Privacy policy

1. Controller and scope

This policy explains personal data processing on https://verdamare.si, in the catalogue, registration, customer account, inquiries, orders, payments, delivery and support. The controller is identified below.

Contact for privacy questions and rights requests: sale@verdamare.si.

2. Processing principles

We process data lawfully, fairly and transparently; for specified purposes; in the minimum necessary amount; accurately; only for as long as required; and with appropriate organisational and technical security. Access is limited to people who need the data for their work.

3. Data we collect

• identity and contact details such as name, e-mail and telephone;
• account data, a hashed password, selected language and settings;
• addresses, coordinates of a selected address and delivery details;
• company data, registration and tax identifiers, contacts, logo and documents uploaded by the user;
• basket contents, orders, invoices, payment status, complaints, returns and communications;
• interests, marketing choices and social-profile links when voluntarily supplied;
• technical and security data such as IP address, time, user agent, session identifiers, logs and consent records;
• data from public business registers or suppliers where needed to verify a business or fulfil an order.

4. Purposes and legal bases

We rely on the following Article 6 GDPR bases:

• contract and pre-contractual steps for accounts, quotations, baskets, orders, payments, delivery, returns, support and B2B minimum quantities;
• legal obligation for accounting, tax, consumer, safety and other mandatory records;
• legitimate interests in website security, fraud prevention, proof of transactions, debt recovery, customer service and basic business analysis, where those interests are not overridden by the individual’s rights;
• consent for optional analytics or marketing technologies, marketing communications and the social-publication programme. Consent can be withdrawn at any time without affecting prior lawful processing.

5. Registration and account

Fields marked as mandatory are required to create an account. Businesses can store multiple delivery locations and responsible contacts. Material profile changes may require e-mail confirmation. Account data is used for login, orders, documents, messages and preferences.

6. Orders, payments and fraud prevention

At checkout we revalidate price, stock, quantity, delivery and the permitted payment method. Card data is processed by the payment provider; Verdamare does not store the full card number or security code. We receive a transaction identifier, status, amount and limited data needed for reconciliation and abuse prevention. Where payment is deferred pending stock approval, a payment link is sent only after approval.

7. Delivery, maps and address data

We use the address and coordinates to select a delivery zone, calculate distance and price, prepare labels and pass necessary data to a carrier. External geocoding may transmit address text and technical request data to the configured provider. Where possible we use a local Slovenian address database and limit external requests.

8. Messages, inquiries and social networks

Messages between a customer and administrator may be stored in the account and delivered by e-mail. Telephone and social profiles are optional unless required for the selected service. A social profile is used to verify a publication and possible future benefit only when the user supplies it and gives separate consent.

9. Recipients and processors

Where necessary, data may be received by hosting, maintenance, e-mail, payment, accounting, delivery, mapping, anti-abuse and professional-advisory providers. We do not sell personal data. Configured active recipients are listed below; inactive services are not displayed.

10. Transfers outside the EEA

If a provider processes data outside the European Economic Area, we use a valid Chapter V GDPR mechanism such as an adequacy decision, standard contractual clauses and, where needed, supplementary safeguards. Provider details should be verified in the relevant contract and processor register.

11. Retention

We retain data for the purpose, statutory periods and the establishment, exercise or defence of claims. Configured periods are:

A period may be extended for an open complaint, dispute, tax audit or legal hold. At expiry, data is deleted, anonymised or access-restricted.

12. Security and incidents

Measures include access controls, encrypted connections, secure password storage, separated private folders, backups, rate limits, logs and updates. No system is entirely risk-free. We assess personal-data breaches and, where required, notify the Slovenian Information Commissioner and affected individuals within GDPR time limits.

13. Your rights

Subject to GDPR conditions, you may request access, rectification, erasure, restriction, portability, object to legitimate-interest processing, object to direct marketing, and withdraw consent. Send requests to sale@verdamare.si. We may reasonably verify identity. We respond within the statutory period, which may be extended for complex requests in accordance with the GDPR.

14. Supervisory complaint

You may complain to the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, telephone +386 1 230 97 30, e-mail gp.ip@ip-rs.si. Judicial remedies remain available.

15. Cookies and similar technologies

Details of cookies, local storage, categories and changing a choice are set out in the Cookie policy. Optional technologies controlled by this module are enabled only after a valid choice. Scripts emitted by other plugins must be separately brought under consent control.

16. Children and automated decisions

The shop is not directed at children who cannot independently enter a contract. We do not knowingly collect children’s data for marketing. We do not use solely automated decisions producing legal or similarly significant effects; automated stock, pricing, risk or delivery checks may support a decision, but human review can be requested.

17. Changes and contact

We may update this policy for service, provider or legal changes. The date and version appear above. Material changes will be communicated where appropriate on the site or by e-mail. Contact sale@verdamare.si.