Privacy policy

PRIVACY POLICY

Applies to the Comshop.si website

Last updated: 1 September 2026

1. Personal data controller

The controller of personal data processed through the Comshop.si website is:

RAING, računalniški inženiring in svetovanje d.o.o.
Zavrh nad Dobrno 9
3204 Dobrna
Slovenia

Tax number: SI 85979082
Registration number: 3475204000

Email: info@comshop.si
Telephone: +386 (0)51 680 702

Website: Comshop.si

The controller processes personal data in accordance with applicable legislation, in particular Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), the Personal Data Protection Act (ZVOP-2), the Electronic Communications Act (ZEKom-2), and other applicable legislation of the Republic of Slovenia and the European Union.

 

2. What is personal data?

Personal data is information relating to an identified or identifiable individual.

When you use the Comshop.si website, we may process data you provide yourself and certain data collected automatically when you use the website.

The scope of the data depends on whether you make a purchase, create a user account, send an enquiry, subscribe to our newsletter or simply visit the website.

 

3. What personal data may we process?

Depending on the purpose of processing, we may process in particular:

• your first name and surname,
• your delivery and/or billing address,
• your email address,
• your telephone number,
• details of your order and the products purchased,
• information required to issue an invoice,
• records of your communications with us,
• data associated with your user account,
• your IP address,
• data about your use of the website and your device, where processing is permitted,
• data associated with cookies and similar technologies, where appropriate consent has been given for their use.

We do not store payment card details when they are processed directly by an external payment service provider to complete payment. In that case, the data required to complete payment is processed by the selected provider in accordance with its terms and personal data protection rules.

 

4. Purposes and legal bases for processing

We process your personal data only for specified, lawful purposes and to the extent necessary for each purpose.

Fulfilling orders and performing contracts

We use personal data to:

• receive and process orders,
• communicate about orders,
• prepare and issue invoices,
• arrange delivery or collection,
• process payments,
• handle complaints, returns and other claims,
• provide customer support.

Legal basis: performance of a contract or taking steps at the individual's request before entering into a contract.

We cannot process an order properly without the data essential to fulfil it.

Compliance with legal obligations

We also process personal data to comply with legal obligations, particularly in accounting, taxation, recording business transactions and meeting the requirements of competent authorities.

Legal basis: legal obligation.

Communicating and responding to enquiries

If you send us a question, enquiry or other message, we use your data to prepare a response, handle your question and communicate further where necessary.

Legal basis: taking steps at the individual's request before entering into a contract, or our legitimate interest in providing user support.

User accounts

If the online shop offers user account registration, we process data to set up and manage the account and provide the associated functionality.

Legal basis: performance of a contract.

Website security and preventing misuse

We may process certain data, such as IP addresses, technical data and access logs, to keep the website secure, prevent misuse, detect unauthorised access and protect our information systems and legal interests.

Legal basis: legitimate interest or another appropriate legal basis where provided for by law.

Direct marketing

We may use your email address to send promotional messages, news, offers and other marketing content:

• if you have subscribed to our newsletter and given your consent; or
• where the statutory conditions for direct marketing to existing customers are met and a simple, free and effective way to unsubscribe is available.

You can unsubscribe from our newsletter at any time by clicking the unsubscribe link in a message or using another method provided by the controller.

Legal basis: consent or legitimate interest where such processing is permitted by applicable legislation.

 

5. Who may receive your personal data?

We do not sell your personal data or disclose it to third parties for their own purposes unless there is an appropriate legal basis to do so.

To keep the online shop operating, we may disclose personal data or provide access to it in particular to:

• hosting and IT infrastructure providers,
• maintenance and technical support providers,
• payment service providers,
• delivery and logistics partners,
• accounting and other professional service providers,
• providers of newsletter and communication tools,
• providers of analytics and other online services where their use is permitted and the necessary consent has been given,
• competent public authorities where required by law.

We ensure that external providers processing personal data on our behalf are subject to appropriate contractual obligations concerning personal data protection and security.

Where individual services involve transferring personal data to third countries, the transfer is made only on an appropriate legal basis and with the safeguards required by legislation.

 

6. Cookies

The Comshop.si website uses cookies and similar technologies.

Cookies are small files stored on your device that enable the website to function correctly, improve the user experience, provide analytics or support other functionality.

Essential cookies

Some cookies are strictly necessary for the website or a service expressly requested by the user to function, for example to operate the cart, sign in or place an order.

