1. GENERAL PROVISIONS
Ikorp d.o.o. (hereinafter: the controller) collects and processes personal data of individuals in the course of its business activities. To provide you with basic information about the processing of personal data, we have prepared this Privacy Policy.
The policy contains several separate content sections as required by the General Data Protection Regulation (hereinafter: GDPR), divided according to the purpose for which personal data is processed.
The controller processes personal data obtained from you when you:
-
use the website segula.si,
-
place an order in our online store or order our services,
-
contact us via email or web form,
-
subscribe to our newsletters.
Controller’s information:
Website provider: www.segula.si is the company IKORP d.o.o.
Company name: IKORP d.o.o.
Address: Ljubljanska cesta 2A, 1295 Ivančna Gorica
Company registration number: 9213899000
Tax number: SI22595279
VAT payer: YES
Email: info@segula.si
Website Visit
This information on personal data processing is intended for individuals who visit the Segula.si website.
Purpose of processing and types of personal data
The controller processes your personal data when you visit the Segula.si website to monitor and ensure the operation and security of the website.
During the visit, the following data are processed:
-
time of access to the website,
-
your IP address,
-
URL of the webpage accessed,
-
browser settings and information about your device’s operating system,
-
content accessed on the website.
Processing of these personal data is necessary for the website visit, as they constitute so-called essential cookies. More about cookies can be found in the Cookie Policy.
Legal basis for processing personal data
This processing is based on the controller’s legitimate interest (Article 6(1)(f) GDPR).
Explanation of legitimate interests
The controller may process personal data of individuals using the website or shopping in the online store for:
-
Ensuring information security and operation of information systems
The controller processes personal data to ensure information security and functioning of information systems, network and data security, prevent unauthorized access, and respond to cybersecurity threats and incidents. This includes technical maintenance of websites and services. This applies to customers and third parties (e.g., website visitors). -
Prevention and detection of abuse and actions that may constitute criminal offenses
In case of suspicion of abuse or criminal acts, the controller may process data about website users to identify and prevent fraud or misuse (blacklist) and, if appropriate, share such data with authorities.
Categories of personal data users
The controller may share individual data with:
-
external IT service providers,
-
government authorities upon request or suspicion of criminal acts.
Data retention period
Data about website activity (e.g., IP addresses) will be stored only for the period defined in the Cookie Policy unless related to incidents or violations. Data collected during detected abuses are stored permanently.
Individual rights
You may request access to your data, correction, deletion (except in abuse/criminal cases), restriction, and objection to processing based on legitimate interests. Contact us at info@segula.si.
Right to lodge a complaint with the supervisory authority
The controller strives to process your personal data lawfully and protect them with appropriate technical and organizational measures. If you believe your data is processed unlawfully, you have the right to file a complaint with the Information Commissioner of the Republic of Slovenia (website: www.ip-rs.si).
For more information about analytical and advertising cookies used on the website, please follow the link to the Cookie Policy, which is part of this Privacy Policy.
FULFILLING CONTRACTUAL OBLIGATIONS OR PRE-CONTRACTUAL MEASURES
This section applies to individuals purchasing in the controller’s online store on Segula.si or ordering other services.
Purpose and types of personal data
The primary purpose of personal data processing during online purchases is to conclude and perform the sales contract between the individual and the controller. This includes monitoring customer satisfaction (including complaints) and managing contacts through various channels.
General Terms and Conditions apply for contract conclusion.
To purchase, you may create a user account and must provide:
-
full name,
-
delivery and billing address,
-
email,
-
phone number,
-
order details (status, items, quantity, date, price),
-
payment method, payment provider details, transaction status,
-
other optional notes in the “order comments” field.
These data are obtained directly from the individual. Providing mandatory data is a contractual obligation for purchase. Failure to provide them means the purchase cannot be completed.
Data will be used to contact the individual for order completion, coordination, delivery, and related communication. For delivery, the controller may share name, address, and phone number with the delivery company.
The controller may also use address data to perform direct marketing of its products.
Personal data may be processed to prevent and detect fraud or criminal acts, within necessary scope.
Legal basis for processing
The legal basis is contract performance or pre-contractual activities requested by the individual (Article 6(1)(b) GDPR).
Data may also be processed under legitimate interests (Article 6(1)(f) GDPR and Article 226(2) ZEKom-2).
Explanation of legitimate interests
The controller may process data for:
-
Direct marketing
For business goals, the controller may send promotional emails or physical mail (Article 226(2) ZEKom-2). Past or incomplete purchases may be analyzed for relevant marketing messages (product offers, coupons, event invitations). You may object at any time. -
Prevention of fraud and abuse
The controller maintains a blacklist of individuals suspected of fraud or illegal actions.
Categories of personal data users
The controller may share data with:
-
external IT service providers (website operation, maintenance, direct marketing),
-
postal service providers (delivery),
-
accounting services,
-
payment service providers,
-
government authorities on request or suspicion of crime,
-
government authorities within their legal powers (e.g., tax office).
Transfers to third countries or international organizations
Data from email communications or online purchases may be transferred to third countries. For newsletters, MailerLite (Ireland) is used, compliant with EU-US data protection framework and with contractual safeguards.
