Privacy Policy

PRIVACY POLICY

Date of last update: 20. 9. 2026

1. Data Controller

The controller of the personal data processed in connection with the Polzela online store is:

SIREKAR Socks, Ltd.
Cvetlična Street 3
3313 Polzela
Slovenia

Email: online@polzela.com
Website: www.polzela.com

We take the protection of personal data seriously. We process personal data in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the Personal Data Protection Act (ZVOP-2), and other applicable laws.

This policy explains what personal data we collect, for what purposes we use it, on what legal basis we process it, to whom we may disclose it, how long we retain it, and what rights you have regarding the processing of your personal data.

2. What Personal Data Do We Collect?

Depending on how you use the website and online store, we may process the following personal data in particular:

  • first and last name;
  • shipping address and billing address;
  • email address;
  • phone number;
  • information about the order and the products purchased;
  • the information required to process and record the payment;
  • delivery information;
  • information about returns, complaints, and communication with us;
  • your user account information, if you create one;
  • information regarding newsletter subscriptions and consents provided;
  • IP address, information about the device, browser, and website usage;
  • data collected through cookies and similar technologies, provided that you have given your consent to their use, where required.

We generally collect data directly from you when you place an order, create a user account, subscribe to our newsletter, contact us, or use the website.

3. Purpose and Legal Basis for Processing

3.1 Order Fulfillment and Contract Execution

We process personal data for the following purposes:

  • receipt and processing of the order;
  • order confirmation;
  • processing the payment;
  • preparation and delivery of goods;
  • issuing an invoice;
  • communication regarding the order;
  • processing returns, contract cancellations, and complaints.

The legal basis for such processing is the performance of a contract or the implementation of measures at your request prior to entering into a contract.

The information required to process your order is mandatory. If you do not provide it, we will not be able to process your order properly.

3.2 Payments

When making electronic payments, the information required to complete the transaction is transmitted to the relevant payment service provider.

SIREKAR nogavice d.o.o. does not store your full payment card information.

The payment service provider processes data in accordance with its terms and conditions and privacy policy.

3.3 Delivery

To facilitate delivery, we provide the information necessary for delivering the order to Pošta Slovenije or its contractual partners.

Only the information necessary to complete the delivery is provided, such as first and last name, shipping address, phone number, email address, and information needed to identify the shipment.

3.4 Legal Obligations

We process and store certain personal data to comply with legal obligations, particularly those related to accounting, taxes, consumer protection, and the documentation of business transactions.

In these cases, the legal basis is the controller’s compliance with a legal obligation.

3.5 Asserting and Defending Legal Claims

When necessary, we may store and process certain data for the purpose of asserting, exercising, or defending legal claims.

The legal basis is our legitimate interest in protecting the rights and legal interests of the company.

4. E-newsletters and Direct Marketing

If you subscribe to our newsletter, we may use your email address and other information you provided during registration to send you information about Polzela products, offers, discounts, news, and other promotional content.

When consent is required for such communication, the processing is based on your consent.

You can unsubscribe from our e-newsletter at any time by clicking the unsubscribe link in each message or by writing to us at online@polzela.com.

The withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.

We use Mailchimp to send and manage our e-newsletters. As part of our use of this service, certain personal data—primarily email addresses and information about interactions with the e-newsletters—may be processed through Mailchimp’s infrastructure.

5. Analytics and Advertising

If you have given your consent to the use of analytics or advertising cookies, we may use the following tools:

Google Analytics

We use Google Analytics to analyze website usage—for example, to determine the number of visitors, the pages visited, the sources of traffic, and how the online store is used.

This data helps us understand how the website is used and improve its performance and user experience.

Google Ads

We can use Google Ads to measure the effectiveness of advertising campaigns, track conversions, and—when you have given your consent—to display or customize ads.

Meta Pixel

Meta Pixel can be used to measure the effectiveness of advertising on Meta platforms, analyze visitor behavior on the website, and, when you have given your consent, to personalize advertising.

