Skip to content
Original paintings, made in Slovenia — shipped worldwide
Legal

Privacy Policy

Last updated: 2026-08-25

Pending legal reviewThis page describes the intended structure of our policy and has not yet been reviewed by a legal professional. It is not a substitute for legal advice and must be finalized with real business details before the site goes live.

1. Who controls your data

[LEGAL BUSINESS NAME] ([LEGAL FORM — e.g. s.p. / d.o.o.]), [REGISTERED ADDRESS], Slovenia, European Union, is the data controller for personal data processed through this website. Contact: [DATA PROTECTION CONTACT EMAIL — IF DIFFERENT FROM CONTACT EMAIL].

2. What we collect and why

  • Order and inquiry data (name, email, message, shipping destination, and — once payment is live — billing/shipping address) to process orders and respond to inquiries. Legal basis: performance of a contract / steps prior to entering one.
  • Payment data: handled directly by our payment provider once online payment is live; we do not store full card numbers. Legal basis: performance of a contract.
  • Cookie data: see our Cookie Policy. Only strictly necessary cookies are currently used. Legal basis: legitimate interest (necessary cookies) or consent (any future analytics/marketing cookies).

3. Recipients and processors

We only list services actually in use. As of this writing, the technologies used to run this site are: Next.js hosting/infrastructure (host TBC), and — once enabled — a payment processor for checkout. This list will be updated as soon as analytics, email, or other processors are actually added; none are in use today.

4. International transfers

Where a processor we use is located outside the EU/EEA, we rely on an appropriate safeguard (such as the EU Standard Contractual Clauses) as required by GDPR. This section will be completed with the specific processors once they are selected.

5. Retention

Order and contract-related data is kept for as long as required by applicable tax and commercial law. Inquiry messages are kept only as long as needed to respond and for a reasonable follow-up period.

6. Your rights

Under GDPR, you may have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent at any time. Contact [DATA PROTECTION CONTACT EMAIL — IF DIFFERENT FROM CONTACT EMAIL] to exercise these rights. You also have the right to lodge a complaint with your local data protection supervisory authority — in Slovenia, the Information Commissioner (Informacijski pooblaščenec).

7. Contact

[DATA PROTECTION CONTACT EMAIL — IF DIFFERENT FROM CONTACT EMAIL]