Privacy Policy

Controller

The controller responsible for processing your personal data is Monika Strahinič, Moniq Cozy, Brezovica pri Metliki 18, 8330 Metlika, Slovenia. Email: [email protected].

What data we process and why

• Orders: name, email address, phone number, billing and delivery address, ordered products, order amount and payment status. We use this data to process your order, deliver the goods and handle returns and complaints. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Enquiries: when you contact us by email or phone, we use your details to answer your enquiry. Legal basis: steps prior to a contract or our legitimate interest in answering enquiries (Art. 6(1)(b) and (f) GDPR).
• Withdrawal notices: data you enter in the withdrawal form is used to process your withdrawal. Legal basis: legal obligation and performance of a contract (Art. 6(1)(c) and (b) GDPR).
• Website operation and security: technical data such as IP address, browser type and time of access are processed to run the website securely. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

We do not use your data for advertising, we do not send marketing emails, and we do not use analytics or tracking tools.

Recipients

We share personal data only to the extent necessary with:

• our website hosting provider, which stores the website and its database;
• our email provider, used to send order confirmations and answer messages;
• a payment provider, if enabled at checkout (Stripe Payments Europe, Limited, Ireland, if Stripe is selected). Stripe also acts as an independent controller for certain purposes such as fraud prevention; see stripe.com/privacy;
• the delivery service that delivers your order (name, address, phone number);
• public authorities where we are legally required to disclose data.

Transfers outside the EU/EEA

Some service providers, such as Stripe, may process data outside the European Economic Area. In such cases transfers take place on the basis of an adequacy decision of the European Commission or EU Standard Contractual Clauses.

How long we keep data

Order data is kept for as long as necessary to fulfil the contract and for the periods required by law, generally up to 10 years. Data relating to complaints and warranty claims is kept until the end of the warranty period and any related proceedings. Enquiries that do not lead to an order are deleted at the latest 12 months after the enquiry has been answered. If you held an account before guest checkout was introduced, you may request erasure of its data by contacting us; legally required order records are retained as described above.

Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. To exercise your rights, contact [email protected]. We respond within one month.

You also have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec, Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si).

Required data

The data marked as required at checkout is needed to conclude and fulfil the contract. Without it we cannot process your order. We do not make decisions based solely on automated processing that have legal effects on you.

Cookies

Information about cookies is available in our Cookie Policy.

Last updated: 2 October 2026

Withdrawal records and retention review

Access and erasure requests also cover notices submitted using the withdrawal form and related email correspondence. We assess any legal retention requirement or unresolved claim before erasure. Information retained for a legal reason is restricted to that purpose; we explain the reason when responding.