Privacy Policy

HomePrivacy Policy

Privacy Policy

  1. Personal Data Controller

The controller of personal data processed through the Elato website and online store is:

AGORAVET, pakiranje, d.o.o.
Ulica Alojza Kajina 4
1000 Ljubljana
Slovenia

Company registration number: 8702403000
VAT ID: SI87951002
E-mail: info@agoravet.net
Telephone: +386 69 788 903
Website: https://elato-pet.com/

  1. Personal Data We Collect

Depending on how you use the website or online store, we may process, in particular, the following personal data:

  • first and last name;
  • delivery and billing address;
  • e-mail address;
  • telephone number;
  • information relating to orders, payments, refunds and complaints;
  • information associated with a user account, if the user creates one;
  • the content of communications sent via contact forms or e-mail;
  • technical data relating to the use of the website, such as IP address, browser type, device information, access logs and similar technical data;
  • information regarding consent and cookie preferences, where applicable.

Providing certain personal data is necessary for entering into and performing a contract or processing an order. If a customer does not provide the data required to process an order, the order cannot be properly completed.

  1. Purposes and Legal Bases for Processing

We process personal data only for specified, explicit and lawful purposes. Depending on the individual case, processing is based on the performance of a contract, compliance with a legal obligation, legitimate interests or the user’s consent.

  • processing, confirming and fulfilling orders and entering into and performing a sales contract;
  • arranging delivery of ordered products;
  • processing payments, refunds and any financial claims;
  • communicating with customers and responding to enquiries;
  • handling complaints, returns and other requests;
  • maintaining accounting, tax and other records required by law;
  • ensuring the security, stability and proper functioning of the website and preventing misuse and fraud;
  • analytics and marketing activities, where valid user consent is required and has been obtained.
  1. Payments and WooPayments

The online store uses WooPayments for processing electronic payments. WooPayments is a payment solution provided by WooCommerce and is technically connected to Stripe’s payment infrastructure.

When a payment is made, information necessary to process the transaction may be provided to the payment service provider, including first and last name, e-mail address, telephone number, billing address, payment amount and currency, order information, IP address and other technical or transaction-related information.

Full payment card details are not stored on the Elato online store server. Payment information is processed through the secure payment infrastructure of the payment service provider.

The payment service provider may use automated tools to assess transaction risks for the purposes of preventing misuse and fraud.

Further information on how Stripe processes personal data is available in Stripe’s Privacy Policy and Privacy Center:

https://stripe.com/privacy
https://stripe.com/legal/privacy-center

  1. Disclosure of Personal Data to Contractual Partners

We may disclose personal data to contractual partners or other recipients where this is necessary to fulfil an order, operate the online store or comply with legal obligations.

Such recipients may include, in particular:

  • payment service providers, including WooPayments and Stripe;
  • delivery or courier services selected by the seller for the delivery of orders;
  • website hosting and IT infrastructure providers;
  • providers of technical support, maintenance and website security services;
  • accounting, tax or other professional service providers, where necessary;
  • competent public authorities, where disclosure is required by applicable law.

Contractual processors may process personal data only within the scope of the agreed services and in accordance with applicable personal data protection legislation.

  1. Transfers of Data Outside the European Economic Area

Some service providers used by the online store are international companies. Therefore, in certain cases, personal data may be transferred to or accessed from countries outside the European Economic Area (EEA).

Where such transfers take place, appropriate legal mechanisms and safeguards permitted under the General Data Protection Regulation (GDPR) are used, such as adequacy decisions, the European Commission’s Standard Contractual Clauses or other valid mechanisms for lawful international data transfers.

Stripe uses several such mechanisms for international data transfers, including appropriate Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

  1. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or for as long as required by applicable law.

Data relating to orders, invoices, payments and other business documentation is retained in accordance with applicable tax, accounting and other legal requirements.

Data processed on the basis of consent is generally processed until consent is withdrawn or until the end of the period for which the consent was given, unless another lawful basis exists for continued retention.

Technical and security-related data is retained for as long as reasonably necessary to ensure the security and proper functioning of the website.

  1. Rights of Individuals

In accordance with applicable law and subject to the relevant legal requirements, individuals have the right to:

  • access their personal data;
  • rectify inaccurate or incomplete personal data;
  • request the erasure of personal data;
  • request restriction of processing;
  • object to processing;
  • data portability;
  • withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out before consent was withdrawn.

Requests relating to the exercise of these rights may be sent to: info@agoravet.net

For the protection of personal data, we may request additional information necessary to verify the identity of the person making the request before acting on it.

  1. Right to Lodge a Complaint with the Supervisory Authority

If an individual believes that their personal data is being processed in violation of applicable law, they have the right to lodge a complaint with the competent supervisory authority.

In the Republic of Slovenia, the competent supervisory authority is:

Information Commissioner
Dunajska cesta 22
1000 Ljubljana
Slovenia

E-mail: gp.ip@ip-rs.si
Website: https://www.ip-rs.si/

  1. Security of Personal Data

AGORAVET, pakiranje, d.o.o. applies reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, misuse or disclosure.

Despite the use of appropriate safeguards, complete security of data transmission or storage over the internet cannot be guaranteed.

  1. Cookies and Similar Technologies

The website uses necessary cookies required for the proper functioning of the website and online store.

Other types of cookies or similar technologies are used only in accordance with applicable law and, where required, on the basis of the user’s consent.

Further information about the types of cookies used, the purposes for which they are used and the available consent management options is provided in the Cookie Policy.

  1. Changes to this Privacy Policy

AGORAVET, pakiranje, d.o.o. may amend this Privacy Policy from time to time due to changes in legislation, services, technology or business practices.

The current version is always published on the Elato website.

This Privacy Policy applies from the date of its publication on the website.

  1. Contact

For questions regarding the processing of personal data or the exercise of your rights, please contact us at:

E-mail: info@agoravet.net

AGORAVET, pakiranje, d.o.o.
Ulica Alojza Kajina 4
1000 Ljubljana
Slovenia