Privacy Policy

The data controller is: UM Infiniti trgovina, proizvodnja in svetovanje d.o.o., Celovška cesta 108, 1000 Ljubljana, Slovenia (registration number: 7572956000).

For any privacy-related questions, contact us at info@imoortalis.si.

When you register or place an order: your name, email address, password (stored only in encrypted form, never as plain text), shipping address, phone number, and — for orders placed as a company — the company name and tax number.

If you sign in with Google or Facebook, we receive your name, email address, and profile picture from the provider to create your account.

Your order history and cart contents, so we can process your purchase and show you past orders.

Whether you've subscribed to our email newsletter (see section 5).

If you choose “Accept all” in the cookie banner, we collect usage data through Google Analytics and Google Ads: pages viewed, cart and checkout actions, order value, device and browser type, and approximate location.

Processing your order, delivery, and issuing an invoice: based on performance of a contract with you (Article 6(1)(b) GDPR).

Meeting our tax and accounting obligations (e.g. retaining issued invoices): based on a legal obligation (Article 6(1)(c) GDPR).

Managing your account and answering your questions: based on performance of a contract and/or our legitimate interest in providing the service (Article 6(1)(b) and (f) GDPR).

Sending the email newsletter: based on your consent (Article 6(1)(a) GDPR) — see section 5.

Abandoned-cart reminder: based on our legitimate interest in reminding you of a purchase you started yourself (Article 6(1)(f) GDPR) — see section 6.

Visit analytics and ad performance measurement (Google Analytics, Google Ads): the legal basis is your consent (Article 6(1)(a) GDPR and electronic communications law). We do not use remarketing.

Payment cards and Flik: NLB d.d. and Bankart d.o.o. process the data needed to authorize payment. We never see or store your payment card details.

PayPal: when you pay via PayPal, your data is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A.

Delivery: we share your name, address, and phone number, as needed for delivery, with Pošta Slovenije d.o.o.

Accounting and invoicing: we use the Minimax accounting platform (operated by SAOP d.o.o.) to issue and fiscally verify invoices; invoice data is also reported to the Slovenian Financial Administration (FURS) as required by law.

Hosting: our website is hosted by Contabo GmbH (Germany), and our email is sent through our email hosting provider, Webtasy, spletne storitve, d.o.o. (Domenca), Dunajska cesta 110, 1000 Ljubljana.

If you sign in with Google or Facebook, those providers act as independent controllers of your data under their own privacy policies.

Google: if you choose “Accept all”, Google Ireland Limited processes usage data (Google Analytics, Google Ads) for analytics and measuring the performance of our ads.

If you check "Subscribe to newsletter" when registering or in your account, we'll occasionally email you news about products and offers. This is based on your consent.

Subscribing is not a condition of purchasing or using the store. You can withdraw your consent at any time by emailing info@imoortalis.si.

If you're logged in and add products to your cart but don't complete checkout, we send one reminder email about 30 minutes after the last cart change. This is sent only to logged-in users, and only once per abandoned cart.

If you'd rather not receive this, email info@imoortalis.si and we'll exclude you from these reminders.

Our main processors (NLB, Bankart, Pošta Slovenije, Minimax/SAOP, Contabo, Webtasy/Domenca) process data within the EU. Payments via PayPal and sign-in via Google/Facebook may involve processing outside the EEA; those providers govern such transfers under their own safeguards (e.g. standard contractual clauses) and privacy policies.

With Google Analytics and Google Ads, data may be transferred to the USA; Google governs this under its own safeguards (e.g. the EU–US Data Privacy Framework, standard contractual clauses).

Details about the cookies used by the store are described on the cookie policy page.

You can withdraw your cookie consent at any time by deleting this site's cookies in your browser and choosing “Reject all” on your next visit.

We keep issued invoices for 10 years from the end of the year they relate to, as required by the Slovenian VAT Act (ZDDV-1).

Other order data is kept for as long as your account remains active, or until you request deletion (see section 10), except for data we must keep longer under the legal obligation above.

Newsletter subscription data is kept until you unsubscribe or withdraw consent.

Usage data in Google Analytics (if you chose “Accept all”) is kept for up to 14 months.

Under the General Data Protection Regulation (GDPR), you have the right to access, correct, delete, restrict the processing of, object to, and port your personal data, and the right to withdraw consent (e.g. for the newsletter) at any time, without affecting the lawfulness of processing before the withdrawal.

To delete your account and personal data, email us at info@imoortalis.si with a deletion request. We will handle the request without undue delay, within 30 days at the latest. Data we are legally required to keep longer (e.g. issued invoices) cannot be deleted before the statutory retention period expires.

If you believe your data is not being processed lawfully, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia.