Privacy Policy

1. Introduction

ViraChem j.d.o.o. ("ViraChem", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and Croatian data protection laws.

2. Data Controller

ViraChem j.d.o.o. is the data controller responsible for your personal data. For any privacy-related inquiries, please contact us at:

• Email: info@virachemical.com
• Address: Pujanke 24A, 21000 Split, Croatia

3. Information We Collect

3.1 Information You Provide

When you use our services, we may collect:

• Contact Information: Name, email address, phone number, institution/company name
• Quote Requests: Product inquiries, quantity, purity requirements, research purposes
• Business Information: Institution affiliation, research lab details
• Communication Data: Messages, correspondence, support requests

3.2 Automatically Collected Information

• Usage Data: Pages visited, time spent, navigation patterns
• Device Information: IP address, browser type, device type, operating system
• Cookies: See Section 7 for detailed cookie information

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing quote requests and business inquiries
• Legitimate Interest: Improving our services, website functionality, and customer support
• Legal Obligation: Compliance with Croatian and EU chemical distribution regulations
• Consent: When you provide explicit consent for specific purposes

5. How We Use Your Information

We use your personal data to:

• Process and respond to quote requests
• Provide customer support and technical assistance
• Maintain and improve our website and services
• Comply with legal and regulatory requirements
• Prevent fraud and ensure security
• Send service-related communications (with your consent for marketing)

6. Data Sharing and Disclosure

We do not sell your personal data. We may share data with:

• Service Providers: Hosting, email, analytics (Vercel, Supabase) - all GDPR-compliant
• Legal Authorities: When required by Croatian or EU law
• Business Partners: With your explicit consent only

7. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. You can control cookie preferences through your browser settings.

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand usage patterns
• Preference Cookies: Remember your settings

8. Data Retention

We retain personal data only as long as necessary for the purposes stated in this policy or as required by law. Quote requests are typically retained for 3 years for business records and compliance purposes.

9. Your Rights Under GDPR

As a data subject in the EU, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit processing of your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at info@virachemical.com. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (SSL/TLS)
• Secure hosting infrastructure (EU-based servers)
• Access controls and authentication
• Regular security assessments

11. International Data Transfers

Your data is primarily stored within the EU (Croatia and EU-based servers). Any transfers outside the EU are protected by appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions.

12. Children's Privacy

Our services are intended for business and research professionals only. We do not knowingly collect data from individuals under 18 years of age.

13. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

14. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Croatian Data Protection Authority (Agencija za zaštitu osobnih podataka - AZOP):

15. Contact Us

For any questions about this Privacy Policy or our data practices, please contact: