1. Privacy Policy
It is important for us to treat your personal data with great respect. To protect your personal data, we take reasonable precautions and follow best industry practices to ensure it is safeguarded against improper loss, misuse, unauthorized access, disclosure, alteration, or destruction. Information systems and software are configured in such a way that personal and identifying data are used only when necessary to achieve the specific purpose of data processing.
This privacy policy explains how we collect and use your personal data. It also describes your rights and how you can exercise them.
It is important that you read and understand the privacy policy and feel secure in knowing how we process your personal data. You can always contact us if you have any questions. By visiting
What are personal data and what is data processing?
Personal data is any information that can be directly or indirectly attributed to a natural person. Images and sound recordings processed digitally can be personal data, even if names are not mentioned. Encrypted data and various types of electronic identifiers (e.g., IP address) are personal data if they can be linked to individuals.
Where do we get your personal data from?
From you and our payment gateways, to check whether the payment is valid and we can start processing your order.
Data processing is everything that happens to personal data. Every action related to personal data is a "process," whether performed automatically or not. Examples of common "processes" include collecting, registering, organizing, structuring, storing, processing, transferring, and deleting data.
Who is responsible for the personal data we collect?
ABRIKOS, Svitlana Suchko S.P., a company registered in Slovenia.
Registration number: 9521097000
Legal address: Trg Leona Štuklja 5, Maribor, 2000
What personal data do we collect about you as a customer and for what purposes?
Online Purchase:
Purpose: to process the online purchase.
Processes involved:
1. Ensuring the safe delivery of the correct goods to the correct person at the correct address in cooperation with our distribution partners.
2. Communicating with the customer before and after the purchase (order and delivery notifications).
3. Payment processing, which includes analyzing payment providers to ensure payment security and prevent fraud.
4. Handling legal warranty claims.
Categories of personal data:
1. Name
2. Delivery address
3. Billing address
4. Phone number
5. Email
6. Order summary (purchased goods, amount spent)
7. Chosen payment method
8. Transaction ID
Legal basis: Performance of the contract. Collection of this information is necessary to fulfill the obligations under the purchase agreement. If the information is not provided, we will not be able to fulfill our obligations and may have to cancel your purchase.
Retention period: We retain the data as long as necessary for a legitimate purpose, and no longer than 36 months (from the date of your last interaction with us). We may delete all data within 36 months upon the customer's request to be "forgotten."
Return Process:
Purpose: To provide our customer with an excellent return process.
Processes involved:
1. Customers fill out return information, specifying which items to return and why.
2. Communicating with the customer after the return process is completed, followed by the refund.
Categories of personal data:
1. Name
2. Address
3. Order number
4. Phone number
5. Email
6. Amount to be refunded
Legal basis:
Performance of the contract. Collection of this information is necessary to fulfill our obligations in the return process. If the information is not provided, we will not be able to fulfill our obligations and process your return. This is part of our legal agreement with customers.
**Retention period:
We retain the data as long as necessary for a legitimate purpose, and no longer than 36 months (from the date of your last interaction with us). We may delete all data within 36 months upon the customer's request to be "forgotten."
Customer Support
Purpose: Our customer support should be able to provide assistance and answer questions.
Processes involved:
1. Communication and answering customer support questions (by phone or through digital channels, including social media).
2. Identification.
3. Handling potential complaints and support cases (including technical support).
Categories of personal data:
1. Name
2. Address
3. Order history
4. Phone number
5. Email
6. Correspondence
Legal basis: Legitimate interest. The process is necessary to fulfill your legitimate interests, as well as our interests in addressing customer support matters.
Retention period: Correspondence is retained for 36 months (from the date of your last purchase or support case). We may delete all data within 36 months upon the customer's request to be "forgotten."
Newsletter Subscribers:
Purpose: To be able to inform newsletter subscribers about the latest news, invitations to special events, offers, and more.
Processes involved:
Communication with subscribers
Categories of personal data:
1. Name
2. Phone number
3. Email
Legal basis: Based on consent. The process is necessary so that we can fulfill our promise to customers: to inform them about the latest news, invitations, and special offers. The process is entirely voluntary and only happens when a customer chooses to become a subscriber.
