‍
We process all personal data strictly in line with legal bases and specific consent forms, adhering to the latest standards and laws for personal data protection. This includes compliance with the General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679 of the European Parliament and Council dated 27 April 2016. This regulation addresses the processing of personal data and the free movement of such data, replacing Directive 95/46/EC. Additionally, we follow the relevant Slovenian data protection laws, particularly the Law on the Protection of Personal Data (ZVOP).

This Privacy Policy aims to provide users of our services with comprehensive details regarding how we handle your personal data. Please read this Privacy Policy carefully.

Changes to This Privacy Policy
‍
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the “Last updated” date and take any other steps required by applicable law.
‍

Server log files
‍
You can use our websites without submitting personal data. Every time you access our website, your internet browser transmits usage data to us or our web hosters/IT service providers and stores it in server log files. This stored data includes, for example, the name of the page accessed, the date and time of the request, the IP address, the amount of data transferred and the requesting provider. The processing is based on Article 6 (1) f) GDPR due to our legitimate interest in ensuring the smooth operation of our website and improving our services.
‍

How We Collect and Use Your Personal Information
‍
To provide the Services, we collect personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.
‍
In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.
‍

What Personal Information We Collect
‍
The types of personal information we obtain about you depend on how you interact with our Site and use our Services. When we use the term “personal information”, we are referring to information that identifies, relates to, describes or can be associated with you. The following sections describe the categories and specific types of personal information we collect.
‍

Information We Collect Directly from You
‍
Information that you directly submit to us through our Services may include:
‍
– Basic contact details including your name, address, phone number, email.
– Order information including your name, billing address, shipping address, payment confirmation, email address, phone number.
– Shopping information including the items you view, put in your cart or add to your wishlist.
– Customer support information including the information you choose to include in communications with us, for example, when sending a message through the Services.

Orders – Collection, processing and disclosure of personal data in orders
‍
When you place an order, we collect and use your personal data only to the extent necessary for the fulfilment and processing of your order and for dealing with your enquiries. The provision of the data is necessary for the conclusion of a contract. Failure to provide the data will result in a contract not being concluded. The processing is based on Article 6 (1) b) GDPR and is necessary for the performance of a contract with you. Your data is passed on, for example, to the shipping companies and dropshipping providers, payment service providers, service providers for processing the order and IT service providers. In any case, we strictly adhere to the legal requirements. The scope of the data transfer is limited to a minimum.
‍
When you make purchases as a guest, EVA VOI utilizes the provided data exclusively to process these orders. In line with Article 86 of the Value Added Tax Act, EVA VOI, as a taxable entity, is required to retain invoices associated with the supply of goods or services in Slovenia. This retention period extends for at least 10 years following the end of the year indicated on the invoice. Consequently, the data on these invoices will be stored for the same duration.
‍

Financial Data
‍
Financial information, such as data related to your payment method (e.g. valid credit card number, card brand, expiration date) that we may collect when you purchase, order, return, exchange, or request information about our services from the Site. We store only very limited, if any, financial information that we collect. Otherwise, all financial information is stored by our payment processor, [Stripe], and you are encouraged to review their privacy policy and contact them directly for responses to your questions.

What are cookies and why are they required?
‍
Cookies are small text files used by websites to store user data. These files are saved in your browser when you browse the internet. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Cookies are highly useful as almost all websites use them. Specifically, they are known as HTTP cookies to distinguish them from other types of cookies used for different applications. These small files are stored by websites on your computer and are located in your browser’s cookie folder. Each cookie consists of a name and a value, and additional attributes must be defined when creating a cookie. Cookies store certain user data such as language settings or personal page settings. When you revisit a website, your browser sends these specific pieces of information back to the site, allowing the website to recognize you and display your preferred settings. In some browsers, each cookie has its own file, while in others, like Firefox, all cookies are stored in a single file. There are both first-party cookies, created directly by the visited website, and third-party cookies, created by partner websites (e.g., Google Analytics). Each cookie is unique and stores different data. The lifespan of a cookie varies from a few minutes to several years. Importantly, cookies are not software programs and do not contain viruses, trojans, or other harmful programs. They also cannot access information on your PC.

When you browse our website, we employ essential cookies for its functionality. These are the only cookies that load automatically, as they are necessary for the website to operate. These essential cookies involve storing a text file on your computer or browser.
‍
Importantly, all other non-essential cookies are only activated if you choose to accept them. The first time you visit our website, a notice regarding the use of cookies is displayed at the bottom of the starting page. By clicking the “Accept” button on our website, you allow us to load additional cookies that enhance your browsing experience but are not crucial for the basic functioning of the site.
‍
You can always deactivate the use of cookies described above; you can also use the website without it. However, we would like to point out that this might result in you not being able to use all the functions of the website to their full extent. You can determine how cookies are handled by adjusting the corresponding settings in your internet browser or on our website under cookie preferences.

For example, you can set your internet browser to inform you when a cookie is transferred to your computer, or you can deactivate all cookies via your browser (the Help menu of your browser tells you how to correctly change or update the handling of cookies).
‍

Essential cookies
‍
We only use these technically necessary cookies to make our offer more user-friendly, effective and secure. Cookies also enable our systems to recognise your browser after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. These services require that the browser is recognised after a page change.
‍

‍

‍Privacy and Secure Transmission of Personal Data
‍
We assure you that your personal data will not be shared with any external third parties. However, in specific instances, we may share your personal information with trusted partners bound by contractual obligations. These are entities with whom we have agreements for processing your personal data. The primary purposes for such transmission include user support, order fulfilment, and payment processing. These contract-based processors are granted access only to the personal data required to perform their contracted services. They are also strictly bound to safeguard your personal data, adhering to our high standards of privacy and security.

Individual Rights Protection at EVA VOI Shop
‍
At EVA VOI shop, we are committed to upholding the rights of individuals in relation to their personal data.
Right to Be Informed: Individuals have the right to know what personal data is collected, the purposes of collection, the duration of data retention, the sources of the data, and any third parties involved in its processing.
Right to Erasure: Individuals can request at any time that EVA VOI Shop delete their personal data.
Right to Data Correction: If an individual finds their personal data to be inaccurate or incomplete, they have the right to ask for corrections or completion of their data.
Right to Restrict Processing: Individuals can request that their personal data be marked to exclude it from processing. This restriction is temporary, unlike permanent erasure.
Right to Data Portability: Individuals can ask to receive their personal data provided to EVA VOI Shop, or have it transferred to another controller of their choice, at any time.Right to Object: Individuals have the right to object to certain types of data processing.Right to Withdraw Consent: An individual may withdraw their consent for personal data processing at any time, impacting the future use of their data.

Controller of Personal Data and Contact Information
‍
EVA NEDELJKO S.P., located at Rimska cesta 12, 1000 Ljubljana, Slovenia is the controller of your personal data. For any inquiries related to this Privacy Policy, the confidentiality of your personal data, our processing practices, or to exercise your rights concerning personal data, please reach out to the designated contact person or the data protection officer at EVA VOI, Eva Nedeljko s.p.. You can submit your questions by emailing us at info@evavoi.com.