Kmetija pr' Dragic respects the privacy of website visitors and online shop customers. We process personal data in accordance with applicable personal data protection legislation, including the General Data Protection Regulation (GDPR) and applicable law of the Republic of Slovenia.This Privacy Policy explains what personal data we collect, for what purposes we use it, how we protect it, and what rights you have in relation to it.
The controller of personal data is:
Kmetija pr' Dragic, Vrhunec VIII, Vrbnje 36, 4240 Radovljica, Slovenia
For questions regarding the protection of personal data, you can contact us at the contact email address published on the website.
Depending on how the website and online shop are used, we may collect the following data:
We do not collect more personal data than is necessary for the purpose of processing.
We use your personal data primarily to:
We process personal data on the basis of one or more of the following legal grounds:
Performance of a contract — Processing is necessary to fulfil the order, deliver products, communicate about the order, and fulfil other obligations arising from the contractual relationship.
Legal obligation — We are required to retain certain data for accounting, tax and other legal obligations.
Consent — Where consent is required for a particular purpose, we will process the data on the basis of your freely given consent. You may withdraw your consent at any time.
Legitimate interest — In certain cases, we may process data on the basis of our legitimate interests — for example, to ensure website security, prevent misuse, or improve our services — provided this does not unduly infringe your rights and freedoms.
When placing an order in the online shop, we need the data necessary to fulfil the order, in particular customer data, contact details, and the delivery address.
This data is used to:
Without the data necessary to fulfil the order, the order generally cannot be carried out.
When paying for an order, certain data may be transmitted to the payment service provider or bank, where necessary to carry out the payment transaction.
We generally do not store payment card data ourselves when payment is processed through an external payment service provider.
The processing of data during payment may also be subject to the rules and privacy policies of the individual payment service provider.
To deliver ordered products, we may pass the data necessary for delivery to the chosen courier or postal service provider.
We only pass on the data necessary to successfully carry out the delivery.
If you sign up for our newsletter, or give appropriate consent, we may use your email address to send news, offers, product information, and other promotional content.
You may unsubscribe from promotional communications at any time via the unsubscribe link in an individual message, or by submitting a request to our contact email address.
Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
The website uses cookies and similar technologies.
Cookies are small files that may be stored on your device when you visit the website. We may use them to:
Non-essential cookies are used in accordance with applicable legislation and based on your chosen settings.
More information is available in the Cookie Policy.
To provide the online shop, payments, delivery, communication, analytics, hosting and other functionality, we may use the services of external providers.
As part of their services, these providers may process certain personal data on our behalf, or as independent controllers, depending on the nature of the individual service.
When selecting and using external providers, we strive to ensure an appropriate level of protection for personal data.
We do not sell or rent out personal data to third parties for their own marketing purposes.
We may disclose data to third parties where necessary to:
If the use of certain services results in the transfer of personal data to countries outside the European Economic Area, we will ensure appropriate safeguards where required by applicable legislation.
We retain personal data only for as long as necessary for the purpose for which it was collected, or for as long as required by applicable regulations.
Data related to orders and invoices may also be retained after the end of the business relationship, where required by legal obligations.
Data we process on the basis of consent is retained until the consent is withdrawn, or until the purpose for which consent was given has been fulfilled, unless another legal basis exists for further retention.
We use appropriate technical and organisational measures to protect personal data, aimed at preventing unauthorised access, loss, alteration, disclosure, or other unlawful processing of personal data.
Access to personal data is limited to persons and service providers who need it to carry out their duties or provide their services.
In accordance with applicable legislation, you may have the following rights regarding your personal data:
To exercise your rights, you can contact us at our contact email address, or by post at the provider's address.
If you believe that your personal data is being processed in violation of applicable legislation, you have the right to lodge a complaint with the competent supervisory authority for personal data protection in the Republic of Slovenia.
The competent authority is:
We may amend this Privacy Policy from time to time due to changes in legislation, our services, the use of new technologies, or other reasons.
The current version of the Privacy Policy is always published on this website.