This policy explains which personal data we collect, why we collect it, who we share it with and what rights you have in relation to it. In case of discrepancy, the Slovenian version applies.
1. Who processes your data
| Controller | Skayana Tropicals, ornamental plant shop, Jana Cindro s.p. |
|---|---|
| Address | Postojnska ulica 20, 1000 Ljubljana, Slovenia |
| info@skayanatropicals.com | |
| Phone | 031 489 234 |
| Contact person | Jana Cindro |
We process data in accordance with the General Data Protection Regulation (GDPR), the Slovenian Personal Data Protection Act (ZVOP-2) and the Electronic Communications Act (ZEKom-2).
2. What data we collect
When you place an order
Name and surname, billing address, shipping address, email, phone number, ordered products, and payment and shipping method. For business customers also the company name and tax number, if you enter them.
When you visit the website
IP address, date and time of access, pages visited, referral source, browser and operating system type, and time spent on the site.
When you sign up for the newsletter
Email address and data on how you respond to messages, i.e. opens and clicks.
When you use the contact form
Email address and the content of the message.
We do not collect or store payment card details and have no access to them.
3. Why we process it
| Purpose | Legal basis |
|---|---|
| Order processing, delivery, invoicing | performance of a contract — Article 6(1)(b) GDPR |
| Keeping invoices and tax records | legal obligation — Article 6(1)(c) GDPR |
| Handling claims and complaints | performance of a contract and legal obligation |
| Newsletter for existing customers | legitimate interest — Article 6(1)(f) GDPR, Article 226 of ZEKom-2 |
| Newsletter when signing up on the website | consent — Article 6(1)(a) GDPR |
| Statistical analysis of visits | consent via cookies |
| Advertising on social media | consent — Article 6(1)(a) GDPR |
If you no longer wish to receive the newsletter, unsubscribe with one click in any message. Unsubscribing is immediate and free.
4. Who we share data with
We share data only with contracted processors who need it to provide their service.
| Processor | Purpose | Location |
|---|---|---|
| Apollo (getapollo.io) | issuing and storing invoices | Slovenia |
| GLS, DPD, DHL Express, Pošta Slovenije | parcel delivery | EU |
| Hitrost.com | website hosting and mail server | Slovenia |
| MailerLite | sending the newsletter | EU |
| Stripe | card payment processing | EU |
| PayPal | payment processing | EU |
| visitor statistics | EU and USA | |
| Meta (Facebook, Instagram) | advertising | EU and USA |
We do not sell data and do not share it with anyone not listed above.
Transfers outside the EU. Google and Meta also process data in the United States of America. The transfer is based on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
5. How long we keep it
| Data | Retention period |
|---|---|
| Invoices and tax records | 10 years (Tax Procedure Act) |
| Order data outside the invoice | 2 years from delivery |
| User account data | until the account is deleted |
| Email address for the newsletter | until you unsubscribe |
| Messages from the contact form | 1 year |
| Data in Google Analytics | 26 months |
Once these periods expire, we delete or anonymise the data.
6. Cookies
Essential cookies are needed for the shop and cart to work. We only load analytics and advertising cookies with your consent, which you give on your first visit and can change at any time in the cookie settings. We use IP anonymisation in Google Analytics.
7. Your rights
Under Articles 15 to 22 GDPR, you have the right to:
- access to your data and a copy of it,
- rectification of inaccurate data,
- erasure of data when there is no longer a basis for processing,
- restriction of processing,
- data portability,
- object to processing based on legitimate interest, including direct marketing,
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
Send your request to info@skayanatropicals.com or in writing to the company address. We reply within one month.
Right to complain. If you believe we are processing your data unlawfully, you can lodge a complaint with the supervisory authority:
Information Commissioner of the Republic of Slovenia
Dunajska cesta 22, 1000 Ljubljana
gp.ip@ip-rs.si · www.ip-rs.si
8. Security
The website runs over an encrypted HTTPS connection. Only people who need it to process orders have access to the data. You are responsible for the security of your own device and your account login details.
9. Changes
We may change this policy. The version published on this page applies. We will notify existing customers of significant changes by email.