Privacy Policy

Last updated: 17 July 2026

Data controller

The website stenalesena.com (hereinafter: Website) is operated by StenaLesena. This policy explains what personal data we collect when you use the Website and our online store, why we collect it, and what rights you have. For any privacy matter, contact us using the details at the bottom of this page.

What data we collect

When you place an order we collect your name, delivery address, e-mail address, phone number and the details of your order. Payments are processed by external payment providers (e.g. card processors, PayPal) — we never see or store your full payment card data. When you contact us we keep your message and contact details. With your consent we also collect anonymised usage statistics (see Web analytics).

Purposes and legal bases

Order data is processed to fulfil the contract (delivery, invoicing, warranty and complaints). Inquiry data is processed on the basis of our legitimate interest in responding to you. Analytics data is processed only on the basis of your consent, which you may withdraw at any time.

Web analytics

We use Google Analytics 4 to understand how visitors use the Website. It is loaded only after you accept analytics cookies in the cookie banner. Google LLC acts as our processor and may process usage data (pages viewed, device and browser information, approximate location derived from IP). You can withdraw consent at any time by clearing your browser data for this site, after which the banner will appear again.

Cookies and local storage

Essential: a single localStorage entry 'stenalesena-cookie-consent' stores your cookie choice (kept until you clear it). Analytics (only after consent): Google Analytics cookies '_ga' and '_ga_*', which distinguish visitors and expire after up to 2 years. We use no advertising or third-party marketing cookies.

Sharing of data

We share data only with service providers needed to run the store: payment providers, delivery services and Google (analytics, only with consent). We never sell personal data. Providers may process data outside the EU only under valid safeguards (e.g. EU standard contractual clauses).

Retention

Order and invoice data is kept for the period required by tax legislation (10 years for invoices). Inquiries are kept until resolved and for a reasonable time thereafter. Analytics data is retained for 14 months.

Your rights

You have the right to access, rectify or erase your personal data, restrict or object to processing, data portability and to withdraw consent at any time. You may also lodge a complaint with the Slovenian Information Commissioner (Informacijski pooblaščenec).

Changes to this policy

We may update this policy from time to time. The current version with the date of the last change is always published on this page.

Contact

For privacy-related questions or to exercise your rights, contact us via the contact options published on the Website.