Privacy Policy — don PUFA Fishing

(effective from October 1, 2025)

In accordance with the applicable data protection regulations — the EU General Data Protection Regulation (GDPR), the Slovenian Personal Data Protection Act (ZVOP-2), and the Electronic Communications Act (ZEKom-1) — the company Tine Pufič s.p., don PUFA Fishing provides the following information and rights related to the processing of your personal data.

Data Controller

The data controller responsible for your personal data is:
Tine Pufič s.p. (don PUFA Fishing)
Gvajčeva ulica 2, 2000 Maribor, Slovenia
Email: info@donpufafishing.com
Phone: +386 41 549 697

Purpose of Data Processing and Types of Personal Data

All personal data you provide to us will be treated confidentially and used solely for the purposes for which they were provided.
If the need arises to process your data for another purpose, you will be informed in advance and asked for your consent.

We collect and process personal data for the following purposes:

• issuing invoices, delivering orders, and communicating with customers,
• managing user accounts in the online store,
• notifying customers about order status,
• performing sales analytics and improving website performance,
• with additional consent: direct marketing, newsletters, and promotional communication.

Website Visits and Use

Each time you visit the website www.donpufafishing.com, the web server automatically stores certain data such as:

• the IP address of your device,
• the date, time, and duration of your visit,
• the browser and operating system used.

These data are processed for website analytics and to improve user experience.

Data Retention Period

We retain your personal data only as long as necessary to fulfill the purpose for which they were collected:

• order and invoice data: 10 years (as required by tax laws),
• server log files: 3 months,
• contact and communication data: until the completion of the communication or order,
• marketing and newsletter data: until consent is withdrawn.

After the retention period ends, your data will be permanently deleted or anonymized.

Your Rights

In accordance with GDPR, you have the following rights regarding your personal data:

Right of Access

You have the right to obtain confirmation whether we process your personal data and to access a copy of any personal data we hold about you.

Right to Rectification

You have the right to request correction or completion of inaccurate or incomplete personal data.

Right to Erasure (“Right to be Forgotten”)

You may request the deletion of your personal data if:

• they are no longer necessary for the purposes for which they were collected,
• you withdraw your consent and there is no other legal basis for processing,
• you object to the processing,
• the processing is unlawful, or
• deletion is required by law.

Right to Restriction of Processing

You may request that we temporarily restrict the processing of your data, for example while verifying their accuracy or during an objection procedure.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit those data to another controller.

Right to Object

You may object at any time to processing based on legitimate interest or for direct marketing purposes.
If processing is based on your consent, you may withdraw that consent at any time.

How to Exercise Your Rights

You can submit any request regarding your personal data by contacting us at:
info@donpufafishing.com
or by post: Tine Pufič s.p., Gvajčeva ulica 2, 2000 Maribor, Slovenia

If you submit your request electronically, we will respond by the same means unless you request otherwise.
For your protection, we may ask for additional information to verify your identity.

You will receive a response within one month of your request (this period may be extended by up to two additional months if necessary, and you will be informed of the reasons for any delay).

If your request is clearly unfounded or excessive (e.g., repetitive), we reserve the right to:

• charge a reasonable administrative fee, or
• refuse to act on the request, providing justification.

Right to File a Complaint

If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (Dunajska cesta 22, 1000 Ljubljana, Slovenia, email: gp.ip@ip-rs.si).

Validity

This Privacy Policy is effective from October 1, 2025 and may be amended or updated at any time.
We encourage you to check the latest version before providing any personal information or using our website.