Order delivery | EU + destination country |
| MBE (Mail Boxes Etc.) | Order delivery | EU + destination country |
| Hostinger | Website hosting and backups | EU |
| Point.hr | ERP — order and stock management | Croatia |
All partners are bound by data processing agreements in accordance with GDPR Art. 28.
International Data Transfers
Stripe and PayPal process data in the USA under Standard Contractual Clauses (SCC) approved by the European Commission. For deliveries outside the EU, your name and address are shared with the courier as necessary for contract fulfilment.
Your Rights
Under GDPR you have the right to:
| Right | What It Means |
|---|---|
| Access | Request a copy of all data we hold about you |
| Rectification | Correct inaccurate or incomplete data |
| Erasure | Request deletion of your data (subject to legal retention periods) |
| Restriction | Limit how your data is processed |
| Portability | Receive your data in a machine-readable format |
| Objection | Object to processing based on legitimate interest |
| Withdraw consent | Withdraw consent at any time |
Email support@ice-bucket.eu — subject: GDPR REQUEST – [type]. We respond within 30 days.
Supervisory authority: AZOP, Selska cesta 136, Zagreb — azop.hr
Data Security
How We Protect Your Data
- SSL/TLS encryption on all connections
- Secure hosting with automatic backups
- Access restricted to authorised personnel only
- Card data handled exclusively by Stripe and PayPal — never stored on our servers
Your Responsibilities
- Keep your login credentials confidential
- Notify us if you suspect unauthorised access to your account
Cookies
We use cookies for essential website functionality. When we activate analytics, additional cookies will require your consent.
Minors
Our services are not intended for persons under 18. We do not knowingly collect personal data from minors.
Language
This Privacy Policy is available in English, German, French, Italian, and Spanish. In the event of a conflict, the English version prevails.
Amendments
We may update this Privacy Policy when our services or the law require it. The current version is always available on ice-bucket.eu.
