GDPR & Privacy


1. Preamble

In accordance with the General Data Protection Regulation (GDPR), Bocassy d.o.o. (“Bocassy”) and Mavor Design Lab Ltd. (“Mavor”), we adopt and publish this Privacy Policy. As entities committed to comprehensive compliance with legal regulations, we strive to protect the rights and freedoms of individuals in connection with the processing of personal data.

2. Purpose of the Document

This Privacy Policy aims to inform individuals about how their personal data will be processed by Bocassy and Mavor. It outlines the rights of individuals and how they can be exercised.

3. Definitions

Personal Data: Any information related to an identified or identifiable individual.
Data Subject: An individual whose personal data is being processed.

4. Data Controller Information

Bocassy d.o.o.:

Address: Vrisnička ulica 16, Zagreb
OIB: 16207279646
Founded: 2014

Mavor Design Lab Ltd.:

Address: Palašićev odvojak 1, Ivanja Reka
OIB: 99850539937
Founded: 2022

5. Value of Personal Data and Responsibility for Protection

Personal data is considered any information related to an identified or identifiable individual (“data subject”). We recognize the value of personal data and undertake measures to ensure its confidentiality, prevent unauthorized access, and protect against unauthorized use.

6. Collection and Processing of Personal Data

We collect personal data only voluntarily provided or with another lawful basis for processing. Personal data is processed for the following purposes:

Efficient response to inquiries
Execution of sales contracts or services

Promotional purposes
Compliance with legal obligations

7. Legal Basis for Processing Personal Data

Personal data is processed based on the following legal grounds:

Consent of the data subject
Contractual necessity
Compliance with legal obligations
Legitimate interests pursued by the data controller or a third party

8. Rights of Data Subjects

Individuals have the following rights:

Right to Access: Obtain confirmation of whether or not personal data concerning them is being processed and, if so, access to the personal data.

Right to Rectification: Request the correction of inaccurate personal data.

Right to Erasure (Right to be Forgotten): Request the deletion of personal data.

Right to Restriction of Processing: Request the restriction of processing under certain circumstances.

Right to Data Portability: Receive personal data in a structured, commonly used, and machine-readable format for transmission to another controller.

Right to Object: Object to the processing of personal data under certain conditions.

9. How to Exercise Your Rights

Requests to exercise the rights mentioned above can be submitted via email to

10. Incident Management

In the event of a data breach that may cause significant harm, Bocassy and Mavor Design Lab will promptly notify affected individuals and take necessary measures to mitigate the impact.

11. Transparency

Any changes to this Privacy Policy will be posted on our website to ensure continuous visibility.

In Croatia, 04.12.2023.