{"id":223548,"date":"2026-07-10T08:35:00","date_gmt":"2026-07-10T07:35:00","guid":{"rendered":"https:\/\/6tejst.com\/?page_id=223548"},"modified":"2026-07-10T08:36:32","modified_gmt":"2026-07-10T07:36:32","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/6tejst.com\/sl\/privacy-policy\/","title":{"rendered":"Politika zasebnosti"},"content":{"rendered":"
\n
\n
\n

Privacy policy<\/h2><\/div><\/div>\n\n

This policy explains how 6Tejst, Vito \u0160tibernik s.p. processes personal data in accordance with Regulation (EU) 2016\/679 (GDPR), the Slovenian Personal Data Protection Act (ZVOP-2), and applicable national laws.<\/p>\n

Data controller<\/h3>\n

6Tejst, Vito \u0160tibernik s.p., Kotrede\u017e 10, 1410 Zagorje ob Savi, Slovenia. Phone: +386 40 574 210. No Data Protection Officer has been appointed as the Article 37 GDPR threshold is not met. All data protection requests go to:<\/p>\n

info@6tejst.com<\/a><\/p>\n

Data we collect<\/h3>\n

We collect order data (name, delivery and billing address, phone, email, order history); payment data (transaction reference IDs only, as card data is held by payment processors); account data (login credentials and communication preferences); newsletter data (email address, consent record, open and click metrics); support data (correspondence and photos submitted by the Buyer); loyalty data (points balance and redemption history); browsing data (IP address, browser type, pages visited, and cookie identifiers); and review data (name and content of submitted reviews). Mandatory fields are name, delivery address, email, and payment method \u2014 without these the contract cannot be performed. All other fields are voluntary.<\/p>\n

Purposes and legal bases<\/h3>\n

We process data for the following purposes: performing the sales contract including order processing, dispatch, delivery, and customer support (Art. 6(1)(b) GDPR); issuing invoices and maintaining tax records (Art. 6(1)(c) GDPR); sending newsletters and automated marketing emails including abandoned-cart flows (Art. 6(1)(a) GDPR \u2014 consent); operating the customer account and loyalty programme (Art. 6(1)(b) GDPR); running web analytics via Google Analytics 4 (Art. 6(1)(a) GDPR \u2014 consent); measuring advertising via Meta Pixel for Facebook and Instagram (Art. 6(1)(a) GDPR \u2014 consent); preventing fraud and maintaining IT security (Art. 6(1)(f) GDPR \u2014 legitimate interest); and responding to legal claims (Art. 6(1)(f) GDPR \u2014 legitimate interest).<\/p>\n

Recipients and processors<\/h3>\n

We share data only with processors bound by data processing agreements. Payment processors: Stripe Payments Europe Ltd., Dublin, Ireland (card payments, Apple Pay, Google Pay); Klarna Bank AB, Stockholm, Sweden (buy now pay later); PayPal (Europe) S.\u00e0 r.l. et Cie, S.C.A., Luxembourg (PayPal payments). Logistics and hosting: Fully d.o.o., Ljubljana, Slovenia (dispatch, returns); Avant.si d.o.o.\/Neoserv, \u0160en\u010dur, Slovenia (hosting); Cloudflare Inc., USA (CDN, security). Marketing and analytics: Omnisend Ltd., Vilnius, Lithuania (email marketing and automation); Google Ireland Limited, Dublin, Ireland (Google Analytics 4, Tag Manager, Google Ads); Meta Platforms Ireland Limited, Dublin, Ireland (Meta Pixel, Facebook and Instagram ads). Other: FunnelKit\/WooFunnels Inc., USA (checkout and cart); WPLoyalty, self-hosted plugin (loyalty programme); authorised accountant in Slovenia (invoicing and tax); public authorities where legally required.<\/p>\n

International transfers<\/h3>\n

Data is transferred outside the EEA to Cloudflare Inc., Google LLC, and Meta Platforms Inc. in the USA. All three are certified under the EU\u2013US Data Privacy Framework and additionally covered by Standard Contractual Clauses approved by the European Commission. FunnelKit\/WooFunnels Inc. (USA) is covered by Standard Contractual Clauses. Copies of applicable safeguards are available on request at:<\/p>\n

info@6tejst.com<\/a><\/p>\n

Retention periods<\/h3>\n

Order and invoice data is retained for 10 years from the end of the calendar year of issue, in accordance with ZDavP-2 \u00a7 86 and German AO \u00a7 147. Customer account data is retained until deletion is requested. Newsletter subscription data is retained until consent is withdrawn. Omnisend email engagement data is retained for up to 24 months after last activity. Google Analytics 4 data is retained for 14 months per the GA4 data retention setting \u2014 note that the _ga cookie persists for 2 years on the device; these are two separate mechanisms. Meta Pixel event data is retained for up to 180 days per Meta's retention policy. Cookie consent logs are retained for 12 months. Support correspondence is retained for up to 3 years after last contact. Statutory limitation evidence is retained for up to 3 years under BGB \u00a7 195 or 5 years under the Slovenian Code of Obligations, whichever applies.<\/p>\n

Your rights<\/h3>\n

You have the right to: access your personal data (Art. 15); rectification of inaccurate data (Art. 16); erasure subject to legal retention obligations (Art. 17); restriction of processing while a dispute is resolved (Art. 18); data portability in machine-readable format (Art. 20); object to processing based on legitimate interests (Art. 21); withdraw consent at any time without affecting prior lawful processing (Art. 7(3)); and lodge a complaint with a supervisory authority at any time, including before exhausting other remedies (Art. 77). To exercise any of these rights, contact us \u2014 we respond within one month:<\/p>\n

info@6tejst.com<\/a><\/p>\n

Supervisory authorities<\/h3>\n

You may lodge a complaint with the supervisory authority of your EU country of residence at any time.<\/p>\n

Slovenia \u2014 Informacijski poobla\u0161\u010denec (IP), Dunajska cesta 22, 1000 Ljubljana:<\/p>\n

gp.ip@ip-rs.si<\/a><\/p>\n

https:\/\/www.ip-rs.si<\/a><\/p>\n

Germany \u2014 Bundesbeauftragte f\u00fcr den Datenschutz und die Informationsfreiheit (BfDI), Graurheindorfer Str. 153, 53117 Bonn:<\/p>\n

poststelle@bfdi.bund.de<\/a><\/p>\n

https:\/\/www.bfdi.bund.de<\/a><\/p>\n

Automated decision-making<\/h3>\n

We do not use automated decision-making that produces legal effects or similarly significant effects under Art. 22 GDPR. Omnisend automated emails such as abandoned-cart reminders are based on browsing behaviour but do not produce such effects.<\/p>\n

Last updated: 10 July 2026<\/em><\/p>\n<\/div><\/div>\n<\/div>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"bwfblock_default_font":"","footnotes":""},"class_list":["post-223548","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/6tejst.com\/sl\/wp-json\/wp\/v2\/pages\/223548","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/6tejst.com\/sl\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/6tejst.com\/sl\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/6tejst.com\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/6tejst.com\/sl\/wp-json\/wp\/v2\/comments?post=223548"}],"version-history":[{"count":2,"href":"https:\/\/6tejst.com\/sl\/wp-json\/wp\/v2\/pages\/223548\/revisions"}],"predecessor-version":[{"id":223552,"href":"https:\/\/6tejst.com\/sl\/wp-json\/wp\/v2\/pages\/223548\/revisions\/223552"}],"wp:attachment":[{"href":"https:\/\/6tejst.com\/sl\/wp-json\/wp\/v2\/media?parent=223548"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}