Prior consent is not required for these cookies, but we provide appropriate information about their use.

Analytics, functional and advertising cookies

We only use cookies that are not strictly necessary for the website to function with your prior consent where required by applicable legislation.

These may include, for example:

• analytics cookies,
• cookies for measuring visits,
• functional cookies,
• advertising cookies,
• remarketing cookies.

On your first visit to the website, you can choose which categories of cookies to allow. You can change your choice or withdraw consent later.

More information about individual cookies, their purposes, providers and retention periods is available in the Cookie Notice or in the cookie settings on the website.

 

7. Consent

Where personal data processing is based on your consent, that consent is freely given, specific, informed and unambiguous.

You can withdraw your consent at any time.

Withdrawing consent does not affect the lawfulness of processing based on that consent before it was withdrawn.

If you withdraw your consent, we will stop processing data for the purpose for which consent was given, unless there is another lawful basis for continuing the processing.

 

8. Direct marketing and unsubscribing

If you receive our promotional messages, you can opt out at any time.

Every direct marketing email includes a simple way to unsubscribe.

After you unsubscribe, we will no longer use your email address to send such marketing messages, unless there is another lawful basis for its use.

Unsubscribing from promotional messages does not affect messages needed to fulfil an order or the contractual relationship, such as order confirmations, delivery information or other essential notices.

 

9. How long do we keep personal data?

We keep personal data only for as long as necessary for the purpose for which it was collected or as required by applicable regulations.

As a general guide:

• order and contractual relationship data: for as long as needed to fulfil the order, handle potential claims and establish or defend legal claims;
• accounting and tax data: in accordance with statutory retention periods;
• communications and enquiry data: for as long as needed to handle the communication or protect legitimate interests;
• user account data: until the account is deleted or for as long as necessary to provide the service, except for data we must retain longer to comply with legal obligations;
• direct marketing data: until consent is withdrawn, you unsubscribe or another lawful basis for its use ceases to apply;
• cookie-related data: in accordance with the purpose and duration of the individual technology or the user's settings.

If applicable legislation requires a longer retention period, we retain the data for as long as required by law.

After the retention period expires, we delete, destroy or anonymise the data, unless there is another lawful basis for retaining it.

 

10. Your rights

In accordance with applicable legislation, you may have the following rights in relation to your personal data:

• access to personal data,
• rectification of inaccurate or completion of incomplete personal data,
• erasure of personal data,
• restriction of processing,
• data portability,
• objection to processing,
• withdrawal of consent where processing is based on consent,
• objection to direct marketing,
• information about the existence of automated decision-making or profiling where relevant.

These rights are not absolute and may be restricted in individual cases where there is a legal basis to do so, for example to comply with a statutory data retention obligation.

You can send a request to exercise your rights to:

info@comshop.si

When handling your request, we may verify your identity to protect your data.

We will respond to your request without undue delay and normally no later than one month after receiving it. If the request is particularly complex or there are numerous requests, the period may be extended by up to two additional months, and we will inform you in good time.

Exercising your rights is normally free of charge, except where the law permits otherwise.

 

11. Automated decision-making and profiling

Comshop.si does not make decisions based solely on automated processing of personal data that produce legal effects for an individual or similarly significantly affect them.

If this type of processing is introduced in future, we will inform individuals appropriately and ensure the rights provided by applicable legislation.

 

12. Personal data security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or other unlawful processing.

Only persons who need personal data to perform their duties have access to it, and only to the extent necessary for each purpose.

Despite appropriate security measures, no transmission of data over the internet or electronic system can be guaranteed to be completely secure.

 

13. Protection of children's personal data

The Comshop.si online shop is not specifically intended for children.

Where consent is required for processing a child's personal data, the processing is carried out in accordance with applicable legislation, including the rules on children's consent.

 

14. Complaints to the supervisory authority

If you believe that the processing of your personal data has breached legislation, you have the right to lodge a complaint with the competent supervisory authority.

The competent supervisory authority in the Republic of Slovenia is:

Information Commissioner
Dunajska cesta 22
1000 Ljubljana
Slovenia

Email: gp.ip@ip-rs.si
Website: http://www.ip-rs.si

 

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time because of changes in legislation, the operation of the online shop, the technologies used or other circumstances.

The current version of the Privacy Policy is always published on the Comshop.si website.

If there are significant changes, we will inform users appropriately where necessary.

 

Last updated: 1 September 2026