Privacy Policy
Last updated: 3 September 2026
This policy explains how Žiga Tartara, s.p., trading as KOLP Industries ("KOLP", "we"), processes personal data when you visit or buy from this store. It is written to meet the EU General Data Protection Regulation (GDPR).
1. Controller
Žiga Tartara, s.p., Volfova ulica 15, Srednje Jarše, 1230 Domžale, Slovenia
Company no. 7572859000
Contact: info@kolpindustries.eu
[[ If established outside the EU: name of the Art. 27 EU representative. ]]
2. What we collect
- Order data: name, shipping and billing address, email, phone, items ordered, order value.
- Payment data: processed by our payment providers; we do not store full card numbers.
- Account data (if you create an account): email, password hash, order history, saved addresses.
- Support data: the content of messages you send us.
- Usage data: device, browser, pages viewed, and — subject to your consent — analytics and marketing identifiers (cookies, pixels).
- Marketing data: email address and preferences if you subscribe.
3. Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Process and deliver your order, handle returns | Performance of a contract (Art. 6(1)(b)) |
| Fraud prevention, security, accounting | Legal obligation / legitimate interests (Art. 6(1)(c)/(f)) |
| Customer support | Contract / legitimate interests |
| Analytics and performance measurement | Consent (Art. 6(1)(a)) |
| Advertising and remarketing pixels | Consent (Art. 6(1)(a)) |
| Marketing emails | Consent, withdrawable any time |
4. Processors and recipients
We share data only as needed with:
- Shopify — store platform and hosting (data may be processed in the EU and the US under appropriate safeguards)
- Payment providers: [[ Shopify Payments, PayPal, ... ]]
- Fulfilment / carriers: [[ CARRIERS ]]
- Email / marketing: [[ provider ]]
- Analytics / advertising: [[ Google, Meta, TikTok — only with consent ]]
- Reviews: [[ provider, if any ]]
We do not sell your personal data.
5. International transfers
Some processors are located outside the EEA (e.g. the US). Transfers rely on the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework where applicable. [[ Confirm per processor. ]]
6. Retention
- Order and invoice records: kept for the statutory accounting period ([[ confirm exact retention period under Slovenian accounting/tax law ]]).
- Account data: until you delete your account.
- Marketing data: until you unsubscribe.
- Analytics data: per the provider's retention settings ([[ set GA4 to 14 months ]]).
7. Your rights
You have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise any right, email info@kolpindustries.eu. You also have the right to lodge a complaint with your local supervisory authority — in Slovenia, the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), ip-rs.si.
8. Cookies
See our Cookie Policy. Non-essential cookies load only after you consent via the banner.
9. Changes
We may update this policy; the "last updated" date reflects the latest version.