Your privacy matters to us. In this privacy policy, we explain how we collect, process, protect, and use your personal data in accordance with applicable personal data protection legislation. Please read this policy to understand how we handle your personal data.
1. General
Orin Coffee d.o.o. (hereinafter “we” or “our company”) is committed to protecting your privacy and personal data in accordance with applicable personal data protection laws. With this document, we aim to explain to users of the website www.orin.coffee how we process and protect personal data.
In collecting, processing, and storing personal data, we follow the General Data Protection Regulation (GDPR) and the Personal Data Protection Act (ZVOP-1). Personal data is collected exclusively for the purpose of providing our services and is processed in a manner that ensures security and protection against misuse.
2. Data Protection Officer
For any questions regarding the processing of your personal data, you can contact our Data Protection Officer, Klemen Maček, at: info@orin.coffee.
3. Purposes of Processing and Legal Basis
We collect your personal data for various purposes, including:
- Order processing – we collect data such as name, address, email, and contact information to process and deliver ordered products.
- Improving the user experience – we track your shopping and browsing behaviour in order to offer you more personalised services and products.
- Sending offers and notifications – we process your personal data when you sign up for our newsletter, to inform you about new products, promotions, and offers.
Cookies
We process data on the basis of your consent, or on the basis of our legitimate interest where processing does not require your consent but relates to providing our services or protecting our rights.
Our website uses cookies to provide a better user experience. Cookies are small text files stored in your browser by the website. They allow us to recognise visitors, analyse traffic, and personalise content. We use cookies for analytics, functional, and advertising purposes. For more information on the types of cookies we use and how you can manage them, please visit our Cookies page.
4. Data Processing
To process your personal data, we collect the following information:
- Identification data – first name, last name, username, password, VAT ID (if you are a legal entity).
- Contact data – email address, phone number, delivery address, billing address.
- Purchase data – information on ordered items, payment information, bank account number (where required).
- Online behaviour – information about your behaviour on the website, such as products you view and the devices you use to access our website.
5. Disclosure of Data to Third Parties
To provide services such as delivery, payment processing, or data analysis, we work with selected data processors, such as:
- Accounting services: we use external accountants and accounting systems that process your data for the purposes of handling accounting and tax obligations; we will share your data, such as name, address, and tax number, along with any other information required to carry out accounting services.
Delivery services: data required for delivering ordered products is shared only with the necessary delivery services. - Payment services: payment information will be shared with the relevant payment systems for processing payments.
Your personal data will not be transferred to third countries unless necessary for the provision of services.
6. Data Retention Period
Personal data is retained for as long as necessary to fulfil contractual obligations or to pursue our legitimate interests. Accounting data is retained for 10 years in accordance with tax legislation.
7. User Rights
You have the right to:
- Access your data – you may request a copy of the personal data we process about you.
- Rectify your data – you may request correction of inaccurate or incomplete data.
- Erase your data – you may request the deletion of your personal data where a legal basis for this exists.
- Restrict processing – you may request that we restrict the processing of your data in certain cases.
- Data portability – you may request the transfer of your personal data in a structured, commonly used format that can be transferred to another provider.
- Withdraw consent – where we process data on the basis of your consent, you may withdraw it at any time.
If you wish to exercise any of these rights, please contact us at info@orin.coffee.
8. Security of Personal Data
We will take all necessary technical and organisational measures to protect your personal data against misuse, loss, or unauthorised access.
4.7. Right to Lodge a Complaint Regarding the Processing of Personal Data
You have the right to lodge a complaint regarding the processing of your personal data with the supervisory authority if you believe that your right to personal data protection has not been respected. In Slovenia, the competent supervisory authority for the protection of personal data is the Information Commissioner, whose contact details are:
- Address: Informacijski pooblaščenec, Zaloška cesta 59, 1000 Ljubljana, Slovenia
- Email: ip@ip-rs.si
- Phone: +386 1 230 97 30
If you have any questions or concerns about the processing of your personal data, we encourage you to contact us first, so that we can try to resolve the issue directly.