Privacy Policy

Last updated: 22 November 2025

1. Introduction

We would like to inform you that Mom`s pants d.o.o. considers your safety very important and operates in accordance with all applicable regulations in the field of personal data protection. We take all necessary measures to ensure that your personal data does not become available to persons or systems for which it is not intended.

With this Privacy Policy, the company regulates rights and obligations in accordance with:

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – “GDPR”)
Law on the Implementation of the General Data Protection Regulation (Official Gazette 42/18)
Electronic Communications Act (Official Gazette 76/22)
Other applicable regulations governing personal data protection.

Controller of personal data processing:

Mom`s pants d.o.o.
Gajeva 44, 10000 Zagreb, Croatia
OIB: 73688520835
Contact: [email protected]

Personal Data Protection Officer:

Jelena Djokić

2. What personal data do we collect?

According to the GDPR, personal data is any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is someone who can be identified directly or indirectly, in particular by reference to identifiers such as a name, identification number, location data, online identifier or to one or more factors specific to that natural person’s physical, physiological, genetic, mental, economic, cultural or social identity.

Personal data that we collect in order to provide you with the best possible service includes, for example:

First and last name
Personal identification number (OIB)
Telephone and/or mobile number
E-mail address
User account/profile name
Address and delivery address
Bank account details (for card payment and refund of funds).

Persons under the age of 18 are not allowed to use the Mom`s pants d.o.o. website and we do not knowingly collect or process their data. If it is established that data of minors have been collected without the consent of parents or guardians, such data will be deleted immediately upon becoming aware of it.

Other data that is collected automatically when you access and use the site, regardless of whether you use the services offered, may include:

IP address, date and time of access to services
Data about the device used (model, hardware, software, operating system, internet browser and language settings)
Information about which of our services you have used and how
If you access our pages via a mobile device: data about the device manufacturer, device type and application performance, including information about difficulties in using the application on certain devices (for the purpose of improvement)
Cookies – only if you have given consent for them (explained in detail in the Cookie Policy).

3. Why do we collect personal data?

The legal basis for the collection of your personal data is contained in:

Applicable legal regulations
Your explicit and unambiguous consent
The contractual relationship between you (the data subject) and the controller.

All personal data is collected and processed lawfully, fairly and transparently with respect for the data subject.

The main purposes of processing and collecting your personal data include:

Creating a profile on the official Mom`s pants d.o.o. web store
Processing and delivering your order
Responding to your inquiries regarding our products
Processing your complaints regarding goods purchased in the web store
Handling returns of goods and contract termination
Managing payment and refund methods
Replacement of purchased goods.

We process the personal data collected, as well as data obtained through the provision of services, only for the purposes for which they were provided and for which we have received your consent or have another valid legal basis.

4. To whom do we make your personal data available?

We do not make the personal data we have collected about you available to unrelated third parties.

In order to fulfil our obligations to you and provide you with the requested services, we make data available to our business partners. These may include:

Physical Mom`s pants d.o.o. stores
Banks and payment service providers through whose services we enable card payments and refunds (online payment services)
Delivery services (e.g. GLS, Hrvatska pošta, Overseas Trade Co Ltd.), which are authorized to use your data exclusively for the purpose of delivering a specific order.

Our business partners are contractually obliged to maintain confidentiality and to handle your personal data carefully, taking appropriate protection measures in accordance with applicable legal regulations.

We may make your personal data available to third parties only in cases of a justified request by a competent authority or when required to fulfil a legal obligation.

Personal data collected on the Mom`s pants d.o.o. website is not transferred to third countries or international organizations and is used only for the purposes for which it was provided.

5. How long do we keep your data?

We store your personal data for as long as is necessary to achieve the legitimate and lawful purposes for which it was collected and processed.

Exceptionally, data may be stored for a longer period if applicable regulations and provisions of the GDPR prescribe a longer retention period.

6. What are your rights related to the processing and collection of personal data?

Each data subject whose personal data we collect and process exercises the rights granted under the GDPR and other applicable legal regulations.

These rights include:

The right to transparent information, communication and modalities for exercising your rights
The right to information about the processing of personal data
The right of access to personal data
The right to rectification (correction) of personal data
The right to erasure (“right to be forgotten”)
The right to restriction of processing
The right to data portability
The right to object to the processing of personal data
The right to object to automated individual decision-making, including profiling
The right to withdraw consent.

a) Right to transparent information and communication

You have the right to receive clear and easily understandable information about how your personal data is collected and processed. Information about the processing of personal data is readily available in written form or, where appropriate, electronically on our website. At your request, information may also be provided orally, provided that your identity has been reliably established by other means.

b) Right to be informed about personal data processing

You must be provided with information about:

The data controller and contact details
The Data Protection Officer (if applicable) and contact details
What data is collected
The purpose and legal basis of the processing
The period for which the data will be stored
Who the recipients of the data are
Whether the data is transferred outside the European Union.

You must also be informed that you can request:

access to your personal data
rectification or erasure of data
restriction of processing
objection to processing, including withdrawal of consent (where processing is based on consent)
and that you have the right to lodge a complaint with the competent supervisory authority.

c) Right of access

You have the right to access your personal data that we collect and process about you. You may request detailed information, in particular:

the purposes of processing
the types/categories of personal data processed
recipients or categories of recipients
the expected period of storage.

