Privacy Policy – AKVAtour d.o.o.

Last updated: 12.05.2025

1. Introduction
This privacy policy outlines how AKVAtour d.o.o., located at Slovenčeva ulica 24, 1000 Ljubljana, Slovenia (hereinafter referred to as the "controller" or "company"), processes personal data of individuals visiting the website, using the online store, or communicating with us through various channels. By using our services, you confirm that you have read and understood this privacy policy.

The company AKVAtour d.o.o. respects your privacy and protects your personal data in accordance with the European GDPR regulation (Regulation (EU) 2016/679) and applicable Slovenian legislation (ZVOP-1). All our personal data processing activities are in compliance with the principles of legality, fairness, and transparency.

2. Data Controller
AKVAtour d.o.o.
Slovenčeva ulica 24, 1000 Ljubljana, Slovenia
Phone: Available by appointment only.
Email: info@akvavent.si
Company registration number: 9086668000
Tax number: SI99258021
Data Protection Officer: Viktor Gryban
Contact: viktor@akva2012.si

3. Personal Data We Collect
3.1. Basic identification data (first name, last name, address, phone number, email)
3.2. Purchase data (date and place of purchase, purchased items, prices, total purchase amount, payment method, delivery address, invoice number)
3.3. Website usage data (IP address, device information, cookies, visit time, visited pages)
3.4. Data from forms, surveys, and contests
3.5. Contact details and communication history (email, phone calls, SMS messages)

4. Purposes and Legal Bases for Processing Personal Data
4.1. Contract execution (e.g., order processing, product delivery, invoice issuance) – Article 6(1)(b) GDPR
4.2. Creation and management of user accounts – Article 6(1)(b) GDPR
4.3. Sending newsletters and promotional notifications (based on consent) – Article 6(1)(a) GDPR
4.4. Website usage analysis and content customization – Article 6(1)(f) GDPR
4.5. Direct marketing and tailored advertising (based on legitimate interest) – Article 6(1)(f) GDPR
4.6. Compliance with legal obligations – Article 6(1)(c) GDPR

5. Retention Period of Personal Data
5.1. Data related to orders is retained for 10 years after the fulfillment of the contract (in accordance with tax legislation).
5.2. Data for sending newsletters is retained until consent is revoked.
5.3. Cookies are retained in accordance with the cookie policy on our website.
5.4. User account data is retained until the account is deleted.

6. Users of Personal Data
6.1. Contractual partners for delivery and logistics (e.g., Pošta Slovenije, GLS).
6.2. Payment service providers (e.g., PayPal, Stripe).
6.3. IT providers for website maintenance and development.
6.4. State authorities based on legal requirements.

6.5. Business partners or suppliers who send orders directly to customers.

6.6. IT service providers, such as email service providers and "quick help" services.

7. Transfers of Personal Data to Third Countries
7.1. We generally do not transfer personal data to third countries or international organizations. If this occurs, we will ensure appropriate protective measures as required by GDPR.

8. Rights of Individuals
8.1. Right to access data
8.2. Right to rectify data
8.3. Right to erase data
8.4. Right to restrict processing
8.5. Right to data portability
8.6. Right to object to processing
8.7. Right to withdraw consent
8.8. Right to lodge a complaint with the Information Commissioner (Dunajska 22, 1000 Ljubljana, gp.ip@ip-rs.si)

9. Protection of Personal Data
9.1. Personal data is protected by appropriate technical and organizational measures, including data encryption, access control, and regular security audits.

10. Automated Decision-Making and Profiling
10.1. We currently do not engage in automated decision-making or profiling based on personal data.

11. Cookies and Analytical Tools
11.1. Our website uses cookies and similar technologies to enhance user experience, analyze traffic, and target advertisements.
11.2. For more information, please read our Cookie Policy.

12. Final Provisions
12.1. This privacy policy is part of the general terms and conditions of AKVAtour d.o.o. and applies to all users of our website. We may update or modify the policy at any time.

For additional information or questions regarding personal data protection, please contact our customer support.