Privacy Policy

At Blažič, robni trakovi, d.o.o., we are committed to protecting your personal data and to processing it in a responsible and transparent manner. This Privacy Policy explains which personal data we collect, why we collect it, how we use it, with whom we share it, and what your rights are regarding its processing.

This Privacy Policy applies to all users of the website www.blazic.eu and the online store, as well as to all forms of interaction with us, including purchases, communications, and inquiries. By accessing or using our online services, you acknowledge that you are familiar with this Privacy Policy and agree to its provisions.

The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), the Personal Data Protection Act (ZVOP-2), and other applicable legislation of the Republic of Slovenia.

This Privacy Policy covers the following information:

1. Contact information for Blažič d.o.o. and the Data Protection Officer,
2. Legal bases and purposes for processing personal data,
3. Types of personal data we collect,
4. Use of cookies and related technologies,
5. Managing privacy settings,
6. Disclosure of personal data,
7. Retention periods for personal data,
8. Data security,
9. Individual rights regarding personal data,
10. Changes to the privacy policy.

For further explanations or to exercise your rights, you can contact us by email: spletna.trgovina@blazic.eu.

1. Contact Information of Blažič d.o.o.

Data Controller:

For any questions regarding the processing of your personal data, you may contact us using the above details.

2. Legal Bases and Purposes for Processing Personal Data

Blažič d.o.o. collects, records, organizes, stores, transmits, and otherwise processes personal data based on various legal grounds and for the purposes outlined below.

Processing Based on Contract

To exercise rights and fulfil contractual obligations, Blažič d.o.o. processes personal data when necessary for preparing offers or pro forma invoices, concluding contracts (orders through the online store), fulfilling contractual obligations (product delivery, order status updates, handling complaints), issuing invoices, maintaining business records, enforcing contractual rights, etc.

This includes the conclusion and performance of a contract in which the individual is a party or to take steps at the request of the individual prior to entering a contract.

Processing Based on Legal Obligations

Blažič d.o.o. processes personal data where required by law, especially for:

• maintaining accounting and tax records and issuing invoices;
• storing documentation as required by legal regulations (e.g., ZDDV-1, Zakon o računovodstvu, ZVOP-2);
• responding to requests from regulatory authorities (e.g., Tax Administration, Information Commissioner).

Processing Based on Legitimate Interests

Blažič d.o.o. also processes personal data for the following purposes:

• ensuring website security and preventing abuse;
• improving website functionality and user experience;
• enforcing, exercising, or defending legal claims;
• occasionally contacting customers to gather feedback, with an option to opt out.

Blažič d.o.o. may process personal data based on legitimate interests unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

Where further processing of personal data is involved, the data is pseudonymized or aggregated. Such processing is considered a lawful use of data for marketing and other business or technical analysis purposes by Blažič d.o.o.

Processing Based on Consent

Blažič d.o.o. processes personal data based on the individual's consent for the following purposes:

• direct marketing – receiving notifications;
• conducting marketing analysis and customer segmentation, and providing tailored offers of products and services;
• participation in prize draws, surveys, or promotional activities.

You may withdraw your consent for direct marketing at any time by clicking the "unsubscribe from this list" button at the bottom of the email message.

3. Personal Data We Collect

Blažič d.o.o. collects various types of data, including personal data that can directly or indirectly identify you, if you choose to share it with us. We receive this data through various channels, including purchases in the online store, subscription to newsletters, registration of a user account in the online store, or visiting the Blažič d.o.o. websites.

Personal data we collect includes:

• Basic personal data, such as name and surname, email address, residential address (street, street number, postal code, city, country), delivery address (street, street number, postal code, city, country), phone number, and password to ensure secure use of our services;
• Purchase and payment method data, noting that in case of payment by credit card, card data is not stored in the databases of Blažič d.o.o.;
• Technical information from your browser, computer, or mobile device when accessing the Blažič d.o.o. websites or online store.

4. Use of Cookies and Related Technologies

When you use our online services, cookies are placed on your device. Cookies are small text files stored on your device when you visit a website. They enable device recognition, enhance user experience, and help us analyse website performance.

Most web browsers automatically accept cookies. You can change your browser settings to reject cookies or to alert you before a cookie is stored.

Type of Cookie	Purpose	Legal Basis
Essential cookies	Enable basic website functionality	Legitimate interest
Analytical cookies	Track website usage	Consent
Functional cookies	Store user preferences	Consent
Marketing cookies	Display targeted advertisements	Consent

Essential cookies are always stored on your device, as the website cannot function properly without them. These include cookies that allow access to the website and individual functionalities but do not collect analytics or other visit data.