Access to personal data can be restricted only in cases prescribed by EU law or national legislation, and only where such limitation respects the essence of fundamental rights and freedoms of other persons.

d) Right to rectification

You have the right to obtain, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by providing an additional statement (for example, correction of your address).

e) Right to erasure (“right to be forgotten”)

You have the right to request the deletion of your personal data if one of the following conditions applies:

The personal data is no longer necessary for the purposes for which it was collected or otherwise processed
You withdraw consent on which the processing is based and there is no other legal basis for processing
You object to processing and there are no overriding legitimate grounds for the processing
The personal data has been unlawfully processed
The personal data must be erased for compliance with a legal obligation under EU or national law
The personal data was collected in relation to the offer of information society services.

To exercise this right, please contact the data controller in writing by e-mail.

f) Right to restriction of processing

You have the right to obtain restriction of processing where:

you contest the accuracy of the personal data (for a period enabling us to verify accuracy)
the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead
the controller no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims
you have objected to processing, pending verification whether the legitimate grounds of the controller override your interests.

g) Right to object

You may at any time object to the processing of your personal data if it is based on:

performance of tasks carried out in the public interest or in the exercise of official authority
legitimate interests pursued by the controller
direct marketing purposes.

In that case, the controller shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

If the objection relates to processing for direct marketing purposes, your personal data will no longer be processed for such purposes. The right to object also applies to automated individual decision-making, including profiling.

h) Right to withdraw consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

You may withdraw your consent for data processing, for example, by deleting your profile or unregistering from the Mom`s pants d.o.o. site. You can continue to use the site as a guest, but without access to all services that require a registered profile.

Withdrawal of consent may make it impossible to continue using certain functionalities of the site if the personal data concerned is necessary for those activities. After you delete your profile or unregister, your personal data is anonymized so that it is no longer possible to link it to you as an individual.

7. How can you exercise your rights?

To exercise any of your rights related to personal data protection, you should contact Mom`s pants d.o.o. as the controller, in writing, using the contact details provided in this Privacy Policy.

Mom`s pants d.o.o. will respond to your requests as soon as possible.

If you believe that we have not complied with your requests or adequately protected your rights, you may contact the Personal Data Protection Agency and file a request to determine a violation of rights.

8. Marketing activities of Mom`s pants d.o.o.

In order to inform users of our services about new activities, services and offers in a timely manner, Mom`s pants d.o.o. conducts marketing activities such as sending newsletters, promotional messages and notifications.

We carry out these marketing activities only:

if you have given us your consent, or
if we have a legitimate interest in doing so.

If marketing activity is based on your consent, you may withdraw that consent at any time. After withdrawal, our marketing activities, to the extent covered by the withdrawn consent, will cease to be directed towards you.

9. Handling of personal data breaches

If it is established that a personal data breach has occurred, the controller will notify the competent supervisory authority – the Personal Data Protection Agency – of the breach without undue delay and no later than 72 hours after becoming aware of it, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals.

The supervisory authority will be notified through a report that contains all prescribed elements in accordance with the GDPR.

If Mom`s pants d.o.o. determines that the personal data breach is likely to result in a high risk to the rights and freedoms of individuals, the affected data subjects will be informed without undue delay, unless the GDPR prescribes that such notification is not required in specific circumstances.

Mom`s pants d.o.o. advises every user to keep their personal data safe and to periodically change the password used for registration/login to the site in order to prevent unwanted personal data breaches.

10. Personal data protection measures

Your privacy and security are extremely important to us. As the controller of personal data processing, Mom`s pants d.o.o. ensures that your data is processed in accordance with applicable regulations and that appropriate technical and organizational measures are applied to guarantee security and protection.

When processing data, we process only those data which are necessary to achieve the purpose of processing, applying the highest possible level of privacy protection. Collected personal data is kept for a limited period and can only be accessed by authorized persons. Data is not automatically and without individual intervention made available to an unlimited number of people.

All authorized persons who have access to personal data are familiar with the rules of personal data protection and are obliged to maintain business secrets and the privacy of all users of Mom`s pants d.o.o. services.

With all partners who provide services to Mom`s pants d.o.o., we conclude personal data protection agreements to prevent unauthorized use of personal data or any other violation of data subjects’ rights.

We regularly analyse and improve the measures we apply in order to continuously maintain the highest level of protection of your personal data and prevent possible breaches.

11. Social networks

In its business operations, Mom`s pants d.o.o. uses social networks belonging to the Meta Platforms, Inc. group – Facebook and Instagram – to present its services to potential and existing users. The company has official business profiles on these platforms.

When interacting on these platforms, users’ personal data is collected and processed, but not stored by Mom`s pants d.o.o. itself.

Persons authorized by Moms pants d.o.o. to manage accounts on these platforms have access to your messages and posts intended for Moms pants d.o.o., and store them only if required by law.

Every visit to Mom`s pants d.o.o. profiles on these platforms provides insight into statistical and demographic data. These statistics do not contain personal data but help us create better and more relevant content for our users.

If you use Meta platforms (Facebook, Instagram) to interact with Mom`s pants d.o.o. pages, these platforms may transfer your personal data to the United States of America. In such cases, they act as independent data controllers, and we recommend that you read their privacy policies, which are available on their respective websites.

Acceptance and changes to the Privacy Policy

By clicking during registration, the data subject accepts this Privacy Policy and confirms that they have read and understood it in its entirety and that they agree to the collection, processing and sharing of personal data in the manner and to the extent determined by this Policy.

Mom`s pants d.o.o. reserves the right to modify this Privacy Policy at any time by publishing the amended text on its website. We therefore recommend that you periodically review this Privacy Policy to determine whether it meets your needs.

If you do not agree with this Privacy Policy, we advise you to delete your profile or unregister from the site.