cart12 0 Cart
3 Account
Contact us
4 Info



We are pleased that you have expressed interest in Mala lavender :).
At the beginning, we would like to emphasize that the protection of personal data is extremely important to us and we take all possible measures to protect them in the best possible way.
Protection, collection and use of collected personal data by Small of lavender has been enhanced by the conditions set by the European Commission for implementation GDPR regulation (General Data Protection Regulation).


Online payment security statement

When paying on our web store use CorvusPay - an advanced system for secure acceptance of payment cards via the Internet.

CorvusPay ensures the complete confidentiality of your card data from the moment you enter it in the CorvusPay payment form. Payment information is forwarded encrypted from your web browser to the bank that issued your card. Our store never comes into contact with complete information about your payment card. Also, the data is inaccessible even to CorvusPay system employees. The isolated core independently transmits and manages sensitive data, keeping it completely secure.

The form for entering payment data is provided with the SSL transport code of the highest reliability. All stored data is additionally protected by encryption, using a cryptographic device certified according to the FIPS 140-2 Level 3 standard. CorvusPay meets all requirements related to the security of online payments prescribed by leading card brands, ie operates in accordance with the standard - PCI DSS Level 1 - the highest security standard of the payment card industry. When paying with cards included in the 3-D Secure program, your bank, in addition to the validity of the card itself, additionally confirms your identity using a token or password.

Corvus Info considers all collected information to be a bank secret and treats it accordingly. The information is used exclusively for the purposes for which it is intended. Your sensitive data is completely secure, and its privacy is guaranteed by state-of-the-art security mechanisms. Only the data necessary to perform the work in accordance with the prescribed demanding procedures for online payment are collected.

The security controls and operating procedures applied to our infrastructure ensure the current reliability of the CorvusPay system. In addition, by maintaining strict access control, regular security monitoring and in-depth checks to prevent network vulnerabilities, and the planned implementation of information security provisions, they permanently maintain and improve the level of system security by protecting your card data.

Image Map

When paying via fast money transfer service and service Paypal no payment information is stored.


Privacy Policy describes how the Seller handles your personal information that it receives while using the Online Store.
Personal data includes your identification data: name and surname, e-mail address, home address and telephone number, or data that are not otherwise publicly available, and which the Seller learns about during your use of the Internet store.

The Seller will keep your personal data confidential and will not distribute, publish, make it available to third parties for use or in any other way make it available to any third party without your prior consent.

All customer data is strictly kept and is only available to employees who need this information to do the job.
Mala od lavande and business partners are responsible for adhering to the principles of privacy.
We are committed to protecting customers' personal information by collecting only the basic customer information necessary to meet our obligations.
Data that is automatically recorded when accessing the website, and is not personal data (domain name, search engine types, number of visits, time spent on the site, etc.) Mala od lavande  has the right to use it solely to assess website traffic and to improve its content and functionality.
Mala od lavande informs customers about how to use the collected data and gives them the opportunity to decide whether or not they want their name removed from the list used for marketing campaigns.
In the event of a change in any of the personal data (eg place of residence, delivery address) recorded during registration, the customer is obliged to make a change in the user data.
In case the customer does not make the changes, Mala od lavande is not responsible for any defects in terms of ordering or delivery of products.
The above provisions on personal data protection apply exclusively to the home page of the web shop, and to all pages within the domain, and not to external pages that link to the domain.

1. What basic information do we collect through this website and in what way?

When registering, we collect only those personal data that you want to give us or those that are necessary to provide (and improve) your services. We collect direct personal data such as name, surname, address and e-mail address, telephone / mobile number as well as indirect data such as 'Cookies' (tracking), connection and system information.

When you sign up for the Newsletter, your e-mail address is used to communicate with you, so that we can provide you with timely information about promotions, news, gifts and other important changes in our business, until you unsubscribe from the Newsletter. In addition, we use your e-mail address for our own advertising. Check-out is possible at any time.

Also, you can base your career in Lavender Little, by applying for a vacancy or send your resume to our e-mail page

You can be sure that Mala od lavande takes all necessary measures to keep your personal information you send secure.