When using these technologies, data regarding the device and browser, the IP address, information about visits to the website, content viewed, and actions taken or purchases made may be processed.

We use analytics and advertising technologies that are not strictly necessary for the website to function based on your consent.

You can change your cookie settings through the cookie settings on our website.

More detailed information about the use of cookies is available in our Cookie Policy.

6. To Whom We Disclose Personal Information

We do not sell your personal information.

When necessary to provide our services or comply with legal obligations, we may disclose data to or grant access to the following categories of recipients:

  • providers of web hosting and technical maintenance for online stores;
  • IT service providers;
  • payment service providers;
  • delivery and logistics services;
  • providers of accounting and business solutions;
  • Mailchimp for managing newsletters;
  • Google, in connection with analytics and advertising services, when you have provided the necessary consent;
  • Data related to advertising and analytics services, when you have provided the necessary consent;
  • to government authorities and other authorized persons, when required by law.

We provide service providers only with the information necessary to perform a specific service.

7. Transfer of Data to Third Countries

Some of the service providers we use, particularly those that provide web analytics, advertising, and email marketing services, may be based outside the European Economic Area (EEA) or use infrastructure located outside the EEA.

In such cases, personal data is transferred only if there is an appropriate legal basis and the safeguards provided for by the GDPR, such as a European Commission adequacy decision, applicable standard contractual clauses, or other appropriate safeguards.

8. Retention of Personal Data

We retain personal data only for as long as necessary for the purpose for which it was collected, or for as long as required by applicable law.

We retain data on orders, invoices, and business transactions for the periods specified by tax, accounting, and other applicable regulations.

As a general rule, we process data based on consent until such consent is withdrawn or until the data is no longer necessary for the purpose for which consent was given, unless there is another legal basis for continued retention.

We may retain data related to complaints, returns, and any legal claims until the expiration of the applicable statutory or statute of limitations periods.

Once the retention period has expired, we delete, anonymize, or otherwise appropriately protect the data, unless the law requires that it be retained further.

9. Cookies

This website uses strictly necessary cookies and, depending on your choices, may also use analytics and advertising cookies or similar technologies.

Essential cookies enable the basic functionality of the online store, and consent is not required for their use when the legal conditions are met.

We use analytics and advertising cookies only based on your choice or consent, when required.

Details about individual cookies, their providers, purposes, and duration are provided in the Cookie Policy.

10. Your Rights

In accordance with applicable law, you have the following rights regarding your personal data, provided that the legal conditions are met:

  • the right to access your personal data;
  • to have inaccurate or incomplete information corrected;
  • the right to have personal data erased;
  • until the processing is restricted;
  • the right to object to the processing;
  • data portability;
  • until consent is withdrawn, when processing is based on consent.

If the processing is based on your consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing that took place prior to its withdrawal.

You may submit a request regarding the exercise of your rights to:

online@polzela.com

To protect your personal information, we may ask you for additional information necessary to verify your identity before processing your request.

11. Right to Appeal

If you believe that we are processing your personal data in violation of applicable law, you have the right to file a complaint with the competent supervisory authority:

Information Commissioner of the Republic of Slovenia
Dunajska cesta 22
1000 Ljubljana
Slovenia

Before filing a complaint, you may also contact us directly at online@polzela.comso that we can address your question or request as soon as possible.

12. Personal Data Security

We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

Access to personal data is limited to individuals and service providers who need it to perform their duties or provide services.

Despite the use of appropriate security measures, it is not possible to guarantee complete security when transmitting or storing data over the Internet.

13. Changes to the Privacy Policy

We may update this policy from time to time due to changes in legislation, our services, the way we process personal data, or the technologies we use.

The current version is always posted on the website www.polzela.com.

If the changes are significant, we will notify users of them in an appropriate manner.

Date of last update: 20. 9. 2026