Privacy Policy

Data controller:
MIZARSTVO BIOLES, predelava lesa, d.o.o.
Dobrina 63, 2287 Žetale, Slovenia
Registration number: 9723234000
VAT ID: SI61268666
Phone: +386 31 240 846
E-mail: info@kupi-les.si

The controller has not appointed a Data Protection Officer (DPO), as the processing of personal data does not involve regular and systematic large-scale monitoring of individuals or the processing of special categories of personal data. For any questions regarding the processing of your personal data, please contact us using the details above.

What data we process and why

When you purchase in the online shop (as a guest or registered user) we process: first and last name, delivery and billing address, e-mail address, phone number, order details and the archive of communication with you. The legal basis is the contract (fulfilment of the order); for the retention of invoices it is a legal obligation under tax regulations. We keep order and invoice data for 10 years, as required by tax law.

When you enquire via the contact form or e-mail we process the data you provide (name, contact details, content of the message) on the basis of our legitimate interest in responding to your enquiry. We keep it until the communication is concluded or for as long as necessary in view of possible claims.

When you visit the website the server automatically records log data (IP address, time of access, browser type, pages visited). The legal basis is our legitimate interest in the security and operation of the site. Logs are kept for a maximum of 30 days.

Recipients of data (processors)

We share your data only with those who need it to fulfil your order: the website hosting provider, delivery services (e.g. GLS), the payment provider Stripe for card payments (we never see or store your card details) and our accounting service for tax compliance. All processors are contractually bound to protect data in accordance with the General Data Protection Regulation (GDPR).

Transfers to third countries

When using the services of Stripe, Google and Meta, data may be transferred to the USA. These providers participate in the EU–US Data Privacy Framework or use standard contractual clauses ensuring an adequate level of protection.

Analytics and advertising

With your consent (via the cookie banner) we use Google Analytics to measure traffic and Meta Pixel to measure advertising performance. Without your consent these cookies are not set. You can withdraw your consent at any time in the cookie settings at the bottom of the page.

Cookies

Essential cookies (shopping cart, login, cookie preferences) are always set because they are necessary for the shop to work. Analytics and advertising cookies are set only with your consent:

Essential: woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session (session – shopping cart); cookielawinfo/cookieyes (12 months – stores your cookie choice); Cloudflare cookies (security).
Analytics (with consent): _ga (2 years), _gid (1 day) – Google Analytics.
Advertising (with consent): _fbp (3 months) – Meta Pixel.

Your rights

You may at any time request access to your personal data, its rectification, erasure or restriction of processing, object to processing, and request data portability. Send your request in writing to the controller’s address or to info@kupi-les.si. We will reply without undue delay, at the latest within one month. If you believe we process your data unlawfully, you have the right to lodge a complaint with the Slovenian supervisory authority, the Information Commissioner (Informacijski pooblaščenec, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si), or with the supervisory authority of your country of residence.

Changes

We may amend this privacy policy if our processing activities or the legislation change. The version published on this page applies.

Last updated: 25 August 2026