2. How do we manage to preserve your personal information?

Mala od lavande takes all necessary measures to keep your personal information secure. Only authorized staff Small lavender, partner companies that are service providers and our business partners (CorvusPay - card payment, DPD courier service, GLS courier service), ie authorized staff (who have agreed to keep all data) have access Your personal information.
Small Lavender employees who have access to your personal information must comply with the rules of the Privacy Statement, and all business partners who have access to your personal information have signed a data protection agreement.
Contracts have also been signed by partner companies that have access to your personal information, to ensure that this information remains secure. To ensure that your personal information is protected, Mala od lavande constantly upgrades its IT system and thus has appropriate measures to prevent unauthorized access (eg hacking).

3. For what purposes do we use your personal information?

Your personal information will be used solely for the purpose of our business as well as for  managing, supporting and obtaining feedback on the service provided and to prevent breaches of security, laws or contract terms.

4. To whom do we disclose your data and why?

Mala od lavande will never share your personal information with business associates who intend to use it for direct marketing purposes unless you have given us specific permission to do so.

(i) direct marketing by e-mail,
(ii) It is your right to request from at any time stop us contacting us via email for marketing purposes as well
(iii)  you have the right to request the deletion of personal information from our systems

Mala od lavande may share your personal information with contracting partner companies, in order to provide you with the best possible service.

These are:

CorvusPay - Online gateway for card payments
DPD - a leading courier service provider
GLS - a leading courier service provider
KEKSpay - Online gateway for card payments
Eurosender - courier service provider outside Croatia

We may pass on your personal information to government bodies and law enforcement agencies in the following situations:
(and)  we are required to do so as required by any applicable law;
(ii)  if such action is necessary for the conduct of the legal process;
(iii)  when responding to any legal requests or actions;
(iv)  if it is in accordance with legal requirements or actions, or in order to protect the rights of Mala from lavender or its clients and the public.

5. How can you view, verify, modify or delete the personal information you have sent us?

If you have subscribed to the Newsletter regardless of registration on the webshop, upon receipt of each at the bottom is an option "Logout", through which you can log out or send us an email at and we will do it for you. If you are a registered user on our webshop, it is enough to go to your "User profile" and remove the check mark that you do not want to receive any more newsletters.

In addition to changing your information, we've added two new features to your user profile. 1. “Data we use” where you can read briefly where we all use your data. 2. "My personal data" - here you are offered to download all your data in PDF and CSV format, as well as a notification that you can send a request to forget or delete your data to the email

6. 'Cookies' - how and why do we use them?

Mala od lavande uses tracking technology ("Cookies") to collect personal information, such as the type of browser and operating system, the associated site, the path across the site, the domain of the ISP and the like, in order to understand the use of the website by users. Cookies help us tailor this website to your personal needs.

Mala od lavande Stores all information collected through 'Cookies' in a non-personally identifiable format. This type of information obtained through 'Cookies' will not be passed on our business or certain third parties. It will not be used for unforeseen communications.

'Cookies' placed on your computer do not contain your name. After the user has stopped working on the server.

Please check if your computer settings support the ability to accept 'Cookies' or not. You can set your browser to warn you before accepting 'Cookies' or you can set it to reject them, you will not have access to all the features of this site if you have done so. Under the "help" option on your browser, check out how you can do this. You do not need to have the 'Cookie' option turned on to use many parts of this and other websites. Remember that if you use different computers in different places, you will need to make sure that each browser is adapted to your 'Cookie' settings.

To make it easier for you to choose when entering our webshop, a window will appear where you can accept or reject cookies, with the above reduced functionality if you do not want to use them. Cookies will not be stored until you give your consent for them.

The cookies he uses Mala od lavande webshop are:

Session Cookies // Session Cookies
Name           Domain /  Domain               Path     Value
_sp_ses.d1da                            /                 *
_gat                                           /                 1
PHPSESSID                            /                 hq1ck3hl447rij8shlspb7uu1r

Stored Cookies // Cookies
Name                      Domain             Path     Expiration in days     Value
pixel                                                                /               365                  c10dc1b8-7773-4276-7ba4-1cb361020df3
_sp_id.d1da                                 /               730                     3cfc43abaaa944c8.1614945442.1.1614945449.1614945442
_gid                                                   /               1                     GA1.2.1825384265.1614945440
_him                                                    /              730                  GA1.2.854843797.1614945440
__cfduid                                                     /               30                     d6e425e8d6eeabcdc81320c597bae36051614945439
PrestaShop-1c08f5ccd1a4714c2342b60047eae723     /     20 def502002601cc303a2d213deca9320023eb2f1b3466cdf4114cd8e05a3028f