Cookie retention

Cookies are classified by their duration as:

• Session cookies – temporary, expiring when the browser is closed;
• Persistent cookies – remain on your device until you delete them or they expire.

Names, duration, and purposes of cookies used can be found on our website in the cookie consent tool (cookie banner), where you can also manage or disable cookies.

Third-party providers

Blažič d.o.o. uses various technologies to tailor user experience and provide relevant content, including Google Analytics 4 (GA4) to collect statistical usage data and Google Tag Manager (GTM) to manage tags and track events such as product views, cart additions, purchases, form submissions, registrations, contact clicks, and catalogue downloads.

5. Managing Settings

User Account Updates

Individuals are required to provide accurate and complete information. Any changes to personal data in the online store user account can be updated, adjusted, or modified by the registered user in the account settings.

Account Closure

The user account can be closed at any time by submitting a request for account closure to the email address: spletna.trgovina@blazic.eu. Once the account closure is confirmed, the user's account will be deleted.

Please note that closing your online store account does not constitute a withdrawal of consent (unsubscribing) from receiving direct marketing communications.

Be aware that certain personal data we process based on a contractual relationship cannot be deleted. In accordance with tax law regulations, such data is retained for 10 years following the completion of an order, resolution of a complaint, or return of a product.

6. Disclosure of Personal Data

Data Processors

Blažič d.o.o. may disclose your personal data to third parties with whom we have concluded data processing agreements (hereinafter: data processors) for the purposes of support, analysis, and continuous improvement of our services, payment processing, or order delivery. Data processors have access only to the personal data necessary to provide the services they perform for us and only for the purposes of carrying out those tasks on our behalf. They are not permitted to use the data for any other purpose and are obligated to protect your personal data.

Blažič d.o.o. may also cooperate with data processors who process statistical data on how you use our services to advertise our services or display information that may be of interest to you. These processors only handle anonymized data.

Third-Party Websites and Applications

Blažič d.o.o. websites may contain links to websites that are not under the control of Blažič d.o.o. By visiting such sites, you may provide your information to third parties with whom Blažič d.o.o. has no data processing agreement. These websites have their own privacy policies which govern the processing of your personal data. We recommend that you read their privacy policies to understand how your data is handled on third-party websites you visit.

Public Authorities

Notwithstanding the retention periods set for personal data, we may retain your data for a longer period and disclose it to third parties such as the police, prosecution services, courts, and other competent authorities within or outside the Republic of Slovenia if we determine that such disclosure is necessary and required by law. This includes purposes such as the prevention, investigation, detection, or prosecution of criminal offenses. We may also disclose your data to public authorities if necessary for the establishment, exercise, or defence of legal claims in judicial, administrative, or extrajudicial proceedings.

Transfers of Data to Non-EU/EEA Countries

Some of your personal data may be processed outside the EU or EEA, as we use certain tools and services from providers based in third countries:

• Mailchimp (USA) – for sending newsletters and managing recipient lists.
• Google Analytics (USA) – for analysing the use of our website and improving the user experience.

Such data transfers are carried out exclusively based on appropriate safeguards that ensure compliance with the General Data Protection Regulation (GDPR). These safeguards include:

• Adequacy Decision: For providers certified under the EU-U.S. Data Privacy Framework, the European Commission recognizes that the U.S. ensures an adequate level of protection for personal data;
• Standard Contractual Clauses (SCCs): In the absence of an adequacy decision, data transfers are based on standard contractual clauses adopted by the European Commission. These clauses contractually bind the recipient to uphold the same level of data protection as required under EU law.

The service providers we work with commit to implementing these safeguards and adopt technical and organizational measures to protect your data (e.g., encryption, restricted access, security policies, etc.).

7. Personal Data Retention Periods

We retain personal data as long as necessary to provide our services or longer if required by law.

Personal data related to your user account is stored until the account is closed, while data related to purchases made by the user in the online store is retained. Account closure can be requested by sending a request to close the user account to info@blazic.eu. Closing the user account and deleting your personal data may take up to 10 business days from the complete request. Please note that some data from closed accounts may be retained in accordance with the law, for fraud prevention, debt collection, and dispute resolution. Any retained data will be handled in accordance with this Privacy Policy.

Data related to payment for purchases in the online store and associated contact details may be retained for the purpose of fulfilling contractual obligations until full payment is completed or until the expiration of the statute of limitations related to the specific claim, which by law may be up to five years. In accordance with tax regulations, issued invoices are kept for 10 years after the end of the year in which the invoice was issued.

Personal data obtained based on consent is retained until the consent is withdrawn, but no longer than 5 years.

