1. Data Controller
The data controller is:
NRR-PROJECT, trgovina in storitve d.o.o.
Podpeč 59
1352 Preserje, Slovenia
Registration Number: 9117717000
VAT Number: SI32330286
E-mail: [email protected]
Telephone: +386 31 47 555 7
2. What Personal Data We Collect
When using the online store, we may process the following personal data:
- first name and surname;
- delivery address and billing address;
- e-mail address;
- telephone number;
- order and purchase information;
- IP address;
- information provided by the user through contact forms, e-mail, or telephone.
If the user creates a user account, we may also process data related to the registration and use of the user account, including the username, password in encrypted form, order history and user account settings.
3. Purpose and Legal Basis for Processing
Order Fulfilment and Contractual Obligations
Legal basis: Article 6(1)(b) GDPR.
We process personal data for:
- order processing;
- delivery of goods;
- issuing invoices;
- communication regarding orders;
- handling complaints, warranty claims and claims relating to a lack of conformity of goods;
- management of the user account.
Compliance with Legal Obligations
Legal basis: Article 6(1)(c) GDPR.
We process data to comply with tax, accounting and other legal obligations.
Legitimate Interest
Legal basis: Article 6(1)(f) GDPR.
We may process data for:
- ensuring website security;
- preventing misuse;
- protecting information systems;
- establishing, exercising or defending legal claims;
- dispute resolution.
Analytics and Advertising
Legal basis: the user's consent in accordance with Article 6(1)(a) GDPR.
Based on consent, we may use analytical and advertising tools such as Google Analytics and Google Ads.
The user may withdraw their consent at any time through the cookie settings available on the website.
4. Disclosure of Personal Data
We do not sell personal data.
We may disclose personal data to contractual data processors where necessary for the provision of our services, in particular to:
- website hosting and IT support providers;
- payment service providers;
- delivery service providers;
- accounting service providers;
- public authorities where required by law.
Contractual data processors process personal data solely to the extent necessary for the provision of their services and in accordance with applicable legislation.
5. Transfer of Data to Third Countries
Some service providers that we use may process personal data outside the European Economic Area.
In such cases, appropriate safeguards are applied in accordance with the GDPR.
6. Cookies
The website uses functional essential, analytical, advertising and other cookies in accordance with the Cookie Policy.
Analytical and advertising cookies are used only based on the user's consent.
More detailed information regarding the use of cookies is available in the Cookie Policy.
7. Data Retention Period
We retain personal data for as long as necessary to fulfil the purpose for which it was collected or as required by applicable legislation.
Accounting and tax documentation is retained for the periods prescribed by applicable legislation.
User account data is retained until the deletion of the user account or until the expiry of the retention periods prescribed by applicable legislation.
8. Rights of the Individual
The individual has the right to:
- access personal data;
- rectification of inaccurate data;
- erasure of data;
- restriction of processing;
- object to processing;
- data portability;
- withdraw consent.
To exercise these rights, the individual may contact us at: [email protected]
9. Right to Lodge a Complaint
If an individual believes that their personal data is being processed in violation of applicable legislation, they may lodge a complaint with:
Information Commissioner of the Republic of Slovenia
Dunajska cesta 22
1000 Ljubljana
Website: www.ip-rs.si
This Privacy Policy is effective from the date of its publication on the website www.e-shop.si.