Third-Party Stored Cookies // Third-party cookies
Name       Domain       Path     Expiration     Value
pixel                                /                          365                              c10dc1b8-7773-4276-7ba4-1cb361020df3
__cfduid                     /                          30                                d6e425e8d6eeabcdc81320c597bae36051614945439

YOTPO - product review service
Google Analytics - traffic analysis service at
Facebook Pixel - Facebook service for targeted targeting of ads to the customer
Onesignal - customer service

7. E-marketing

SPAM is a place to store unsolicited emails containing advertisements or marketing materials sent without your consent.

Mala od lavande does not send SPAM emails. Mala od lavande uses an anti-spam tool to protect employees from receiving SPAM messages. Sending emails without the consent of the other party is illegal in many countries. Mala od lavande will not use your personal data (including your e-mail address) for direct marketing or communication monitoring, unless you give us explicit permission called "OPT-IN" consent (Consent)

Also, Mala od lavande will not share your personal information with third parties who would use your personal information to send spam emails.

Mala od lavande Websites provide an opportunity to get information about marketing via email.  Every email sent by Small lavender will give you the ability to stop receiving marketing emails at any time.

If for any reason you believe that you have received a spam email from Male of Lavender, please let us know immediately at the address provided. For address details see question 5 -   How can you view, verify, modify or delete the personal information you have sent us?

8. How long do we keep your personal information?

Mala od lavande may store the personal information you send us through this website in your databases. Your personal data will be kept only for as long as it is necessary to answer questions or solve problems, provide better and new services, and in accordance with legal provisions, according to the applicable law. This means that we may retain your personal information after you stop using our services or stop using this website. After that period, your personal information will be deleted from all systems within the framework Small lavender.

We remind you that you have the right to delete your personal data at any time. Please see question 5 - How can you view, verify, modify or delete the personal information you have sent us?

9. What is the policy on collecting data that we receive from children who use our website?

We believe that it is very important to protect the privacy of children in the world of electronic communications, as well as to encourage parents or guardians to participate and monitor the electronic activities of their children.

Websites for children

Special note for children under 16 years of age

If you are under the age of 16, we advise you to talk to your parent or guardian before leaving personal information on our website. If you are not sure you understand something in this section, please contact your parents or guardians for assistance.

Special note for parents of children under 16

We recommend that parents / guardians regularly monitor and check the electronic activity of their children.
Please make sure that your child does not provide personal identification information electronically without your permission.

10. Can we subsequently change the terms of the Privacy Policy?

We reserve the right to make changes and corrections to this notice. Please access this website from time to time to have an overview of new information.

11. Where can I find more information about the legal issues of our website and my legal rights and responsibilities?

For more detailed information, see "GENERAL TERMS OF SALE“, Available by clicking on this link, or directly on this page.

12. Through which addresses can I be informed if I have additional questions about my personal data?

E-mail address:
Postal address: Angara doo,  Kašinski odvojak 20a, Sesvete

Info Number: 00 385 1 4400 220

13. What conditions with legal definitions are used in Mala od lavande data privacy statement?

Personal information includes personal data and any information related to you that can directly or indirectly identify you (on the website it is your ordinary e-mail address, ip address ...).
Processing of personal data means any operation or series of operations carried out on the basis of your personal data, including the collection, recording, organizing, storing, adapting or modifying, searching, consulting, using, disclosing for transmission, distribution or otherwise making available, align or combine, block, delete or destroy (ie any activity that Mala od lavande implemented, and includes the personal information you send us).

14. Retargeting

14a. Newsletter

When you sign up for the Newsletter, your e-mail address is used to communicate with you, so that we can provide you with timely information about promotions, news, gifts and other important changes in our business, until you unsubscribe from the Newsletter. In addition, we use your e-mail address for our own advertising. Check-out is possible at any time.

