We take your privacy very seriously. This Privacy Policy describes how your personal information is collected, processed, and stored when you visit or make a purchase from our Site.

We collect, process, and store all personal data in strict compliance with the EU General Data Protection Regulation (GDPR), the Slovenian Personal Data Protection Act (ZVOP-2), and the Consumer Protection Act (ZVPot-1).

1. Personal Data Controller

The controller of your personal data is:

• Business Name: Založništvo, Neža Štremfelj s.p.

• Registered Address: Cirilova ulica 5, 4000 Kranj, Slovenia

• Email Address:shop@nezastremfelj.com

2. Types of Personal Data We Process

To conduct business and process your orders, we collect the following personal data:

• Name and surname

• Delivery address and billing address (if different)

• Email address

• Telephone number (if provided or required for delivery notifications)

• Order details, including ordered products, quantities, prices, purchase history, and delivery details

• Payment-related data
  

Payment Security: We do not collect or store credit card numbers on our servers. All card payments are processed securely in an encrypted environment by our secure third-party payment partner Stripe, and PayPal payments are processed by PayPal in accordance with their respective privacy policies.

3. Legal Basis and Purpose of Processing

We process your personal data based on the following legal grounds:

• Performance of a Contract: The processing of your data is necessary to fulfill your order, prepare the products, dispatch shipments, send invoices, and communicate regarding any changes or issues with your order.

• Legal Obligation: In accordance with Slovenian tax legislation and accounting standards, transaction details and invoices must be retained for 10 years for tax auditing and fiscal bookkeeping purposes.

4. Data Retention Period

We store your personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by Slovenian statutory retention periods (i.e., invoice records are retained for 10 years). Customer communication and order records are kept for as long as necessary to enforce or defend potential legal claims.

5. Sharing Data with Contractual Processors

We share personal data with trusted third-party service providers who are essential for the operation of our online store and delivery fulfillment:

• Delivery Service (Pošta Slovenije): We share your name, delivery address, and phone number solely for shipping and shipment notification tracking.

• E-Commerce Platform (Squarespace): Provides our website hosting, store database, and secure checkout system.

• Payment Gateways (Stripe and PayPal): For secure, encrypted transaction processing.

• Invoicing System (Čebelica.biz): Used for legal fiscal invoice generation, recording, and storage.

We will never sell, lease, or disclose your personal data to unauthorized third parties or marketing agencies.

6. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

• The right to view and access your personal data.

• The right to correct any inaccurate or incomplete data.

• The right to erasure ("the right to be forgotten"), provided there is no longer a statutory or legal obligation for us to retain it.

• The right to restrict or object to the processing of your data.

• The right to data portability.

• The right to withdraw your consent at any time (where processing is based on consent).

If you believe your personal data is being processed in violation of applicable regulations, you have the right to file a complaint with the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec RS).

To exercise any of your rights, please submit a written request to our email: shop@nezastremfelj.com

7. Cookies

Our website uses cookies and similar tracking technologies to ensure safe, smooth, and functional store operations.

• Essential Cookies: These cookies are necessary for core functions, such as shopping cart persistence and secure login, and do not require user consent.

• Analytical Functions: We use the built-in analytical and performance tools provided by Squarespace to monitor traffic patterns, page views, and referral sources, allowing us to understand how visitors interact with our shop. Non-essential cookies are restricted until you provide consent.

• Multilingual Support (Weglot): We use Weglot to display translations (e.g., Slovenian checkout and store pages). Weglot cookies are used to remember your language preferences and ensure functional translation rendering.

Upon your first visit, you can accept all cookies, reject non-essential cookies, or manage your preferences via our cookie consent banner. You can also adjust cookie settings in your web browser at any time.