Privacy Policy

Last updated: 21 August 2026

This Privacy Policy explains how we process personal data when you use slovorez.com, send an enquiry, create an account or purchase custom vinyl lettering.

1. Data controller

2. Data we process

• identity and contact details such as your name, address, email address and telephone number
• order, delivery, personalised text and product-configuration data
• payment and transaction-status data; we do not receive or store your full card number
• account details and order history when you register
• the content of enquiries, complaints and other correspondence
• technical and security data such as IP address, access time, error logs, browser information and cookie choices

3. Purposes and legal bases

• Entering into and performing a contract: cart, order, payment, production, delivery and pre-purchase support (Article 6(1)(b) GDPR).
• Legal obligations: accounting, fiscalisation, tax records, consumer protection and complaint handling (Article 6(1)(c)).
• Legitimate interests: protecting the website and orders from misuse, detecting fraud, technical diagnostics, and establishing, exercising or defending legal claims (Article 6(1)(f)), balanced against users’ rights.
• Consent: only for optional cookies or another purpose for which consent is expressly requested (Article 6(1)(a)). You may withdraw consent at any time.

4. Recipients

We disclose data only to the extent necessary to provide the service: hosting and email providers, the Stripe card-payment provider, the selected delivery company, accounting or fiscalisation systems, technical maintainers acting on our instructions, and competent authorities where required by law. We do not sell personal data.

Stripe may process device identifiers and transaction data to execute payments securely, authenticate users and prevent fraud. See Stripe’s Privacy Policy for further information.

5. Transfers outside the European Economic Area

Some service providers, particularly Stripe and its subprocessors, may process data outside the EEA. Where this occurs, the transfer relies on an applicable safeguard such as an adequacy decision, the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

6. Retention

• order data, invoices and accounting records are retained for at least 11 years, calculated in accordance with applicable accounting and tax rules
• written complaint records are retained for at least one year after receipt
• enquiries that do not result in an order are normally erased or anonymised within 12 months after the correspondence ends
• an account is retained until you request its deletion, except for order data that must be kept under law
• technical and security logs are retained only as long as needed for security and incident resolution

7. Your rights

Depending on the circumstances, you may request access, rectification, erasure, restriction, data portability and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it without affecting prior lawful processing. Send requests to [email protected]. We may request reasonable proof of identity to protect your data.

If you believe your rights have been infringed, you may complain to the Croatian Personal Data Protection Agency (AZOP) or another competent supervisory authority.

8. Required data and automated decisions

Fields marked as required are necessary to enter into and perform the order; we cannot process an order without them. We do not make decisions producing legal or similarly significant effects based solely on automated processing. The payment provider may separately conduct automated security and fraud checks under its own rules.

9. Cookies and policy changes

Details about cookies and managing your choice are available in the Cookie Policy. We may update this policy when services or legal requirements change. The current version and update date will always be published on this page.