14b. Retargeting-Pixel social network Facebook

This website uses the Retargeting-Pixel Custom Audiences option of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. Facebook can target visitors to our website with Facebook-Ads using the Remarketing-Pixels option. For this purpose, a Facebook cookie will be stored on your computer. Other information on the scope and purpose of data collection, how Facebook processes and uses data, and possible privacy settings are available in Facebook's data protection guidelines at and https: // You can opt out of Custom Audiences at, and if you have a Facebook account, you can do so here.

14c. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). ("Google"). Google Analytics uses cookies, so called. "Cookies" are text files that you store on your computer, which allow you to analyze your use of the website. This website also uses the Google AMP Client ID API to link user activity on accelerated mobile sites (AMP) with user activity on non-accelerated mobile sites through Google Analytics. Google tracking codes for this webpage use the "_anonymizeIp ()" feature. Therefore, an IP address within the Member States of the European Union or other signatory states throughout the European Economic Community is only briefly processed in order to exclude the possibility of direct connection with a person. Only in exceptional cases is a full IP address transmitted to a Google server in the U.S. and truncated there. At the request of the owner of this website, Google uses this information to evaluate the use of the website and to compile reports on the activities of the website, and to provide it with information on other services related to the use of the website and the Internet. The IP address transferred from your browser in Google Analytics is not associated with other Google data. You may prevent the storage of cookies by the appropriate settings in your browser software, but please note that in this case you may not be able to use all the functionality of this website in full. In addition, you can prevent the collection of information generated by cookies related to your use of the website (including your IP address) on Google, as well as the processing of this data by Google by downloading and installing available browser add-ons at the following links:

14d. Facebook

On our website, the so-called social networking plug-ins (“Plugins”) for the Facebook social network operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). Add-ons are marked with the Facebook logo or supplemented by the "Facebook Social Networking Software Supplement" or the "Facebook Social Networking Software Supplement". An overview of Facebook plugins and their appearance can be found here:
When you invite a page of our website that contains such an add-on, your browser establishes a direct connection with Facebook servers. The content of plug-ins is transferred from the Facebook page directly to your browser and becomes part of that page. With this link, Facebook gets the information that your browser has invited the appropriate page of the web presentation even when you do not have a Facebook profile or you are not currently logged in to the Facebook network. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.
If you are logged in to the Facebook network, then Facebook can immediately join our website to your Facebook profile when you visit. If you interact with plug-ins, for example, if you click the "Like" button or type a comment, that information will be immediately uploaded directly to Facebook's server and stored there. In addition, the information will be posted on your Facebook profile and shown to your Facebook friends.
Facebook may use this information for the purpose of advertising and designing Facebook pages appropriate to the needs. To this end, Facebook creates usage profiles, interests and links, eg to evaluate your use of our website in relation to advertisements displayed on your Facebook page, to inform other Facebook users about your activities on our website. and to provide other services related to the use of the Facebook network. If you do not want Facebook to associate the collected information about our website to your Facebook account, you must log out of the Facebook network before visiting our website.
The purpose and scope of the collection and further processing and use of data using the Facebook network, as well as your rights in this regard and the possibility of setting privacy settings can be found in the instructions for protecting the privacy of the Facebook network: .
If you do not want Facebook to directly associate the collected information about our website to your Facebook profile, you must log out of the Facebook network before visiting our website. You can completely prevent Facebook plug-ins from loading plug-ins for your browser, for example by using "Facebook Blocker" (

15. IMPORTANT - Why do I have to accept the terms in the Data Security Statement?

This Privacy / Security Statement provides you with all the necessary information (in a simple way) so that you can choose whether to use this website and whether to send your personal information. Small lavender or not.
Accordingly, when visiting our website, as well as communicating electronically, you accept and consent to the processing of your personal data in the manner defined in this Data Security Statement.

If you are interested in providing us with certain services (competitions, newsletter, new product details, etc.), we will have to take additional direct personal data from you (name, address and e-mail address). In that case, we will ask for your consent to the collection and use of your personal data, which will be used exclusively for the purpose for which you provided them to us.
If you have any questions regarding this Privacy Statement, please contact Mala Lavender at the address listed under question 12 and we will be happy to answer you.

Shopping Cart

Cart is empty



No account?
Create one here