Privacy Policy

1. Introduction

ViraChem jednostavno društvo s ograničenom odgovornošću ("ViraChem", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and Croatian data protection laws.

2. Data Controller

ViraChem j.d.o.o. is the data controller responsible for your personal data. For any privacy-related inquiries, please contact us at:

• Email: info@virachemical.com
• Address: Savska cesta 42, 10000 Zagreb, Croatia

3. Information We Collect

3.1 Information You Provide

When you use our services, we may collect:

• Contact Information: Name, email address, phone number, institution/company name
• Quote Requests: Product inquiries, quantity, purity requirements, research purposes
• Business Information: Institution affiliation, research lab details
• Communication Data: Messages, correspondence, support requests

3.2 Automatically Collected Information

• Usage Data: Pages visited, time spent, navigation patterns
• Device Information: IP address, browser type, device type, operating system
• Cookies: See Section 7 for detailed cookie information

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing quote requests and business inquiries
• Legitimate Interest: Improving our services, website functionality, and customer support
• Legal Obligation: Compliance with Croatian and EU chemical distribution regulations
• Consent: When you provide explicit consent for specific purposes

5. How We Use Your Information

We use your personal data to:

• Process and respond to quote requests
• Provide customer support and technical assistance
• Maintain and improve our website and services
• Comply with legal and regulatory requirements
• Prevent fraud and ensure security
• Send service-related communications (with your consent for marketing)

6. Data Sharing and Disclosure

We do not sell your personal data. We may share data with:

• Service Providers: Hosting, email, analytics (e.g. Vercel, database hosting) — GDPR-aligned where applicable
• Legal Authorities: When required by Croatian or EU law
• Business Partners: With your explicit consent only

7. Cookies and Tracking

Browsing this website sets no cookies and runs no analytics or tracking scripts; no advertising or social-media pixels are embedded. There is no consent banner because there is nothing to consent to — only the cookies below exist, and each is strictly necessary for a function you asked for.

• Sign-in session: Set only when you sign in: a session token and a CSRF token that keep your account signed in and protect it. Removed when you sign out.
• Analytics and advertising: None. No analytics service, advertising network or social-media pixel is loaded on this website.
• Your choices: The language and display currency you pick are stored so the next page keeps them. Nothing else is remembered.

8. Data Retention

We retain personal data only as long as necessary for the purposes stated in this policy or as required by law. Quote requests are typically retained for 3 years for business records and compliance purposes.

9. Your Rights Under GDPR

As a data subject in the EU, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit processing of your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at info@virachemical.com. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (SSL/TLS)
• Secure hosting infrastructure (EU-based servers)
• Access controls and authentication
• Regular security assessments

11. International Data Transfers

Your data is primarily stored within the EU (Croatia and EU-based servers). Any transfers outside the EU are protected by appropriate safeguards such as Standard Contractual Clauses (SCC) or adequacy decisions.

12. Children's privacy

Our services are intended for business and research professionals only. We do not knowingly collect data from individuals under 18 years of age.

13. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

14. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Croatian Data Protection Authority (Agencija za zaštitu osobnih podataka — AZOP):

15. Contact Us

For any questions about this Privacy Policy or our data practices, please contact: