Skip to content

Privacy Policy

Last updated:

1. Personal data controller

The personal data controller is Gastpro d.o.o., Dragarjeva ulica 9, Rodica, 1230 Domžale, Slovenia.

For questions regarding the protection of personal data, you can contact us at the email address info@stow.si or by mail at the address of the controller.

This privacy policy explains which personal data we process, for what purposes, on what legal basis, how long we store it and what rights you have as an individual.

2. What personal data do we process?

We process the personal data that you provide to us when using the online store, placing an order, creating a user account, subscribing to the newsletter, sending an inquiry or otherwise communicating with us.

Depending on how you use the website, we may process the following categories of data:

  • identification data, such as first name, last name and company name;
  • contact data, such as email address, telephone number, billing address and delivery address;
  • order data, such as selected products, quantities, order value, payment method, delivery method, order status and billing information;
  • user account data, such as username, email address, order history and account settings;
  • data from contact forms and messages you send to us;
  • data for newsletter subscription, in particular email address and login/unlogin information;
  • technical data such as IP address, device, browser, log, session, cookies and website usage data.

We do not store payment card information on our servers. Payments are processed by selected payment service providers.

3. Purposes and legal bases of processing

We only process personal data when we have an appropriate legal basis for this.

  • For the acceptance, processing, payment, delivery and fulfillment of an order, we process the data for the performance of the contract or for the implementation of measures prior to the conclusion of the contract.
  • For the issuance of invoices, accounting documentation, tax records and legally required retention, we process the data in order to comply with legal obligations.
  • For responding to inquiries, communicating with customers, resolving complaints and providing support, we process the data for the performance of the contract, measures prior to the conclusion of the contract or our legitimate interest in effective communication and handling of claims.
  • For sending e-newsletters and marketing messages, we process the data on the basis of your consent, where required, or on another valid legal basis, where permitted by law.
  • For website security, preventing abuse, correcting technical errors and maintaining log records, we process the data based on legitimate interest for the safe and stable operation of the website.
  • For the possible exercise, exercise or defense of legal claims, we process data based on legitimate interest.

4. Orders and user account

When placing an order, we process the data necessary to complete the purchase: name and surname, billing address, delivery address, e-mail address, telephone number, information about the selected products, payment method, delivery method and other data that you enter during the purchase completion.

If you create a user account, we store data that allows you to log in, view orders and manage your account. Passwords are stored in a protected format.

We use order data to confirm the order, notify you about the status, ship products, issue an invoice, handle returns, complaints and warranty claims.

5. Payments

Payments are processed through external payment service providers. We provide or enable payment providers to process the data necessary for making payments, preventing abuse, refunds and resolving payment disputes.

We do not store payment card data on our servers. The processing of card and other electronic payments is also subject to the terms and conditions and privacy policies of the individual payment service provider.

6. Delivery

To deliver the ordered products, we provide the delivery service with the data necessary for the delivery: name and surname, delivery address, telephone number, e-mail address and data necessary for tracking and notification of the shipment.

If you choose personal pickup, we use the data to prepare the order and notify you of the pickup.

7. Contact forms and communication

If you contact us via the contact form, email, telephone or other communication channels, we process the data you provide in the message and the contact details necessary for a response.

We store the data from the communication for as long as necessary to handle your question, inquiry, complaint or other request, or longer if necessary to prove the communication or defend legal claims.

8. Newsletters and MailerLite

If you subscribe to our newsletter, we process your email address and registration information. We use the MailerLite service to send you our newsletters, which acts as a contractual processor of personal data.

You can unsubscribe from receiving our newsletters at any time by clicking the unsubscribe link in the message you receive or by writing to us at info@stow.si. Unsubscribing does not affect the lawfulness of the processing that took place before you unsubscribed.

9. Cookies and technical data

The website uses cookies and similar technologies that are necessary for the operation of the website, the operation of the shopping cart, the completion of the purchase, logging into your user account, security, saving settings and basic technical operation.

Some cookies are necessary for the operation of the online store and cannot be disabled without affecting the operation of the website. We only use any analytical or marketing cookies when there is an appropriate legal basis or consent.

Technical data such as IP address, browser data, device data and log records may be processed for security, troubleshooting, prevention of abuse and ensuring stable operation of the website.

10. To whom we share personal data

We share personal data only when necessary for the purposes described in this privacy policy or when required by law.

Recipients or processors of personal data may include:

  • hosting, website maintenance, security and technical support providers;
  • payment service providers;
  • delivery services and logistics partners;
  • accounting services and other professional advisors;
  • email service providers and business communications;
  • newsletter providers;
  • government authorities, courts or other entitled persons when required by law or necessary to enforce legal claims.

11. Data Transfers to Third Countries

Some service providers may process personal data outside the European Economic Area. In such cases, we ensure that the transfer is based on appropriate safeguards, such as standard contractual clauses, adequacy decisions or other mechanisms permitted by applicable law.

12. Retention of personal data

We only store personal data for as long as necessary for the purposes for which it was collected, or for as long as required by legal deadlines.

  • We store data on orders, invoices and accounting documents in accordance with tax and accounting regulations, as a rule for 10 years.
  • We store user account data until the account is deleted or as long as necessary for orders, legal obligations or legal claims.
  • We store data from contact forms and communications for as long as necessary to handle the matter, or longer if necessary to prove communication or legal claims.
  • We store data for e-newsletters until consent is revoked or unsubscribed.
  • We store technical logs for a limited time necessary for security, error correction and prevention of abuse.

13. Your rights

In accordance with applicable law, you have the right to request:

  • access to personal data that we process about you;
  • correction of inaccurate or incomplete data;
  • erasure of personal data where the conditions for this are met;
  • restriction of processing;
  • data portability;
  • objection to processing where processing is based on legitimate interest;
  • withdrawal of consent where processing is based on consent.

You can send your request to info@stow.si. For security reasons, we may ask you for additional information to confirm your identity before processing your request.

If you believe that we are processing your personal data unlawfully, you have the right to file a complaint with the Information Commissioner of the Republic of Slovenia.

14. Personal data security

We protect personal data with appropriate technical and organizational measures designed to prevent unauthorized access, loss, destruction, alteration or disclosure of data.

Only persons who need the data to perform their work and contractual processors who are committed to protecting personal data have access to personal data.

15. Changes to the Privacy Policy

We may change this Privacy Policy from time to time if our services, the way we process personal data, or applicable law change. The current version is always published on this website.

This site is registered on wpml.org as a development site. Switch to a production site key to remove this banner.