Politika zasebnosti / PRIVACY POLICY
politika zasebnosti
Velja od: 01. 03. 2026
Vaša zasebnost je za nas pomembna. Ta politika pojasnjuje, katere osebne podatke zbiramo, na kakšni pravni podlagi jih obdelujemo in kakšne pravice imate kot posameznik.
1. Upravljavec osebnih podatkov
Upravljavec osebnih podatkov je:
Mara & Art, Tamara Pucko, s. p.
E-mail: info@maraandart.com
Spletna stran: maraandart.com
2. Pravne podlage za obdelavo podatkov
Osebne podatke obdelujemo na naslednjih pravnih podlagah:
- Izvajanje pogodbe – kadar podatke potrebujemo za izvedbo naročila ali registracijo uporabniškega računa.
- Zakonita obveznost – kadar podatke hranimo zaradi računovodskih ali drugih zakonskih zahtev.
- Privolitev posameznika – npr. pri uporabi določenih piškotkov ali prejemanju obvestil.
- Zakoniti interes upravljavca – npr. za zagotavljanje varnosti spletne strani, preprečevanje zlorab ali izboljšanje uporabniške izkušnje.
3. Katere podatke zbiramo
Lahko zbiramo naslednje kategorije podatkov:
- ime in priimek,
- naslov,
- e-poštni naslov,
- telefonsko številko,
- podatke o naročilih in plačilih,
- podatke za dostop do uporabniškega računa,
- komunikacijo preko kontaktnega obrazca,
- IP naslov, podatke o napravi in brskalniku,
- podatke o uporabi spletne strani (analitika),
- podatke, ki jih sami posredujete.
Uporabnik je odgovoren za točnost posredovanih podatkov ter za varovanje svojega uporabniškega imena in gesla.
4. Namen obdelave podatkov
Podatke obdelujemo za:
- izvedbo naročil in dostavo izdelkov,
- izdajo računov in izpolnjevanje zakonskih obveznosti,
- komunikacijo s strankami,
- upravljanje uporabniških računov,
- zagotavljanje varnosti spletne strani,
- izboljšanje vsebin in uporabniške izkušnje.
5. Piškotki in analitika
Spletna stran uporablja piškotke za zagotavljanje pravilnega delovanja in analizo obiska.
Uporabljamo lahko tudi storitve spletne analitike (npr. Google Analytics), ki zbirajo anonimizirane podatke o uporabi spletne strani.
Uporabnik lahko uporabo piškotkov kadarkoli omeji ali onemogoči v nastavitvah svojega brskalnika.
6. Vgrajene vsebine tretjih ponudnikov
Na spletni strani se lahko pojavljajo vdelane vsebine (npr. YouTube, Facebook). Ti ponudniki lahko zbirajo določene podatke v skladu s svojimi politikami zasebnosti.
Če ste prijavljeni v njihov uporabniški račun, lahko povežejo vašo interakcijo z vsebino z vašim profilom.
7. Posredovanje podatkov tretjim osebam
Osebne podatke delimo le z zaupanja vrednimi pogodbenimi partnerji, kadar je to nujno za izvajanje storitev:
- dostavne službe,
- ponudniki gostovanja in vzdrževanja spletne strani,
- računovodski servis,
- ponudniki tehničnih rešitev.
Ti partnerji podatke obdelujejo izključno v skladu z našimi navodili in veljavno zakonodajo.
8. Prenos podatkov izven EU/EEA
Če uporabljamo storitve ponudnikov, ki imajo sedež izven EU (npr. Google, YouTube), lahko pride do prenosa podatkov v tretje države.
V takih primerih se prenos izvaja na podlagi ustreznih zaščitnih ukrepov (npr. standardne pogodbene klavzule Evropske komisije).
9. Obdobje hrambe podatkov
Podatke hranimo:
- podatke o naročilih in računih: skladno z zakonodajo (običajno 10 let),
- podatke uporabniškega računa: do izbrisa računa,
- podatke iz kontaktnega obrazca: do zaključka komunikacije,
- podatke na podlagi privolitve: do preklica privolitve.
Po poteku roka hrambe podatke izbrišemo ali anonimiziramo.
10. Pravice posameznika
V skladu z GDPR imate pravico do:
- dostopa do svojih podatkov,
- popravka netočnih podatkov,
- izbrisa podatkov,
- omejitve obdelave,
- prenosljivosti podatkov,
- ugovora obdelavi,
- preklica dane privolitve.
Zahtevo lahko pošljete na:
info@maraandart.com
Na zahtevo bomo odgovorili brez nepotrebnega odlašanja in najpozneje v zakonsko določenem roku.
