Privacy policy
Version dated 8 November 2026

POLONA SVETOVANJE, STORITEV, TRGOVINA IN TURIZEM D.O.O.
Strmec pri Leskovcu 48, 2285 Zgornji Leskovec, Slovenija
trgovina@polonadoo.si
+386 2 763 00 07
VAT ID: SI34057315
Company registration number: 2158183
Okrožno sodišče Ptuj

Called-up share capital: 8.986,00 EUR

Controller and contact
Polona d.o.o. is the controller for the Pletenine shop. For data-protection questions or rights requests, contact trgovina@polonadoo.si or our postal address.

Data we process
For orders we process your name, email, phone, address, country, items, prices, shipping details, payment identifiers and payment status. Custom enquiries also include the measurements and wishes you provide. Do not send health information or other unnecessary sensitive data. Operation and security also involve session identifiers, basket and language data, and technical records which may include IP address, time and requested URL.

Purposes and legal bases
Enquiries, orders, payment, delivery and contractual claims are processed to take pre-contractual steps and perform a contract (GDPR Article 6(1)(b)). Accounting and tax data are processed for legal obligations (6(1)(c)). Security, abuse prevention and legal defence rely on our legitimate interest in secure operation and protecting rights (6(1)(f)), taking your rights into account. Mandatory checkout fields are needed to fulfil the purchase; without them we cannot complete it. Marketing messages are not a purchase requirement.

Recipients and payment
Only people and providers needing data for these purposes receive it: authorised staff, accounting, IT and communication providers, and Pošta Slovenije for delivery. Stripe receives transaction information, email and data entered on its payment page. Depending on the activity, Stripe acts as processor or independent controller, particularly for fraud prevention and its legal duties. We do not store the full card number or security code. Data are disclosed to authorities where required by law.

International transfers
Stripe may process data outside the European Economic Area. Its privacy policy and contractual documents describe locations, roles and safeguards, such as applicable adequacy decisions or standard contractual clauses. See https://stripe.com/privacy. You may contact us for details of safeguards applying to our processing.

Retention
Retention depends on purpose: order fulfilment and handling claims, followed by the scope and duration required by accounting, tax and other laws or applicable limitation periods. Enquiries not leading to an order are retained only as needed to respond, discuss arrangements or deal with related claims. Technical-record retention follows operational, security and incident-handling needs. After the purpose and mandatory periods end, data are deleted or anonymised; backups are phased out within their retention cycle. Contact us for criteria or the period applicable to your specific data.

Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction and portability. You may object to processing based on legitimate interests. Any consent may be withdrawn without affecting earlier lawful processing. Email trgovina@polonadoo.si; we normally respond within one month and notify you of any permitted extension. We may need to verify identity. Rights are not absolute, particularly where legal retention duties apply. You may complain to Slovenia’s Information Commissioner at https://www.ip-rs.si or another competent EU supervisory authority. Our shop does not make solely automated profiling decisions with legal or similarly significant effects; see Stripe’s policy for its own processes.

Cookies and changes
This shop version uses necessary session and security cookies for the basket, language, login and form protection. This version does not include advertising or analytics trackers on our pages. Browser settings control cookies; blocking necessary cookies may prevent basket or checkout functions. Stripe’s separate payment page has its own cookie information. We update this policy when processing changes and identify the version on the page.