Data retention period
Contract data is stored 10 years after fulfillment. Longer retention may apply for legal reasons. Blacklist data is stored permanently. Personal data for direct marketing is processed until legitimate interest exists or objection is made.
Individual rights
You may request access, correction, restriction, and data portability by contacting info@segula.si.
You may object to direct marketing processing (Article 226(2) ZEKom-2). This does not affect lawfulness of prior processing or other legal bases. To object, unsubscribe via the link in marketing emails or contact info@segula.si.
Requests will be handled within one month, extendable by two months under conditions. Extensions will be notified.
Right to lodge a complaint
As above, complaints can be filed with www.ip-rs.si.
INQUIRIES SENT TO EMAIL OR CONTACT FORM
This section concerns individuals contacting via info@segula.si or contact forms.
Purpose and types of personal data
The controller processes data you provide in emails, forms, or chatbots to respond to your inquiries.
Legal basis
Processing is based on the controller’s legitimate interest (Article 6(1)(f) GDPR).
Data processed
-
contact details (name, email, phone),
-
message content (request description).
Data are processed for communication and not used for other purposes. Providing requested data is necessary to respond.
Period of Personal Data Retention
The controller will process personal data from the contact form until the purpose of processing is achieved, i.e., the conclusion of communication with the individual. If the communication constitutes part of a contract, the data will be retained in accordance with the defined retention period for online orders as specified in point 2 of this policy.
Individual Rights
An individual may exercise the right to access personal data, the right to correction, restriction of processing, deletion, or objection to processing. These rights can be exercised by contacting us at the email address info@segula.si.
We will ensure the fulfillment of your rights within one month of receiving the request, although this period may be extended by up to two months under certain conditions. If we extend the period, we will inform you of this and the reasons within one month of receiving the request.
SUBSCRIPTION TO E-NEWSLETTERS
This information about personal data processing is intended for individuals who subscribe to the controller’s electronic newsletters.
Purpose of Processing and Types of Personal Data
The purpose of processing is for the provider to inform subscribed users about news and offers of its products. Besides your IP address, the controller processes only your email address entered in the online form, as well as the date and time of subscription. For sending newsletters, we use the Mailerlite tool. Mailerlite may collect information about your interaction with our emails, including whether you open the emails and click on links within them. These data help us understand our reach and improve our content.
Legal Basis for Processing Personal Data
This processing is carried out based on the consent given by the individual (Article 6(1)(a) of the General Data Protection Regulation (GDPR)). When filling in the subscription form for newsletters, you confirm your consent that the controller may use your email address to inform you about news and that you are aware you can unsubscribe at any time by clicking the designated link in the received email.
Categories of Users
For technical aspects of setup, operation, and security in executing direct marketing, the controller cooperates with processors. The controller has appropriate data processing agreements with IT service providers.
Information About Transfers of Personal Data to Third Countries
Data from email communications is transferred to third countries since the controller uses services from Mailerlite (MailerLite Limited, 88 Harcourt Street, Dublin 2, D02 DK18, Ireland). The provider processes data according to the EU-US Data Privacy Framework (DPF) and has appropriate contractual clauses incorporated into its terms of service or data processing agreements.
Period of Personal Data Retention
Your email data will be stored until you unsubscribe from the email notification service.
Individual Rights
An individual can revoke the given consent at any time and without consequences. Consent can be revoked by unsubscribing from electronic newsletters via the link in the email. Revocation does not affect processing performed before the revocation, nor does it affect processing based on other legal grounds. An individual can also exercise the right to access personal data, the right to correction, restriction of processing, deletion, or data portability. These rights can be exercised by contacting us at info@segula.si.
We will record your unsubscription immediately, but it may take a few days for the system to activate it. We will fulfill other rights within one month of receiving the request, although this period may be extended by up to two months under certain conditions. If we extend the period, we will inform you of this and the reasons within one month of receiving the request.
CONTENT ON THE WEBSITE
Notices, posts, articles, products, texts, and other content published on the website (hereinafter: content) have been created with the best intent to provide visitors of the website (hereinafter: users) with useful and practical content for their work. The provider strives to maintain the website to ensure accuracy and correctness of this information and content as well as the proper functioning of forms.
The provider mainly publishes information about its services and products as well as its activities. The provider only publishes information that is (directly or indirectly) related to users. If information from other sources is published on the website, the source will be indicated or a web link to the source will be provided.
The provider reserves the right to change, add, or remove content or forms on the website without prior notice and assumes no responsibility for any consequences of such changes. Occasionally, the website may contain links to third-party websites. The provider cannot influence or accept responsibility for the accuracy of the content on those sites.
COPYRIGHT
The content, graphic, and other elements on the website are copyrighted and owned by the controller (IKORP d.o.o.) unless otherwise indicated in these general terms or directly next to the content or element.
CONTACT DETAILS
If you discover any errors, inaccuracies, outdated information, or other deficiencies on the website, please notify us at info@segula.si. You can also send requests for the removal of your personal data from the website to the same address.
Any individual can request the provider to remove their personal data published on the website, including images or video recordings in which they appear. The provider will immediately remove such personal data from the website.
Ivančna Gorica, 20 May 2025