1. Controller
Letalske usluge, Primož Jovanović s.p. Tovarniška cesta 3B, 5270 Ajdovščina, Slovenia E-mail for privacy questions: [email protected] E-mail for orders: [email protected]
This policy applies to www.papajuliett.com and www.papajuliett.store.
2. General
You can generally use our websites without providing personal data. Where we do collect data, this is described below, together with the purpose, legal basis, and retention period. We do not share data with third parties beyond what is described in this document.
3. Security
We use appropriate technical and organisational measures to protect the transmission and storage of personal data, orders, and payments.
You are responsible for access to your own systems and for safeguarding your account details and passwords. You warrant the accuracy of the information you provide and are liable for any damage caused by inaccurate or false information.
4. What data we collect, why, and for how long
4.1 Server log files
When you visit our sites, even without registering or placing an order, the following is automatically recorded: pages visited (URL), date and time of access, volume of data transferred, referring source, browser and operating system used, and IP address (anonymised where possible).
Legal basis: our legitimate interest in the secure and technically reliable operation of the site (Article 6(1)(f) GDPR).
Retention period: the retention period is set by our hosting provider under its technical policy. Contact us at [email protected] for details.
4.2 Order data
When you make a purchase, we collect your name, address, phone number, and e-mail address, as needed to process and deliver the order and issue an invoice.
Legal basis: performance of the contract with you (Article 6(1)(b) GDPR).
Retention period: 10 years from the end of the business year in which the order was completed (in line with accounting and tax requirements).
4.3 Newsletter sign-up
If you subscribe to our newsletter, or if you are informed at the time of purchase that you will be added to our newsletter list, we process your e-mail address (and name, if provided) to occasionally inform you about our range, new pieces, and news.
Legal basis: consent (Article 6(1)(a) GDPR); for existing customers, also our legitimate interest under the “soft opt-in” exception, subject to clear notice and a simple opt-out in every message.
Retention period: until you unsubscribe.
5. Who we share data with
We share data only with providers who help us run our business, and only to the extent their service requires:
| Category of provider | Purpose | Category of data |
|---|---|---|
| Email marketing provider | Sending newsletters | E-mail address, name |
| Web hosting provider | Hosting our websites | Server log files |
| Web analytics provider | Analysing site visits | Browsing data, IP address (see Cookies section) |
| Courier service | Delivery of orders outside personal delivery | Name, address, phone number |
| External accounting service | Bookkeeping and invoicing | Order data needed for accounting |
We also share data where required by law, or in the event of a breach of our terms and conditions.
On your explicit request, we will disclose the exact identity of any provider listed in the table above.
6. Responsibility for links
Our site contains links to external sites (Facebook, Instagram, LinkedIn, YouTube). We are not responsible for the privacy practices of those sites; we recommend reading their policies before use.
7. Cookies
7.1 General
Our websites use cookies. A cookie is a small file stored on your device.
- First-party cookies are set or modified by the site you are currently visiting.
- Third-party cookies are set by a third party we work with (for example, Google).
- Session cookies are deleted when you close your browser.
- Persistent cookies remain stored until they expire or are manually deleted.
7.2 Which cookies, and who has access
Technically necessary cookies — enable the site’s basic functions. Only we have access to these.
Google Analytics — a non-essential cookie used to analyse site visits (number of visitors, pages browsed, time on page). Google has access to this data. This cookie is set only after your consent.
7.3 Legal basis
- Technically necessary cookies: our legitimate interest in the site’s operation (Article 6(1)(f) GDPR)
- Google Analytics: your consent (Article 6(1)(a) GDPR), which you may withdraw at any time with effect for the future
Before you enter the site, a pop-up asks for your consent; non-essential cookies (Google Analytics) are only loaded if you consent, and are not loaded if you decline.
7.4 Managing cookies in your browser
- Internet Explorer: support.microsoft.com
- Firefox: support.mozilla.org
- Chrome: support.google.com
- Safari: support.apple.com
- Opera: help.opera.com
General opt-out of online advertising tracking: www.aboutads.info/choices (US) or www.youronlinechoices.com (EU).
Disabling cookies may limit some of the site’s functionality.
8. Your rights
Regarding your personal data, you have the right to:
- access the data we process
- rectify inaccurate data
- erasure of your data
- restriction of processing
- data portability
- object to processing based on legitimate interest
- lodge a complaint with the Slovenian Information Commissioner (www.ip-rs.si) if you believe processing infringes the GDPR
Send requests relating to any of the above rights to [email protected].
9. Withdrawing consent
Where processing is based on your consent (for example, newsletter sign-up or Google Analytics), you may withdraw it at any time, with effect for the future, at [email protected] or via the unsubscribe link in any message received.