Privacy & Cookies

Controller and contact

Information, purposes and legal bases

We process the name, billing/delivery address, contact details, ordered products and transaction/order status needed to answer purchase enquiries, enter into and fulfil a contract (GDPR Article 6(1)(b)). Accounting and legally required records are processed to comply with legal obligations (6(1)(c)). Necessary security controls, proportionate abuse prevention and legal claims rely on legitimate interests (6(1)(f)), subject to your rights. Checkout attempt limiting uses a keyed hash derived from the connecting IP address and a short time window; it does not use advertising attribution.

An account is optional where guest checkout is available. Information marked required is needed to complete the requested service; without it we may be unable to fulfil your order. We do not require consent to essential order processing. Optional marketing or tracking is not enabled here.

Recipients and international transfers

Order fulfilment may involve hosting and email providers, the selected payment provider, delivery carriers, accounting support and public authorities where legally required. Access is limited to what their role requires. A payment provider may act as processor for some activities and an independent controller for others; the enabled provider’s notice applies to its own processing. Never email full card details or security codes.

Retention

Order records, accounts, enquiries and withdrawal notices are retained for the period needed for their purpose and applicable legal obligations. Withdrawal notices are stored privately to document receipt and resolve your request. Copies may also exist in sent mail and backups. Contact us for information about the records relating to you and to exercise your data rights.

Your rights

Subject to legal conditions you may request access, rectification, erasure, restriction, portability, or object to legitimate-interest processing; you may always object to direct marketing. Consent can be withdrawn without affecting earlier lawful processing. Contact the controller above. We normally respond within one month; any lawful extension and its reason will be communicated. We may request proportionate identity verification. You may complain to the Slovenian Information Commissioner or your competent supervisory authority.

Informacijski pooblaščenec

This website does not make solely automated decisions with legal or similarly significant effects.

Cookies and browser storage

Only storage necessary for the requested basket or account function is enabled here. Sourcebuster/order attribution is disabled; old sbjs_* cookies are removed when present. Optional analytics and advertising tracking are not enabled. Clearing necessary cookies may reset your basket or login.

For information about storage associated with a payment method available at checkout, consult the relevant payment provider’s privacy notice.