Privacy policy

Translation of the Slovenian original; not legally reviewed. Slovenian original

Data controller

S & K COMPANY d.o.o.
S & K COMPANY družba za trgovino, posredništvo, proizvodnjo, gostinstvo in druge storitve, d.o.o.
Ulica Marjana Nemca 9A, 2204 Miklavž na Dravskem polju
Company registration number: 5678595000 · VAT ID: SI30254493
Email: [email protected] · Phone: 02 629 02 20 (Monday to Friday, 9.00–14.00)

Data protection officer: MD svetovanje d.o.o., Dr Miha Dvojmoč, Proletarska cesta 4, 1000 Ljubljana · Email: [email protected] · Phone: 031 692 524

General information

We are committed to protecting the confidentiality of your personal data and your privacy. We use personal data solely for the purposes described on this page and take the necessary steps to protect it from breaches and misuse.

What data we process and why

Product enquiries and Srebrni vitalni test requests

Submit an enquiry about products in your basket using the website form. Enter your full name, email address and, optionally, phone number and a note. The products you are interested in are included with the enquiry. Before submitting, you must consent to the processing of personal data for this purpose. The enquiry is stored on our account server (racun.sk-company.si), which we operate ourselves on our own computer, and emailed to [email protected]; a confirmation copy is sent to your email address.

Request a Srebrni vitalni test through the website form. Enter your full name, phone number and, optionally, email address. Before submitting, you must consent to the processing of personal data for this purpose. Your request is stored on our account server (racun.sk-company.si), which we operate ourselves on our own computer, and emailed to [email protected]; if you provide an email address, you receive a confirmation there. For messages or enquiries sent by email, or phone calls, we process the information you provide: full name, phone number, email address and message content.

Purpose: responding to enquiries, preparing quotations and arranging appointments. Legal basis: steps taken at your request before entering into a contract and performance of a contract (Article 6(1)(b) GDPR). We retain the data for as long as needed to communicate with you; if a purchase follows, we retain it for the period required by law.

Online purchases

When online payment is available and you choose it, we send the selected products and quantities to our server. For card, Apple Pay or Google Pay payments, you then enter your full name, email address, phone number, delivery address and payment details on Stripe’s payment page. For PayPal, you sign in to your PayPal account and confirm payment and the delivery address there. We neither see nor store your card details or PayPal login details; the chosen provider processes them. We receive the information needed to fulfil the order (name, email, phone, delivery address, amount and payment status) from the provider and store it with the order. We email you an order confirmation.

Purpose: order fulfilment, delivery, order updates and legal obligations (such as accounting). Legal basis: performance of a contract (Article 6(1)(b) GDPR) and legal obligations (point (c)). We retain order data for as long as necessary to fulfil the order and exercise contractual rights (withdrawal, defects, warranty); invoices and related information are retained for the periods required by accounting and tax law.

User account

For your account, we process your first name, surname, email address and password (stored only as a hash, never in readable form), plus the dates and versions of your consents. If you choose Google sign-in, we receive your name and email address from Google. Purpose: managing your account. Legal basis: the contract or your request. You may delete your account at any time on My account or by writing to [email protected]; we then delete the account data.

We operate the account and order server ourselves. Emails (order confirmations and registrations) are sent through Microsoft 365.

Newsletter

We send newsletters about current events and offers only if you expressly subscribe and confirm your email address. We retain data for this purpose until consent is withdrawn; after unsubscribing we delete it unless needed for another purpose you agreed to or on another legal basis. You may withdraw consent at any time on My account, via the unsubscribe link in a received email or by writing to [email protected].

Website visits

We do not use advertising cookies or social media plug-ins. Fonts, images and scripts load from our server, not third parties, except for the analytics script described below. What the website stores in your browser is described on the Cookies.

Website traffic passes through Cloudflare’s network, which may process technical visit data (IP address, time and requested page) for security and operation.

We use Cloudflare Web Analytics (Cloudflare, Inc.) to measure visits. It uses no cookies and collects only aggregate, anonymous data on page views and website performance.

Disclosure of data

We do not disclose your personal data to third parties without your express permission, except:

Contracted processors and recipients we work with:

Your rights

You may at any time request access to, rectification or erasure of your personal data, restriction of processing or data portability, and object to processing. You may withdraw consent at any time; withdrawal does not affect the lawfulness of earlier processing. Send your request to [email protected].

If you believe we process your data unlawfully, you may lodge a complaint with the Information Commissioner of the Republic of Slovenia (www.ip-rs.si).

Data security

Everyone with access to personal data within our organisation is aware of their duty to protect it and must continue to observe that duty after their work with us ends.

Changes

We may amend this text if legislation or website operations change. The current version is always published on this page.

Read also: Cookies · Terms and conditions