Privacy Policy

The data controller of the Art by Urska website and online store is DEJAN PIRC S.P. We are deeply committed to protecting your personal data and respect your privacy in accordance with the EU General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).

1. What Data We Collect and Why

• When placing an order: We collect your first name, last name, shipping address, billing address, email address, and phone number. This data is processed strictly for the performance of a contract (processing payment, packaging, and shipping your painting, and issuing an invoice).
• When contacting us: If you fill out the contact or inquiry form, we collect your name, email address, and the contents of your message. We process this data based on our legitimate interest in responding to your questions and order requests.

2. Legal Bases and Retention Periods

Personal data is processed based on contractual necessity (to fulfill your purchase), legal obligation (tax regulations), or your explicit consent (when submitting a contact form request).

We retain your data only for as long as necessary to fulfill the purpose for which it was collected, or as required by law. For instance, invoice data containing your contact details must be stored for 10 years to comply with Slovenian tax and accounting regulations.

3. Third-Party Processors

We do not sell, rent, or trade your personal data. We share your data only with trusted service providers necessary to operate our website and fulfill transactions:

• Stripe: Our payment gateway. Stripe acts as an independent data controller for secure credit card and digital wallet transactions. We do not store your payment card details on our servers.
• Courier and Postal Services: Pošta Slovenije, DHL, DPD, or other delivery partners, to deliver your physical artwork.
• Hosting and Analytics: Vercel (for website hosting) and Vercel Analytics. Analytical tools are only activated if you consent to cookies.

4. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access to your personal data
• Right to rectification of incorrect data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise any of these rights, please send your request via email to urskapirc6@gmail.com. If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Slovenian Information Commissioner (Informacijski pooblaščenec RS).