Privacy policy

This Privacy Policy explains how Vox catering ("we", "the controller") collects and processes the personal data of visitors to www-vox-demo.zzc.hr and users of our online ordering service, in accordance with the EU General Data Protection Regulation 2016/679 ("GDPR") and the Croatian Act on the Implementation of the GDPR.

Controller

Vox catering
Bledska 8, 10000 Zagreb
E-mail: —
Phone: +385 91 404 0474

What data we collect

• Order data – name, phone, delivery address, e-mail, order contents and notes.
• Payment data – card payments are processed by Stripe Payments Europe Ltd.; we never see or store your card number.
• Contact form data – name, e-mail, phone and the content of your message.
• Reservations – name, phone, number of guests, date and time.
• Technical data – IP address, browser type and cookies, as described in our Cookie policy.

Purposes and legal basis

• Fulfilling orders, deliveries and reservations – performance of a contract (Art. 6(1)(b) GDPR).
• Replying to contact form enquiries – legitimate interest (Art. 6(1)(f)).
• Invoicing and fiscalisation – legal obligation (Art. 6(1)(c)).
• Analytics and marketing cookies – only with your consent (Art. 6(1)(a)), which you may withdraw at any time.

We do not sell personal data and we do not make automated decisions that have legal effects on you.

Recipients

We share data only with processors needed to provide the service: HalloChef (order management system and this website), Stripe (card payments), OpenStreetMap (delivery zone map), Google (maps inside the ordering system and, with consent, analytics) and couriers to the extent needed for delivery.

Retention

Order data is kept as long as required by accounting and tax regulations; contact form messages for at most 12 months after our last communication.

Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing. Send requests to —. You may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), azop.hr.

Our services are not intended for persons under 16.

Links to other websites

Our website may link to third-party websites (e.g. social networks). We are not responsible for how they process data.

Changes

We may update this policy from time to time. The current version is always published on this page.

Last updated: 23 September 2026