Privacy Policy

The controller of personal data on the Art by Urska website is DEJAN PIRC S.P., Valvasorjeva ulica 19, 4248 Lesce, Slovenia (hereinafter: the controller). We are committed to protecting your privacy in accordance with the European General Data Protection Regulation (GDPR) and the Personal Data Protection Act (ZVOP-2).

1. What data we collect and why?

• When placing an order: We collect name, surname, delivery address, billing address, email address, and phone number. We need this data to fulfill contractual obligations (painting delivery, invoice issuance). Legal basis: contract performance.
• When filling out the contact form: We collect name, email address, and message content. We process this data based on legitimate interest to respond to your inquiries. Legal basis: legitimate interest.
• If we use cookies or marketing tools in the future, we will require your consent for this. Legal basis: consent.

2. Retention period

Data collected during ordering is retained for 10 years from invoice issuance, in accordance with tax legislation.

Data collected via the contact form is retained for 2 years from the last contact or until you withdraw consent, whichever comes first.

3. Transfer of data to third parties

We only transfer your data to providers that are essential for the store's operation:

• Stripe Ireland Limited (1 Grand Canal Street Lower, Grand Canal Dock, Dublin 2, Ireland) for secure payment processing. Stripe processes your payment card data as an independent controller. Data may be processed in the USA based on appropriate safeguards.
• Delivery services (Pošta Slovenije, DHL, DPD, etc.) for package delivery purposes.
• Website hosting (e.g., Vercel Inc.) for technical operation and security. Data may be processed in the USA based on appropriate safeguards.
• Email service provider (e.g., Google) for communication with you.
• External technical provider and website maintenance provider Omnithink: for technical maintenance, updates, bug fixing, and support related to the operation of the website. Such provider may process personal data solely on our behalf and under our instructions, based on a data processing agreement.

All mentioned processors have been carefully selected, and we ensure they comply with appropriate safeguards for data transfers outside the European Economic Area.

4. Individual rights

Regarding your personal data, you have the right to request:

• Access to your personal data
• Correction of inaccurate data
• Erasure of data ("right to be forgotten")
• Restriction of processing
• Data portability
• Objection to processing

You may send requests to urskapirc6@gmail.com. If you believe your rights have been violated, you may contact the Information Commissioner of Slovenia (www.ip-rs.si).