Personal data that is no longer needed for the purposes for which it was collected or otherwise processed may be anonymized and combined with other data that does not allow identification of individuals, for the purpose of obtaining statistical information commercially useful to Blažič d.o.o., such as usage statistics of the services we offer. This personal data is anonymized and does not allow connection to an identifiable individual.

8. Personal Data Protection

We implement various technical and organizational measures to ensure the security of personal data during collection, transfer, and storage. Blažič d.o.o. strives to appropriately protect your personal data, but we do not guarantee complete security of the personal data you provide to us and are not responsible for theft, destruction, loss, intentional or unintentional disclosure of your personal data or information about you.

Blažič d.o.o. adheres to generally accepted standards for protecting received information both during transfer and after receipt; however, no method of electronic transmission or storage is completely secure, so we cannot guarantee absolute security.

Blažič d.o.o. uses SSL (Secure Sockets Layer) technology, which ensures encryption of personal data and credit card information. Blažič d.o.o. cooperates with a company that provides security for our services and your personal data. Our servers are further protected by firewalls and other technologies to ensure data security.

Blažič d.o.o. is committed to safeguarding your personal data and information, but no internet connection can be completely secure and cannot guarantee the full safety of the data you provide to us. You provide your personal data at your own risk.

The user is also responsible for protecting data by ensuring the security of their mobile device or computer, as well as safeguarding their username, password, and appropriate software (antivirus) protection of their electronic device. Use a browser that allows you to set security features before transmitting your personal data or credit card information over the internet. Please note that the transmission of personal data may be risky if you use a browser that does not support SSL technology. Most browsers notify you if you are on a website that does not provide a secure connection or if you are sending data over an unsecured connection.

9. Rights of Individuals Regarding Personal Data

Requests by individuals to exercise their rights can be sent by email to spletna.trgovina@blazic.eu or by mail to Blažič d.o.o., Zgornji Brnik 368, 4210 Brnik - Aerodrom. If the request is not sent from the registered user's email address, the individual must provide proof of identity and/or address. Blažič d.o.o. will respond to your request in accordance with applicable regulations.

Right of Access

An individual can request at any time that Blažič d.o.o. confirm whether personal data relating to them is being processed, and if so, provide access to the personal data and information regarding its processing.

Right to Rectification

An individual can request at any time that Blažič d.o.o. correct inaccurate personal data about them and complete incomplete personal data. Registered users can do this via the settings of their user account in the online store.

Right to Erasure

In accordance with applicable legal conditions, an individual can request at any time that Blažič d.o.o. erase their personal data without undue delay (the so-called right to be forgotten). To exercise this right, you must demonstrate that one of the following conditions applies:

• Blažič d.o.o. no longer needs your personal data for the purposes for which it was collected or processed;
• You have withdrawn your consent to data processing (make sure the legal basis for processing your data is your consent and not, for example, performance of a contract);
• You have objected to the processing and Blažič d.o.o. has no overriding legitimate grounds to continue processing;
• Blažič d.o.o. processes your personal data unlawfully;
• Blažič d.o.o. must delete your data to comply with a legal obligation under Slovenian or EU law;
• Blažič d.o.o. collected your personal data in relation to the provision of information society services to a minor.

Right to Restriction of Processing

In accordance with applicable conditions, an individual may request that Blažič d.o.o. restrict the processing of their personal data at any time. Registered users can do this in their user account settings. Please note that restricting the processing of certain personal data may prevent us from providing full service.

Right to Data Portability

An individual can request that Blažič d.o.o. provide their personal data in a structured, commonly used, and machine-readable format, and transmit it to the individual or to a data controller of their choice (if technically feasible), under the conditions set out by applicable law.

Right to Object

If Blažič d.o.o. processes personal data based on legitimate interests (as described above), an individual may object to such processing in certain cases. Blažič d.o.o. will cease processing unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the individual, or if processing is required for legal reasons.

Objection to processing personal data for direct marketing purposes can also be exercised by withdrawing consent to receive notifications, for example by clicking the "unsubscribe from this list" link at the bottom of an email.

Withdrawal of Consent

An individual may withdraw their consent at any time if consent was given for a specific purpose of personal data processing.

Right to Complain to a Supervisory Authority

An individual has the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia if they believe their personal data is being processed in violation of applicable data protection laws. The complaint procedure is published on the website of the Information Commissioner of the Republic of Slovenia.

10. Changes of the Privacy Policy

Blažič d.o.o. reserves the right to amend the Privacy Policy in accordance with circumstances and data protection legislation. We kindly ask you to review it periodically.

All changes regarding the processing of your personal data and/or updates to the Privacy Policy will be published promptly on our website.

If you do not agree with the Privacy Policy, please discontinue using our online services and close your user account or withdraw any given consents.

Zgornji Brnik, junij 2025