Privacy Policy and Personal Data Protection

Last updated: 19 October 2026

1. General Information

At Exact Designs d.o.o., we recognize the importance of protecting personal data and respecting the privacy of our customers and online store visitors.

We process your personal data responsibly and transparently, in accordance with applicable legislation, in particular the General Data Protection Regulation (EU) 2016/679 (GDPR), the Slovenian Personal Data Protection Act (ZVOP-2), and other applicable legislation of the Republic of Slovenia.

We collect and use personal data only for specific, lawful and clearly defined purposes, such as processing orders, delivering products, communicating with customers, providing support and improving the user experience.

We are committed to protecting your personal data appropriately and respecting your rights regarding its processing.

2. Data Controller

The controller of personal data is:

Exact Designs, trgovina in storitve d.o.o.
Janžev Vrh 44a
9252 Radenci
Slovenia

Company registration number: 7592698000
Tax number: 62792709
Email: info@exactdesigns.si
Online store: https://store.exactdesigns.si

For questions concerning personal data protection or the exercise of your rights, please contact us at the email address above.

3. What Is Personal Data?

Personal data means any information relating to an identified or identifiable natural person.

Examples of personal data include:

• First and last name.
• Residential or delivery address.
• Email address.
• Telephone number.
• Order and purchase information.
• IP address and website usage data where these make it possible to identify an individual.
• Records of communications with the company.
• Other information you voluntarily provide when using our services.

Special categories of personal data, such as health information, religious beliefs or biometric data, are not part of our usual business activities and are generally not collected for providing sales services.

4. What Personal Data Do We Collect?

When you use the Exact Designs online store, we may collect and process the following categories of personal data.

Data Provided When Placing an Order

• Customer's first and last name.
• Delivery and billing address.
• Email address.
• Telephone number.
• Details of products ordered.
• Payment method and payment status.
• Information required to issue an invoice.
• Delivery and shipment tracking information.

Communication Data

When you contact us by email or through other communication channels, we may process your contact details, the content of your message and any other information you provide.

Data Collected When Subscribing to Email Newsletters

When subscribing to our newsletters, we may collect:

• Email address.
• First and last name, if provided.
• Record of consent given.
• Information about engagement with emails sent, where such processing is lawful.

Technical Data

When you use our website, certain technical data may be collected automatically, such as:

• IP address.
• Device and browser type.
• Operating system.
• Time and duration of visits.
• Pages visited.
• Cookie data and information from similar technologies.

The extent of this collection depends on the tools used and the individual's privacy settings.

5. Purposes and Legal Bases for Processing Personal Data

We process your personal data only where an appropriate legal basis exists.

Performance of a Contract

We use personal data to:

• Receive and process orders.
• Prepare and deliver products.
• Provide order status updates.
• Process payments.
• Handle returns and complaints.
• Provide customer support.

Legal basis: Performance of a contract or taking steps at the individual's request prior to entering into a contract (Article 6(1)(b) GDPR).

Compliance with Legal Obligations

We process certain personal data to comply with legal requirements, particularly in accounting, taxation and consumer protection.

Legal basis: Compliance with a legal obligation (Article 6(1)(c) GDPR).

Email Marketing

If you subscribe to our newsletters, we may send you:

• Information about new products.
• Special offers and discounts.
• News about Exact Designs products.
• Information about promotional campaigns.

We send promotional emails based on your consent or another legal basis where permitted by applicable law.

You can unsubscribe from promotional emails at any time.

Analytics and Online Store Improvement

We may use information about how our online store is used to improve website functionality, analyze traffic and optimize the user experience.

Where analytics or advertising cookies require consent, we use them only after obtaining the appropriate consent.

Legitimate Interests

We may process certain data based on the company's legitimate interests where these are not overridden by the individual's rights and freedoms.

This may include preventing abuse, protecting the online store, maintaining information security and establishing, exercising or defending legal claims.

6. Retention of Personal Data

We retain personal data only for as long as necessary to achieve the purposes for which it was collected, or for as long as required by applicable law.

The retention period depends on the type of data and the purpose of processing:

• Order and invoice data: Retained in accordance with applicable tax and accounting regulations.
• Email marketing data: Retained until consent is withdrawn or the relevant legal basis no longer applies.
• Communication records: Retained as long as necessary to handle the request or protect the company's legal interests.
• Analytics data and cookies: Retained according to the retention periods of the respective tools and privacy settings.

After the relevant retention period expires, we delete, anonymize or otherwise appropriately restrict further processing of personal data, unless continued retention is required by law.

7. Security of Personal Data

Exact Designs d.o.o. implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, alteration or disclosure.

Depending on the nature of processing, these measures include:

• Restricting access to personal data.
• Using appropriately secured information systems.
• Protecting user accounts and login credentials.
• Using secure communication connections.
• Working with service providers that ensure an appropriate level of personal data protection.

Only authorized persons who need the data to perform their duties have access to it.

Despite the implementation of appropriate security measures, complete security of electronic systems cannot be guaranteed.

8. Disclosure of Personal Data to Third Parties

We do not sell your personal data.

To fulfill orders and operate our online store, we may disclose personal data to contractual processors and other authorized recipients where this is necessary for providing services or where an appropriate legal basis exists.

