Privacy Policy
Effective Date: 21 February 2026
Last Updated: 21 February 2026
This Privacy Policy describes how Kulski.com (“Company”, “we”, “us”, or “our”) collects, uses, discloses, and protects personal data when you access or use our website (the “Site”) and related services.
This Policy is drafted in accordance with:
- Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”)
- Directive 2002/58/EC (ePrivacy Directive)
- Applicable national data protection and consumer protection laws
1. Data Controller
The data controller responsible for the processing of personal data is:
Kulski.com
Stantetova ulica 15
3320 Velenje
Slovenia
Email: [email protected]
2. Scope of Application
This Privacy Policy applies to:
- Visitors of the Site
- Customers placing orders
- Individuals contacting customer support
- Subscribers to marketing communications
The Site is operated within the European Union and offers products to customers located within the EU.
3. Categories of Personal Data
3.1 Technical and Usage Data
Automatically collected information may include:
- IP address
- Browser type and version
- Device type
- Operating system
- Time zone
- Referrer URL
- Pages visited and interactions
- Cookie identifiers
Purpose:
- Website functionality and security
- Fraud prevention
- Performance analysis
- Technical diagnostics
Legal Basis:
- Legitimate interest (Art. 6(1)(f) GDPR)
- Consent for non-essential cookies (Art. 6(1)(a) GDPR)
3.2 Order and Transaction Data
When you place an order, we collect:
- Full name
- Billing address
- Shipping address
- Email address
- Telephone number
- Order details
- Payment confirmation data
Payment data is processed securely by third-party payment service providers. We do not store full credit card details.
Purpose:
- Performance of contract (Art. 6(1)(b) GDPR)
- Legal obligations (tax/accounting laws) (Art. 6(1)(c))
- Fraud prevention (Art. 6(1)(f))
3.3 Account Data (If Applicable)
If you create an account:
- Login credentials
- Order history
- Saved preferences
Purpose:
- Customer account management
- Order tracking
- Improved user experience
Legal Basis: Contract performance.
3.4 Customer Support Data
Information provided in communications (email, contact form, complaints).
Purpose:
- Responding to inquiries
- After-sales service
- Handling disputes
Legal Basis:
- Contract performance
- Legitimate interest
3.5 Marketing Data
If you subscribe to newsletters:
- Email address
- Communication preferences
Purpose: Direct marketing communications.
Legal Basis: Consent (Art. 6(1)(a)).
You may withdraw consent at any time via unsubscribe link or email request.
4. Website Platform and Processors
Our Site is built using:
- WordPress
- WooCommerce
We engage data processors who process personal data on our behalf under Article 28 GDPR-compliant agreements, including:
- Hosting providers
- Payment service providers
- Logistics and courier services
- IT maintenance providers
- Accounting and legal advisors
We ensure that all processors provide sufficient guarantees of data protection compliance.
We do not sell or rent personal data.
5. International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards, including:
- EU Standard Contractual Clauses (SCCs)
- Adequacy decisions
- Equivalent legal protection mechanisms
6. Cookies and Tracking Technologies
We use cookies and similar technologies in accordance with GDPR and the ePrivacy Directive.
Categories of Cookies:
- Strictly necessary cookies – required for site functionality
- Analytics cookies – performance measurement
- Marketing cookies – advertising and remarketing (if used)
Non-essential cookies are activated only after obtaining user consent via a cookie consent mechanism.
Users may manage cookie preferences through browser settings or the Site’s cookie tool.
7. Data Retention
Personal data is retained only as long as necessary for:
- Contract performance
- Legal compliance (e.g., accounting retention up to 10 years where required)
- Fraud prevention
- Dispute resolution
After expiration of retention periods, data is securely deleted or anonymized.
8. Data Security
We implement appropriate technical and organizational measures, including:
- SSL/TLS encryption
- Secure hosting infrastructure
- Access controls and authentication measures
- Regular software updates
- Data minimization practices
While we take reasonable precautions, no transmission system can be guaranteed to be completely secure.
9. Data Subject Rights
Under GDPR Articles 15–22, you have the right to:
- Access personal data
- Rectify inaccurate data
- Request erasure (“right to be forgotten”)
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
Requests may be submitted to: [email protected]
We will respond within one month in accordance with GDPR.
You also have the right to lodge a complaint with the competent supervisory authority, including:
Information Commissioner of the Republic of Slovenia
Website: https://www.ip-rs.si
10. Automated Decision-Making
We do not carry out fully automated decision-making or profiling within the meaning of Article 22 GDPR that produces legal or similarly significant effects.
11. Children’s Privacy
The Site is not directed at children under 16 years of age. We do not knowingly collect personal data from minors without appropriate consent.
12. Changes to This Privacy Policy
We may amend this Privacy Policy from time to time to reflect legal, operational, or technical changes. Updated versions will be published on this page with a revised “Last Updated” date.
Where legally required, material changes will be communicated appropriately.