Privacy policy

Last updated: 01 May 2026

1) Controller and contact

Lazar projekt d.o.o., Dragomelj 4, 1230 Domžale
Registration no.: 6415997000 • VAT ID: SI 68064721
E-mail: info@lazar-projekt.si • Phone: +386 41 624 442
Contact for questions regarding personal data protection: info@lazar-projekt.si

2) What data we process

  • Order/invoice: first name, last name, e-mail address, phone number, address(es), order contents, amounts and payment method.

  • User account/support: e-mail address, name, order history and communication.

  • Technical data: IP address, browser/device data and cookies (see Cookie Policy).

  • Marketing (with consent): e-mail address/phone number for newsletters.

3) Purposes and legal bases

  • Purchase processing, delivery and support (GDPR Article 6(1)(b)).

  • Accounting and tax obligations (GDPR Article 6(1)(c); invoices are retained for 10 years).

  • Security and prevention of abuse (GDPR Article 6(1)(f)).

  • Newsletters/advertising and non-essential cookies (GDPR Article 6(1)(a) – consent, unsubscribe at any time).

4) Processors, Shopify and transfers

For the operation of the online store, we use processors who process data only according to our instructions: Shopify (platform/hosting), payment provider (e.g. Shopify Payments/Stripe), delivery services, accounting/IT services and, where applicable, analytics/advertising providers.
Shopify may also process data outside the EU, for example in Canada or the USA. Standard contractual clauses or other appropriate transfer mechanisms are used in such cases. More information about Shopify’s data processing is available in Shopify’s Privacy Policy.

5) Retention

  • Invoices/accounting records: 10 years.

  • Order data: in accordance with limitation periods and evidentiary requirements.

  • User account: until deletion.

  • Marketing: until unsubscribe/withdrawal of consent.

  • Cookies: until the expiry of each individual cookie (see Cookie Policy).

6) Rights of individuals

Access, rectification, erasure, restriction of processing, objection, data portability and withdrawal of consent. Send your request to info@lazar-projekt.si.
Complaint: Information Commissioner of the Republic of Slovenia (www.ip-rs.si).

7) Children

The service is not intended for children. For information society services in Slovenia, the age of consent is 15 years. Younger persons require the consent of the holder of parental responsibility.

8) Cookies

We use essential cookies for the operation of the website/cart and analytical/marketing cookies only with consent through the cookie banner. More information is available in the Cookie Policy (link in the website footer).

9) Security

We implement technical and organisational measures, including encryption, restricted access and backups. Secure procedures of the payment provider are used for payments.

10) Changes to this Policy

We may update this Policy from time to time. The updated Policy becomes effective when published on this page. The latest version always includes the “Last updated” date.