Privacy policy

Who collects your data

The controller of your personal data is Tamara Česnik, Studeno 95a, 6230 Postojna, Slovenia, tax number 37105337.
For any question about your data, write to me at narocilo@tamaracesnik.si.

What I collect and why

Shop orders. Name, e-mail, phone, address, postcode and town, country, note, and the products and payment method you chose. I need them to carry out the order, ship it and issue an invoice. The legal basis is the contract (Article 6(1)(b) of the General Data Protection Regulation) and the legal obligation to keep invoices (Article 6(1)(c)).

Messages sent through the form. Name, e-mail, phone (optional), message and attached photos. I use them only to reply and to prepare a quotation. The basis is your consent and steps taken before entering into a contract (Article 6(1)(a) and (b)).

Reviews. Name, town, the work you ordered, rating and the text of the review. With your consent I publish them on the Reviews page (Article 6(1)(a)).

Visiting the site. I use Google Analytics only if you click “Accept” in the cookie banner. Google then records which pages you viewed, on what kind of device and roughly where you are visiting from; Google does not store your IP address. It sets two cookies, _ga and _ga_FQGNYDFQWK, which last 2 years. The basis is your consent (Article 6(1)(a)). You can change your choice at any time with the Cookies link in the footer.

Your browser keeps the contents of your basket, your chosen language and your cookie choice. This data is not sent anywhere and is needed for the site to work.

Who else receives the data

I do not sell your data or pass it on for advertising. Only those without whom an order cannot be completed have access to it:

• the web and e-mail hosting provider (domeca.si), where the website and mailbox run;
• Pošta Slovenije or another carrier — name, address and phone for delivering the parcel;
• PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg — if you pay with PayPal or by card;
• Google Ireland Limited — only if you accept analytics cookies. Google may transfer data to the USA; the transfer relies on the EU-U.S. Data Privacy Framework.

How long I keep it

• invoices and order data: 10 years, as tax rules require;
• messages that did not lead to an order: at most 1 year after our last contact;
• published reviews: until you ask for them to be removed;
• Google Analytics data: at most 14 months.

Your rights

You can at any time ask for access to your data, its correction or erasure, restriction of processing and data portability, and you can object to processing. You can withdraw your consent at any time; this does not affect the lawfulness of processing before the withdrawal. An e-mail to narocilo@tamaracesnik.si is enough — I reply within one month at the latest.

If you believe your data is being handled improperly, you can lodge a complaint with the Slovenian Information Commissioner (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si, or with the supervisory authority in your own country.

I make no automated decisions about you and do not create profiles.

Effective from 4 October 2026.