Če menite, da se vaši podatki obdelujejo v nasprotju s predpisi, imate pravico vložiti pritožbo pri nadzornem organu (Informacijski pooblaščenec Republike Slovenije.)
11. Avtomatizirano odločanje
Naša spletna stran ne uporablja avtomatiziranega odločanja ali profiliranja, ki bi imelo pravne učinke za posameznika.
12. Varnost podatkov
Sprejemamo ustrezne tehnične in organizacijske ukrepe za zaščito osebnih podatkov pred nepooblaščenim dostopom, izgubo ali zlorabo.
Prosim upoštevajte, da kljub temu noben sistem ni popolnoma varen.
13. Postopek ob kršitvi varnosti
V primeru varnostnega incidenta, ki bi lahko vplival na vaše osebne podatke, bomo ravnali skladno z GDPR in po potrebi obvestili pristojni nadzorni organ ter posameznike.
14. Spremembe politike
Politiko zasebnosti lahko občasno posodobimo. Veljavna je verzija, objavljena na spletni strani.
privacy policy
Privacy Policy
Effective from: 1 March 2026
Your privacy is important to us. This Privacy Policy explains what personal data we collect, the legal basis for processing it, and your rights as a data subject.
1. Data Controller
The controller responsible for processing your personal data is:
Mara & Art, Tamara Pucko, s. p.
Email: info@maraandart.com
Website: maraandart.com
2. Legal Bases for Processing Personal Data
We process personal data on the following legal bases:
- Performance of a contract – when we need your data to process an order or register a user account.
- Legal obligation – when we are required to retain data for accounting, tax, or other legal purposes.
- Your consent – for example, when using certain cookies or sending marketing communications.
- Legitimate interests – for example, to ensure the security of our website, prevent misuse, or improve the user experience.
3. What Personal Data We Collect
We may collect the following categories of personal data:
- First and last name
- Postal address
- Email address
- Telephone number
- Order and payment information
- User account login details
- Communications submitted through the contact form
- IP address, device information, and browser information
- Website usage data (analytics)
- Any information you voluntarily provide to us
You are responsible for ensuring that the personal data you provide is accurate and for keeping your username and password secure.
4. Purpose of Processing
We process your personal data for the following purposes:
- Processing orders and delivering products
- Issuing invoices and complying with legal obligations
- Communicating with customers
- Managing user accounts
- Maintaining the security of our website
- Improving our website, content, and user experience
5. Cookies and Analytics
Our website uses cookies to ensure its proper operation and to analyse website traffic.
We may also use web analytics services (such as Google Analytics) that collect anonymised information about how visitors use our website.
You can restrict or disable cookies at any time through your browser settings.
6. Embedded Third-Party Content
Our website may include embedded content from third-party providers (such as YouTube or Facebook). These providers may collect certain information in accordance with their own privacy policies.
If you are logged into your account with one of these providers, they may associate your interaction with the embedded content with your user profile.
7. Sharing Personal Data with Third Parties
We share personal data only with trusted service providers where necessary for the provision of our services, including:
- Delivery service providers
- Website hosting and maintenance providers
- Accounting service providers
- Technical service providers
These partners process personal data solely on our behalf, in accordance with our instructions and applicable legislation.
8. Transfers of Personal Data Outside the EU/EEA
If we use services provided by companies based outside the European Union (such as Google or YouTube), your personal data may be transferred to countries outside the EU/EEA.
Where this occurs, such transfers are carried out using appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or other lawful transfer mechanisms.
9. Data Retention
We retain personal data for the following periods:
- Order and invoice records: as required by applicable law (generally 10 years)
- User account information: until the account is deleted
- Contact form enquiries: until the communication has been concluded
- Data processed on the basis of consent: until consent is withdrawn
After the applicable retention period expires, the data will be securely deleted or anonymised.
10. Your Rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- Access your personal data
- Request the correction of inaccurate data
- Request the deletion of your personal data
- Restrict the processing of your data
- Receive your data in a portable format
- Object to the processing of your personal data
- Withdraw your consent at any time where processing is based on consent
You may exercise these rights by contacting us at:
We will respond to your request without undue delay and no later than within the time limits required by applicable law.
If you believe that your personal data is being processed in violation of applicable data protection laws, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia.
11. Automated Decision-Making
Our website does not use automated decision-making or profiling that produces legal or similarly significant effects concerning individuals.
12. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure.
However, please note that no method of data transmission or storage is completely secure.
13. Personal Data Breach Procedure
In the event of a personal data breach that may affect your personal data, we will act in accordance with the GDPR and, where required, notify the competent supervisory authority and the affected individuals.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The version published on our website at the time of use is the version that applies.