Last updated: 11 September 2026
RAYA – obrt za proizvodnju i usluge, owned by Mauricio Manuel Villalba Almeida, with its registered office at Dicmo Sušci 61, 21232 Dicmo, Republic of Croatia, OIB 92120906383 (“RAYA”, “we”, “us” or “our”), respects your privacy and processes personal data in accordance with Regulation (EU) 2016/679 (“GDPR”), the Croatian Act on the Implementation of the General Data Protection Regulation and other applicable legislation.
1. Data Controller
RAYA – obrt za proizvodnju i usluge
Owner: Mauricio Manuel Villalba Almeida
Dicmo Sušci 61, 21232 Dicmo, Republic of Croatia
OIB: 92120906383
Email: info@raya.hr
Phone: +385 95 872 5992
RAYA does not have a designated Data Protection Officer, as such appointment is not required for its current activities and scope of processing.
2. Personal Data We Collect
Depending on how you interact with RAYA, we may process your name and surname; company or organisation name; email address; telephone number; location and country; project details and requirements; quantity and requested deadline; photographs, drawings, measurements, existing components and other files you choose to provide; information contained in correspondence with RAYA; and information required for quotations, contracts, invoicing and delivery of services.
Through the Start a Project form, you may submit multiple attachments. Please do not submit sensitive personal data or other information that is not necessary for your enquiry.
3. Why We Process Your Data
We process personal data to respond to enquiries; understand and assess project requirements; prepare quotations and proposals; take pre-contractual steps; enter into and perform contracts; provide, manufacture and deliver requested services or products; issue invoices and maintain required records; comply with legal, tax, accounting and fiscalisation obligations; protect RAYA’s legitimate business interests, systems and legal rights; and handle complaints, disputes and legal claims.
We do not sell personal data and do not use enquiry information for unrelated marketing purposes.
4. Legal Basis for Processing
Depending on the purpose, processing is based on performance of a contract or pre-contractual steps, legal obligation, legitimate interests, or consent where consent is legally required.
5. The Start a Project Form
Information submitted through the Start a Project form is used to process your enquiry and communicate with you. Files uploaded through the form may contain information relating to a project, product, space, equipment, existing component or other material relevant to the requested work. You are responsible for ensuring that you have the right to provide any files or materials you upload.
6. Service Providers and Data Recipients
RAYA does not sell personal data or provide it to third parties for their own marketing purposes. Where necessary, personal data may be processed by service providers supporting accounting and bookkeeping, invoicing and fiscalisation, IT and hosting, website operation, contact forms and file uploads, and other technical or professional services required to operate the business.
Basin
The Start a Project contact form and files submitted through it are technically processed through Basin, a form-processing service provider. Basin acts as a data processor for RAYA in relation to this processing. Basin may use infrastructure providers and subprocessors necessary to provide its service. Depending on the service infrastructure used, personal data may be processed outside the European Economic Area. Where applicable, appropriate safeguards required by the GDPR are used for such transfers.
7. Data Retention
RAYA does not retain personal data longer than necessary for the purposes for which it was collected, unless a longer retention period is required by law or necessary for the establishment, exercise or defence of legal claims. Information relating to enquiries that do not result in a business relationship is retained only for as long as reasonably necessary to manage the enquiry, communicate with you and protect RAYA’s legitimate interests. Information forming part of accounting, tax, invoicing or other legally required records is retained for the periods required by applicable law. Information and files submitted through the contact form may also be subject to the retention periods applicable to the technical service provider.
8. Cookies and Technical Information
The raya.hr website may use technically necessary technologies required for the operation and security of the website and contact form. If RAYA introduces non-essential analytics, advertising or other technologies that require prior consent, appropriate consent will be obtained before those technologies are activated. Further information is provided in our Cookie Information.
9. Data Security
RAYA takes appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or other unauthorised processing. Access to personal data is limited to persons who require it for legitimate business purposes.
10. Your Rights
Subject to applicable law, you may have the right to request access, correction, deletion, restriction of processing, object to processing based on legitimate interests, request data portability where applicable, and withdraw consent where processing is based on consent.
To exercise your rights, contact info@raya.hr. We may request additional information where reasonably necessary to verify your identity and protect your personal data.
11. Right to Lodge a Complaint
If you believe your personal data has been processed in violation of the GDPR or applicable Croatian law, you have the right to lodge a complaint with the competent supervisory authority:
Croatian Personal Data Protection Agency (AZOP)
Ulica Metela Ožegovića 16
10000 Zagreb
Republic of Croatia
azop.hr
12. Changes to This Privacy Policy
RAYA may update this Privacy Policy when necessary due to changes in its services, website, technology or applicable legislation. The date of the latest update is shown at the beginning of this document.