Retention period: We retain data for as long as the customer chooses to remain a subscriber. If the customer has been inactive for 36 months, we may remove them from the subscription list.
Analytics:
Purpose: To evaluate, develop, and improve our services and products for existing and future customers.
Processes involved:
1. Fraud analysis to ensure a safe payment method and prevent fraud.
2. Supporting our strategic plan for new business locations.
3. Developing and improving our product range.
4. Analyzing conversions, open rates, and clicks to understand which offers and products will be most relevant to our customers.
Note: this analysis is based on the data we collect (e.g., purchase history, age, and gender), and you fall into customer groups (so-called customer segments). The analysis is conducted at an aggregate level using anonymized data without any connection to you as an individual.
Categories of personal data:
1. Place of residence
2. Correspondence and feedback on our services and products
3. Purchase data and user activity (e.g., click and visit history)
4. Technical data related to the devices and settings used (e.g., language settings, IP address, browser settings, time zone, operating system, screen resolution, and platform).
5. Website visits: such as pages visited, response time, loading errors, how you accessed and exited the service, etc.
Legal basis: Our legal basis for processing your personal data to develop and improve our services and products is based on our legitimate interest. Based on consent. We may also use personal data collected from cookies to improve our services and products. Our legal basis when using cookies for this process is consent; for more details, see our cookie policy.
Retention period: We retain data for as long as necessary for a legitimate purpose, and no longer than 36 months from the date of collection. We may delete all data within 36 months upon the customer's request to be "forgotten."
Shopping Experience:
Purpose: To provide our existing and future customers with greater value by interacting with the brand. For existing customers, this means a faster checkout process. For our future customers, it means they will be able to get more information about our products.
Processes involved:
1. Giving customers who have ordered online the opportunity to share their brand experience by leaving product reviews.
2. Allowing customers to mark products as "favorites" in a wish list that can be sent to themselves or friends for more convenient future ordering.
3. Giving customers the opportunity to create a personal account, which allows them to view their order history, check current order status, and speed up the checkout process.
4. Facilitating for the customer the continuation of the checkout process from where they left off in case the order process was interrupted.
Categories of personal data:
1. Email
2. Shopping cart/favorite products
3. Name
4. Order number
5. Address
Legal basis: Based on consent. The process is necessary to provide our customers with greater value and enhance their interaction with our brand. These processes are entirely voluntary and are carried out when the customer chooses to activate a specific service.
Retention period: We retain data for as long as necessary for a legitimate purpose, and no longer than 36 months from the date of collection. We may delete all data within 36 months upon the customer's request to be "forgotten."
With whom can we share your personal information?
Personal data will not be transferred to third parties, individuals or legal entities not associated with ABRIKOS or not performing commercial, professional, or technical functions for ABRIKOS. We share your data with the following partners:
1. Payment gateways
2. Our distribution partner
3. Marketing (print and distribution services, social media, media agencies, or advertising agencies).
4. IT services (companies handling necessary operations, technical support, and maintenance of our IT solutions).
5. Our online platform.
We share data to be able to offer you and other users of our website products or services that may interest you.
We will disclose your personal information to third parties in the following cases:
1. In the event of a sale or purchase of any business or assets, we may disclose your personal data to the prospective seller or buyer of such business or assets.
2. If all or substantially all of our assets are acquired by a third party, the personal data we hold about our customers will be one of the transferred assets.
3. If we are required to disclose or share your personal data to comply with any legal obligation or to enforce our terms of service, policies, and other agreements; or to protect our rights, property, safety, or the safety of our customers and others. This includes sharing information with other companies and organizations for fraud protection and credit risk reduction.
Your personal data will not be shared with third parties for their own marketing purposes.
Where do we process your personal information?
Our store is hosted on abrikos.com. Abrikos.com operates on the Prestashop platform, which allows us to sell you our products and services. Personal data collected through the site will be processed and stored in the site's data repository. Data is stored on a secure server behind a firewall and protected by a DPA.
How long do we keep your personal data?
We will never retain your personal data longer than necessary for each purpose. For more details on specific retention periods for each purpose, see above.
Changes to the policy
We reserve the right to make changes to this policy at any time. Any changes to this policy will be posted online. However, further use of the site will be deemed acceptance of the new policies.