Privacy Policy

The data controller in accordance with this Privacy Policy is:

Suzana Oprešnik s.p.
Grablovičeva ulica 20
1000 Ljubljana, Slovenija

Registered business name: Delovna terapija, Suzana Oprešnik s.p.
Responsible person: Suzana Oprešnik

Contact email: [email protected]
Phone: +386 31 610 440

Only personal data necessary for the operation of the online store, order processing, and lawful business activities is processed.

This includes in particular:

• first and last name,
• email address,
• billing and shipping address,
• telephone number,
• order and payment details,
• data voluntarily provided by the user via forms on the website,
• technical data (e.g. IP address, browser type, device type),
• data on website usage (page visits, time of visit, clicks).

The website does not allow the creation of user accounts.

Personal data is processed exclusively for the following purposes:

a) Online sales processing (order placement, order processing, payments, delivery of goods, and communication related to the order)

Legal basis: processing necessary for the performance of a contract (6(1)b) GDPR).

b) Fulfilment of legal obligations(storage of invoices and business documentation)

Legal basis: compliance with a legal obligation (6(1)c) GDPR).

c) Email notifications (in the future) (Users may voluntarily subscribe to receive notifications about news and offers (e.g. via MailPoet). Subscription will be possible only with explicit consent, and users will be able to unsubscribe at any time.)

Legal basis: consent of the individual (6(1)a) GDPR).

d) Website analytics (Anonymous statistical data is used to improve the performance of the website.)

Legal basis: legitimate interest (6(1)f) GDPR) or consent, where required.

Data related to orders and invoices is stored in accordance with applicable legislation (for at least 10 years).

Data collected on the basis of consent (e.g. newsletters) is stored until the consent is withdrawn.

After the purpose of processing ceases, personal data is deleted or anonymised.

Personal data may also be processed by contractual processors that enable the operation of the online store, such as:

• hosting providers,
• payment service providers (e.g. Stripe, PayPal),
• email service providers,
• analytics service providers.

Some providers may have servers located in the EU or the USA. Data transfers are carried out in accordance with applicable data protection legislation.

Individuals have the right to:

• access their personal data,
• rectification of inaccurate data,
• erasure of data, where permitted by law,
• restriction of processing,
• data portability,
• objection to processing.

Requests may be sent to: [email protected]. Requests will be answered within one month.

The website uses cookies. Detailed information about the use of cookies is available in the Cookie Policy, accessible on the website.

This Privacy Policy is valid from 29 January 2026 onwards.