This may include:

E-commerce platform providers

We use Shopify to operate our online store.

Delivery companies

We may provide the data required for delivery to carriers such as GLS or other delivery service providers.

Payment service providers

Certain information may be processed by providers of the selected payment services to execute payments.

Email and communication service providers

We may use external communication tools to send order confirmations, order status notifications and promotional content.

Accounting and business services

Data may be disclosed to accounting service providers and business software providers where necessary to meet legal and contractual obligations.

Competent authorities

We may disclose data to public authorities and other competent institutions where required by applicable law.

We allow external processors to process data only to the extent necessary to provide the agreed services and in accordance with appropriate contractual and legal obligations.

9. Transfers of Data to Third Countries

Because we use an online platform and digital tools from international providers, certain personal data may also be processed outside the European Economic Area.

In such cases, transfers are carried out in accordance with GDPR requirements, for example on the basis of European Commission adequacy decisions or through appropriate safeguards, such as standard contractual clauses.

For more information about international data transfers and the safeguards used, please contact info@exactdesigns.si.

10. Cookies and Similar Technologies

Our online store uses cookies and similar technologies to ensure that the website functions properly, provide shopping features and improve the user experience.

We may use the following categories of cookies:

Essential cookies

These are necessary for the basic operation of the online store, shopping cart, checkout and security functions.

Analytics cookies

These help us understand how the online store is used and improve its performance.

Advertising and marketing cookies

These may be used to measure advertising campaign performance and display more relevant advertisements.

Where consent is required for the use of cookies, we obtain it before using them.

You can change your cookie preferences through the privacy management options on the website, where available, or through your browser settings.

Details of the individual cookies used, their providers and retention periods are provided in the cookie policy or consent management tool.

11. Withdrawal of Consent to Personal Data Processing

Where the processing of personal data is based on your consent, you may withdraw it at any time.

You can withdraw consent by:

• Clicking the unsubscribe link included in promotional emails.
• Sending a request to info@exactdesigns.si.
• Changing your cookie settings, where available.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

After withdrawal, we will stop processing the data for the purposes for which consent was withdrawn, unless there is another appropriate legal basis for continued processing.

12. Your Rights Regarding Personal Data Protection

Under the GDPR, you have the following rights concerning your personal data, subject to the conditions and exceptions established by law.

Right of Access

You have the right to obtain confirmation as to whether we process your personal data, access that data and receive information about its processing.

Right to Rectification

You may request the correction of inaccurate personal data or completion of incomplete personal data.

Right to Erasure

You may request the deletion of your personal data where the legal conditions are met.

Erasure is not always possible, particularly where we are required to retain certain data to comply with legal obligations or establish, exercise or defend legal claims.

Right to Restriction of Processing

In certain cases, you may request that we restrict the processing of your personal data.

Right to Data Portability

Where the legal conditions are met, you may request to receive your data in a structured, commonly used and machine-readable format or to have it transmitted to another controller.

Right to Object

Where processing is based on legitimate interests, you may object to further processing in certain circumstances.

You may object to the processing of personal data for direct marketing purposes at any time.

Right to Withdraw Consent

If processing is based on consent, you may withdraw that consent at any time.

Rights Relating to Automated Decision-Making

Subject to GDPR conditions, you have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you.

13. Exercising Your Rights

To exercise your rights regarding personal data, please send your request to:

info@exactdesigns.si

or by post to:

Exact Designs d.o.o.
Janžev Vrh 44a
9252 Radenci
Slovenia

We will respond without undue delay, normally within one month of receiving your request.

In more complex cases, this period may be extended by a further two months, and we will inform you of the extension in due time.

If we have reasonable doubts about the identity of the person submitting a request, we may request additional information necessary to confirm their identity.

14. Personal Data Breaches

Despite our security measures, unauthorized access, loss or other personal data breaches may occur.

In the event of a breach, we will act in accordance with GDPR requirements.

Where a breach is likely to result in a risk to individuals' rights and freedoms, we will notify the competent supervisory authority without undue delay and, where feasible, no later than 72 hours after becoming aware of the breach.

Where a breach is likely to result in a high risk to individuals' rights and freedoms, we will also notify the affected individuals without undue delay, unless a legally prescribed exception applies.

15. Right to Lodge a Complaint

If you believe that we are processing your personal data in breach of applicable legislation, you have the right to lodge a complaint with the competent supervisory authority.

Information Commissioner of the Republic of Slovenia
Dunajska cesta 22
1000 Ljubljana
Slovenia

Website: https://www.ip-rs.si
Email: gp.ip@ip-rs.si

Before lodging a complaint, we invite you to contact us so that we can try to resolve any questions or irregularities directly.

16. Changes to the Privacy Policy

Exact Designs d.o.o. reserves the right to amend or update this Privacy Policy due to changes in legislation, business processes or technologies used.

Each updated version will be published on our website together with the date of the latest update.

17. Contact Information

For any questions regarding the processing and protection of personal data, please contact:

Exact Designs, trgovina in storitve d.o.o.

Janžev Vrh 44a
9252 Radenci
Slovenia

Company registration number: 7592698000
Tax number: 62792709

Email: info@exactdesigns.si

Website: https://www.exactdesigns.si

Online store: https://store.exactdesigns.si