Last updated: [DATE]
This Privacy Policy explains how [Company Name] (“we”, “us”, “our”) collects, uses, and protects personal data when you visit or make a purchase through [website domain].
We respect your privacy and are committed to protecting your personal data in accordance with:
EU General Data Protection Regulation (GDPR – Regulation (EU) 2016/679)
Slovenian Personal Data Protection Act (ZVOP-2)
This policy applies to all users and customers within the European Union who use our website or purchase our products.
1. Introduction
When you visit our website, place an order, contact us, or interact with our services, we may collect certain personal data.
Personal data means any information that can identify you, either directly or indirectly.
We process your data only when it is necessary, lawful, and transparent. Our goal is to ensure that you clearly understand:
what data we collect
why we collect it
how it is used
what rights you have regarding your data
2. Data Controller Information
The controller responsible for processing personal data is:
Company name: [Company Name]
Address: [Company Address]
Country: Slovenia
Email: [Email Contact]
Website: [website domain]
As the data controller, we determine how and why your personal data is processed.
3. What Personal Data We Collect
Depending on how you use our website, we may collect the following categories of personal data.
Information you provide directly
When placing an order, creating an account, or contacting us:
Name and surname
Billing and shipping address
Email address
Phone number
Company name and VAT number (if applicable)
Payment information (processed by payment providers)
Messages sent through contact forms or email
Order and transaction information
Products purchased
Order history
Payment status
Delivery details
Technical and usage data
When you visit our website automatically:
IP address
Browser type and device information
Pages visited and interaction with the website
Date and time of access
Cookies and tracking data
Marketing preferences
Newsletter subscriptions
Communication preferences
4. How We Use Personal Data
We use personal data for the following purposes:
Order processing
To process and deliver your orders, including:
confirming purchases
processing payments
arranging shipping and delivery
handling returns and warranty claims
Customer communication
To communicate with you regarding:
order confirmations
shipping updates
customer support inquiries
Website functionality
To operate and maintain our website, including:
ensuring website security
improving performance and usability
preventing fraud or abuse
Marketing and communication
If you give consent, we may use your email address to send:
newsletters
promotions
product updates
You can unsubscribe at any time.
Legal obligations
We may process data to comply with legal obligations such as:
accounting regulations
tax requirements
consumer protection laws
5. Legal Basis for Processing (GDPR Article 6)
We process personal data only when there is a lawful basis under Article 6 of the GDPR.
Contract performance
Processing necessary to fulfill an order or provide our services.
Examples:
processing purchases
arranging delivery
Legal obligation
Processing required by law, including accounting and tax regulations.
Legitimate interest
We may process data when necessary for legitimate business interests, such as:
improving our website
preventing fraud
ensuring security
Consent
For certain activities, such as newsletters or non-essential cookies, we rely on your explicit consent.
You may withdraw consent at any time.
6. Data Retention
We retain personal data only for as long as necessary.
Typical retention periods include:
Order and invoice data: up to 10 years (tax and accounting regulations)
Customer support communication: up to 3 years
Marketing data: until consent is withdrawn
Website analytics data: typically 14–26 months
After the retention period expires, personal data is securely deleted or anonymized.
7. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to improve functionality and user experience.
Cookies may include:
Essential cookies
Necessary for the website to function properly.
Examples:
shopping cart functionality
security features
Analytics cookies
Help us understand how visitors use our website so we can improve performance.
Marketing cookies
Used to display relevant advertising or measure marketing campaigns.
Where required by law, cookies are used only with your consent.
You can manage cookie preferences through your browser settings or our cookie banner.
8. Sharing Data with Third Parties
We may share personal data with trusted third parties when necessary to provide our services.
Examples include:
Payment processors
To securely process payments.
Delivery and logistics providers
To deliver orders to customers.
IT and hosting providers
To operate and maintain our website infrastructure.
Accounting and legal services
To comply with regulatory obligations.
All service providers process data only on our instructions and are required to protect your data under GDPR-compliant agreements.
We do not sell personal data to third parties.
9. International Data Transfers
In some cases, personal data may be transferred outside the European Economic Area (EEA).
When this occurs, we ensure that appropriate safeguards are in place, such as:
European Commission adequacy decisions
Standard Contractual Clauses (SCCs) approved by the EU
equivalent data protection guarantees
These safeguards ensure your personal data remains protected.
10. Data Security
We implement appropriate technical and organizational measures to protect personal data, including:
encrypted connections (HTTPS)
secure hosting infrastructure
restricted access to data
internal security procedures
regular system monitoring
While we strive to protect personal data, no system can guarantee absolute security.
11. User Rights under GDPR
Under the GDPR, you have several rights regarding your personal data.
Right of access
You may request confirmation of whether we process your personal data and obtain a copy.
Right to rectification
You can request correction of inaccurate or incomplete personal data.
Right to erasure
You may request deletion of personal data in certain circumstances.
Right to restriction of processing
You may request that we limit the processing of your personal data.
Right to data portability
You may request your personal data in a structured, machine-readable format.
Right to object
You may object to processing based on legitimate interest or direct marketing.
12. How Users Can Exercise Their Rights
If you wish to exercise any of your GDPR rights, please contact us.
Submit your request to:
Email: [Email Contact]
To protect your privacy, we may ask you to verify your identity before processing your request.
We will respond to requests within one month, as required by GDPR.
13. Complaint to Supervisory Authority
If you believe that your personal data is not being processed in accordance with applicable laws, you have the right to lodge a complaint with the supervisory authority.
In Slovenia, the competent authority is:
Information Commissioner of the Republic of Slovenia
Address:
Dunajska cesta 22
1000 Ljubljana
Slovenia
Website: https://www.ip-rs.si
14. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
legal changes
improvements to our services
updates to data processing practices
The latest version will always be published on [website domain].
We recommend reviewing this page periodically.
15. Contact Information
If you have any questions regarding this Privacy Policy or how your personal data is processed, please contact us.
Company: [Company Name]
Address: [Company Address]
Email: [Email Contact]
Website: [website domain]