Privacy

Privacy Policy

1. Controller

The controller of your personal data is LASERTECH, Matej Zidarič s.p., Krška vas 71, 8262 Krška vas, Slovenia (VAT ID SI60014008, registration number 8549583000). Phone: 040 630 636. Email: lasertech.svn@gmail.com. For any privacy request, write to this email address.

2. What we process, why, and on what legal basis

  • Browsing the shop and shop functionality. Technical data (such as IP address, device and browser data, pages requested), and information stored by necessary cookies and similar technologies for the language, cart, session, security and checkout. Purpose: to provide the shop and keep it secure. Legal basis: our legitimate interest in operating and securing the shop, and, for storage on your device that is strictly necessary to provide the service you request, the applicable ePrivacy rules.
  • Orders and checkout. Name, delivery and billing address, email, phone number, order information (contents, delivery choice, payment status and order history). Purpose: to process the order, communicate with you about it, provide customer service, arrange and fulfil delivery, process payment and handle returns and withdrawals. Legal basis: performance of the contract.
  • Payment and fraud prevention. Payment is handled at checkout by the payment methods displayed there. We do not see or store your full card details. Data about the transaction and risk signals may be used to detect and prevent fraud and unauthorised payments. Legal bases: performance of the contract and our legitimate interest in preventing fraud and securing the shop.
  • Tax and accounting. Order and invoice data. Purpose: to meet our tax, accounting and bookkeeping duties. Legal basis: legal obligation.
  • Contact and Custom Work inquiries. Name, email, phone number, the content of your message, and any sketches, dimensions, photos or files you send. Purpose: to answer you, prepare a quote and, if you proceed, create your order. Legal basis: steps taken at your request before entering into a contract, or our legitimate interest in answering inquiries.
  • Complaints and customer service. Order data, the content of the communication and any photos you provide. Purpose: to handle complaints, non-conformity claims and withdrawals, and to establish, exercise or defend legal claims. Legal bases: performance of the contract, legal obligation and legitimate interest.
  • Legal claims. Where necessary we keep relevant data to establish, exercise or defend legal claims. Legal basis: legitimate interest.
  • Google Maps. The location map on our Contact page is loaded only after you click "Load map". Until then, no data is sent to Google for the map. When you load it, Google receives technical data such as your IP address and may store information on your device under its own terms. Legal basis: your consent through your click.
  • Marketing communications. We send marketing emails only if you have actively opted in, for example by ticking the unticked marketing box at checkout or by signing up through another subscription form. Legal basis: your consent. You can withdraw it at any time using the unsubscribe link in each message or by writing to us. Order and customer-service messages (for example order confirmations, shipping and delivery notices and replies to your inquiries) are not marketing and are sent to perform the contract. We do not automatically subscribe existing customers to marketing.
  • Online advertising and measurement (Google Ads). LaserTech may use Google Ads. If and when such technologies are enabled on the shop, they are used only according to your choice where consent is legally required. They may be used to measure which advertisements led to a purchase (conversion measurement) and, if enabled, to show you relevant advertisements (remarketing). For that, Google may receive online identifiers such as advertising identifiers, cookie identifiers and your IP address, together with information about your interaction with the shop, such as pages viewed and orders made. Legal basis: your consent, which you can give, refuse and change at any time as described in section 8 and in the Cookie Policy. If you do not consent, these technologies are not used, and you can shop normally.

3. Recipients and processors

We share personal data only with recipients who need it for the purposes above, and where they are processors, only under agreements that comply with data protection law.

  • Shopify, the e-commerce platform that hosts the shop, checkout, orders and customer data (Shopify International Limited, Ireland, and its affiliates), as our processor and, for some of its own purposes, as an independent controller.
  • Payment service providers whose methods are displayed at checkout.
  • Delivery carriers selected by us depending on the destination (for example DPD, GLS, FedEx, DHL or Pošta Slovenije), who receive your name, delivery address, phone number and email only to the extent needed to fulfil the shipment. The carrier may process this data in line with its own privacy information.
  • Our email and communication service provider, and our accountant and tax advisers, to the extent needed.
  • Google, as the provider of Google Maps if you load the map and, if and when enabled, as provider of Google Ads measurement and advertising services (Google Ireland Limited for users in the European Economic Area).
  • Authorities, courts and other bodies, where we are legally required to disclose data.

4. Transfers outside the EU/EEA

Some of our providers, including Shopify and Google, are part of international groups and may process data in countries outside the European Economic Area, including the United States and Canada. Such transfers take place only where an adequacy decision applies or with appropriate safeguards required by data protection law, such as standard contractual clauses, as applied by those providers. You can ask us for information about the safeguards used.

5. Retention

  • Order, invoice and accounting data: for the period required by Slovenian tax and accounting law (generally up to ten years after the end of the year of the transaction), and then deleted.
  • Inquiries and quotes that do not lead to an order: kept for up to 12 months after the last communication, then deleted. If an inquiry leads to an order, the order rules apply.
  • Complaint and withdrawal records: for as long as needed to handle the matter and for the period in which legal claims may be made, and no longer than the retention period of the related order data.
  • Marketing consent and email address: until you withdraw consent or unsubscribe. We then keep only a minimal record needed to respect your choice and prove consent.
  • Technical and cookie data: for the periods set out in the Cookie Policy or by the provider, as applicable.

Data is deleted or anonymised after these periods have ended, as soon as that is technically feasible. It is not deleted immediately on request where the law requires us to keep it.

6. Providing your data

Providing the data marked at checkout is necessary to place and deliver an order. Without it we cannot conclude the contract. All other data, including marketing consent, is optional.

7. Your rights

Under the General Data Protection Regulation you have the right to access your data, to have it corrected, deleted, or processing restricted, to object to processing based on legitimate interests, and to receive data you provided in a portable format. Where processing is based on consent, you may withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal. To exercise your rights, write to lasertech.svn@gmail.com. We reply within one month. You also have the right to lodge a complaint with the supervisory authority: Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, Slovenia, www.ip-rs.si, or with the authority in your country of residence. We do not make decisions based solely on automated processing that produce legal effects on you.

8. Cookies, advertising choices and consent

Necessary cookies and similar technologies that keep the shop working (language, cart, session, security, checkout) can operate without your consent where the law allows. Non-essential technologies, including Google advertising technologies, are subject to your choice where required. You can accept, reject or change your preferences at any time through the cookie banner or the privacy preferences link of the shop. Rejecting or withdrawing consent does not prevent you from browsing or shopping. No non-essential consent is preselected. Details are in the Cookie Policy.

9. Security

We use appropriate technical and organisational measures to protect personal data. Checkout is carried out on an encrypted connection.

10. Changes

We update this policy if our processing changes, for example when new services are introduced. The current version is always on this page.