Privacy Policy
Last updated: 12.4.2026
This Privacy Policy describes how Kandelia (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit or make use of our website https://kandelia.shop/. We are committed to ensuring that your privacy is protected and that all personal data is handled in accordance with the EU General Data Protection Regulation (GDPR). For purposes of this Privacy Policy, “you” and “your” means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.
Please read this Privacy Policy carefully.
Data Controller
The data controller responsible for processing your personal data is KANDELIA, Pia Zorič s.p., Nanoška ulica 10, 1000 Ljubljana, Slovenia, and you can contact us at info@kandelia.si if you have any questions regarding your personal data or this Privacy Policy.
Information We Collect
When you use our website, we may collect certain personal information that you voluntarily provide to us as well as data that is collected automatically. This may include your name, email address, phone number, billing and shipping details if applicable, as well as any information you submit through contact forms or other communication channels.
In addition, we may automatically collect technical data such as your IP address, browser type, device information, and data about how you interact with our website. This may also include cookies and similar tracking technologies that help us improve your browsing experience.
How We Use Your Information
We use the information we collect for various purposes related to the operation and improvement of our website and services. This includes responding to your inquiries, providing customer support, processing orders where applicable, and sending you updates if you have subscribed to our communications.
We may also use your data to improve our website functionality, analyze user behavior, and ensure the security and proper functioning of our systems. Where you have given consent, we may also use your data for marketing purposes such as newsletters or promotional updates.
Legal Basis for Processing
We only process your personal data when we have a valid legal basis to do so under GDPR. This may include your consent, the necessity to perform a contract with you, compliance with legal obligations, or our legitimate interest in operating and improving our services.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to ensure the website functions properly, to understand how users interact with it, and to improve overall user experience. Some cookies are essential for the website to work, while others may be used for analytics or marketing purposes and are only activated with your consent.
You can manage or disable cookies through your browser settings at any time, although this may affect certain functionalities of the website.
Sharin Your Data
We do not sell your personal data. However, we may share it with trusted third-party service providers who assist us in operating our website and delivering services to you. These may include hosting providers, analytics services, email marketing platforms, and payment processors if applicable.
All third-party providers are required to handle your data securely and in compliance with applicable data protection laws.
Data Retention
We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Once your data is no longer needed, it will be securely deleted or anonymised.
Your Rights Under GDPR
As a data subject under GDPR, you have the right to access the personal data we hold about you, request corrections to inaccurate data, request deletion of your data, and restrict or object to certain types of processing. You also have the right to withdraw your consent at any time where processing is based on consent, as well as the right to lodge a complaint with your local data protection authority.
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. However, please note that no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Third-Party Services
In some cases, we may rely on third-party services to operate certain parts of our website or business. These providers may process your data on our behalf and are obligated to comply with GDPR and maintain appropriate security measures.
International Transfers
If your personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place to protect your data, such as Standard Contractual Clauses approved by the European Commission.
Changes To This Policy
We may update this Privacy Policy from time to time in order to reflect changes in legal requirements or our practices. Any updates will be posted on this page, and the “last updated” date will be revised accordingly.