Privacy policy

Caring for our customers is the cornerstone of all of our developmental visions, and the sense of trust and security we want to provide constantly strives to develop and improve, guaranteeing the reputation we are building on the market.

In this sense, the EU Data Protection Regulation has helped us to develop uncompromisingly a system that will guarantee to all our customers the care of the data they have given us.

Following the privacy policy, you can rely on us, and your private information will be handled according to the highest criteria and standards.

Therefore, take a few minutes to learn about our new privacy policy.

Your Tommy


With the Privacy Policy, Tommy d.o.o. from Split, Domovinskog rata 93 (hereinafter: Tommy) protects the privacy of its clients and cares for their personal data according to the EU General Data Protection Act 2016/679 / EC (hereinafter: Regulation) and Law on the implementation of the General Data Protection Act Official gazette 42/2018. With the Privacy Policy Tommy transparently and publicly discloses the ways in which personal data processing is carried out solely according to the principles of the Regulation.

Our fundamental principle is customer privacy and personal data protection. We strictly follow the following principles to protect your privacy:

– We do not collect more information than we need,
– We do not use your information for purposes other than those specified,
– We will not keep your data if it is no longer needed or with a valid legal basis,
– We never sell, rent or distribute or publicly disclose your personal information,
– Access to your data is not given to third parties without your knowledge,
– We do not use automated personal data processing techniques that consist of creating your profile or for analyzing or predicting your personal preferences and behaviours,
– We do not ship your personal data outside the EU,
– We do not use your information for purposes other than those specified,
– We ensure that your personal information is stored safely.

It is important to read our Privacy Policy and we hope that you will take your time and focus your attention to do so. We have tried to put it in writing as clear as possible and for it be understandable, with the desire to keep your full confidence in the way we treat your personal information.


Personal information:

According to the Regulation, personal data are all data relating to an individual whose identity has been identified or can be identified (“respondent”), and an individual or a respondent listed in the Regulation, whose identity can be identified is a person who can be identified directly or indirectly.


According to the Regulation, processing means – any procedure or set of procedures performed on personal data or on personal data sets, using whether automated or non-automated means such as collecting, recording, organizing, structuring, storing, adapting or modifying, locating, inspecting, use, detect by transfer, spread or otherwise make available, synchronizing or combining, restricting, deleting, or destroying.

Data collection:

Tommy collects exclusively personal information that you enter and deliver to your will. Data is collected through available web forms for receiving newsletters or through contact with our employees. We collect data for the purpose of establishing contact and other specifically stated purposes based on your privacy. Part of the data is collected automatically via web cookies, more of which in the web cookies section.

Purpose and insight:

We use your personal information for the aforementioned purposes. In the procedure of processing data we share them with reputable external processors who have aligned their operations with the Regulation. For your better user experience in providing our partner services, we have chosen the Remake, Google, and Facebook marketing agencies.

Web cookies:

On our sites, we use web cookies that represent information set on your personal computer or mobile device as you browse the web site. Their purpose is to customize our website to give you the best experience and to serve you as an effective source of information.

The cookies used on our web pages can be divided into two main categories:

– Standard cookies that allow you to customize your browser’s interface – completely anonymous
– Additional cookies that allow you to customize your marketing activities – we use them exclusively based on your approval.

Additional cookies:

In accordance with your approval, we learn about the interests of visitors to Tommy’s site for the purpose of tracking the interest of visitors to individual services. This allows us to provide you with marketing messages tailored to your interests. The additional cookies we use are Google AdWords and Facebook cookies, and we use only bulk data.

More information about web cookies is available online via the link:

You can always turn off cookies by changing your browser settings.

Storage and protection:

Personal data will be stored and processed in accordance with the Regulation. Tommy continually undertakes all reasonable technical and organizational measures to preserve the security of your data and we also ask that from all external service performers. Access to your personal information is limited to prevent unauthorized access, alteration, or misuse.

Your rights:

We provide you with conditions to – decide on processing your personal information. First of all, we enable you with the following rights:

a) Right to access data

You have the right to request confirmation of whether we process your information and, if so, get access to that information. In case we handle a larger amount of data pertaining to you, we may ask you to specify your request for delivery of specific data groups that we are dealing with.

b) Right to correct data

In case you notice that you are processing inaccurate or incomplete data or want to modify it, you have the right to request correction of the same or the amendment of incomplete personal data. In order to ensure that we always handle only your accurate personal information, it is necessary that you make any changes to us without delay.

c) Right to Delete (“Right to Forget”)

Deleting personal data may be required, for example, if you have withdrawn your privacy to process your particular information when your personal data is processed illegally or when your data is no longer necessary for the purposes for which they were collected or processed in any way. However, please be assured that we will not be able to delete your information if they are needed to comply with legal obligations, contractual obligations, and other legal grounds indicted in the Privacy Policy.

d) The right to limit processing

You have the right to obtain a limit on the processing of your personal information, which may be requested, for example, if you have filed a complaint against the processing of data, have doubts regarding the accuracy of the personal data processed or the lawfulness of their processing, but you do not want these data to be deleted or you still need it for realization of legal requirements.

e) Right to data portability

If the processing is based on your preference or is done for the purpose of executing the contract you have concluded, and it is executed at the same time by automated means, you have the right to receive the personal information we have received from you. If requested, we will transfer your personal data directly to the other data processor if this is technically feasible.

f) Right to Objection

At any time, given your particular situation, you are authorized to file a complaint about the processing of your personal information, which is why we will limit the processing of your personal information. Also, we will disclose this information and stop processing unless we prove that there are reasoned and legitimate legal grounds for processing and storage of data. In addition, you may at any time have the right to object to the processing of your personal information for purposes of direct marketing. After filing your complaint, your personal information will stop being processed for this purpose.

g) The right to complain to the supervisory body

If you consider that processing of your personal data is in contradiction with the General Data Protection Regulation, you have the right to file a complaint with the competent supervisory authority. For the territory of the Republic of Croatia, the Supervisory Authority is the Personal Data Protection Agency with headquarters at: Martićeva ulica 14, 10000 Zagreb, Croatia, web:, tel: +385 1 4609 000.

h) Right to withdraw and approval

If the processing of your personal data is based on your approval, you have the right to withdraw at any time without any consequences.

Fulfilment of these rights may be required:
With recommended letter (with reference “Zaštita podataka”) or
– Appearing in person at the following address during working hours – work days from 8:00 – 15:00

Tommy d.o.o.
Domovinskog rata 93

21000 Split

More information on the fulfilment of your rights can be obtained electronically by e-mail:

Remark – when presenting a request the applicant’s identification is required.

-  If you send us a request by letter, please enclose a legible copy of the valid ID card, if necessary also a valid power of attorney
– If you present yourself in person please bring a personal ID card, if necessary also a valid power of attorney

Identification is necessary to protect you as the owner of your personal information.


For all additional questions you can contact us by post at the address:

Tommy d.o.o.
Domovinskog rata 93

21000 Split
With reference „Zaštita podataka“