Privacy Policy | DmitriX

At Dmitrix, we value your privacy and recognize the responsibility that comes with handling your personal data. All personal data you provide to us is treated confidentially and in accordance with the General Data Protection Regulation (GDPR), the Personal Data Protection Act (ZVOP-2), and the Electronic Communications Act (ZEKom-1).

This privacy policy outlines how we collect, use, disclose, and protect your data when you visit our website or make a purchase.

1. Personal Data Controller

The controller of personal data collected on the website dmitrix.vercel.app is:

Company: Dmitry Surchin, s.p.
Company Headquarters: Trg komandanta Staneta 8, 1000, Ljubljana, Slovenia
Registration Number: 9463704000
Email: info@dmitrix.eu

2. What personal data do we collect and why?

We collect your personal data only when it is absolutely necessary for the execution of your order or to improve your user experience:

Order fulfillment data: Name, surname, delivery address, billing address, telephone number, and email address. We need this data to process your order, issue an invoice, and deliver the device.
Payment data: Credit card data or other payment methods are processed through secure and encrypted payment gateways and are not stored on our servers.
Communication: If you contact us via email, we collect your email address and the content of your message to resolve your inquiry.
Technical data: To ensure security and analyze website performance, we collect IP address, browser, and operating system data (via cookies).

3. Legal basis for data processing

We process your personal data on the following legal bases:

Fulfillment of contractual obligation: Processing is necessary for the execution of the purchase and delivery of goods.
Legal obligation: We must retain accounting data in accordance with tax legislation.
Consent: For the purposes of direct marketing (e.g., newsletters) or analytical cookies, we process data only if you give explicit consent.

4. Use of the Shopify platform and data transfer

Our online store uses the Shopify platform to process order data and manage the shopping cart. Your data is stored through Shopify's secure database. Shopify ensures a high level of data security and complies with relevant international standards for data transfer within the EU.

5. Who has access to your data?

In addition to the controller, only our contractual partners, who are strictly committed to privacy protection, have access to certain personal data:

Delivery service: Pošta Slovenije / GLS, to whom we provide your name, address, and telephone number for the purpose of package delivery.
Payment service providers: For secure transaction processing.
External accounting service: For the purpose of booking issued invoices in accordance with legislation.

Under no circumstances will we sell, lend, or transfer your data to unauthorized third parties.

6. Data retention period

We retain personal data only for as long as necessary to achieve the purpose for which it was collected:

Data on received orders and invoices are retained for 10 years due to tax laws.
Data for resolving warranty claims or complaints are retained until the expiration of the device's warranty period (12 months for used devices).
Data collected based on consent (e.g., cookies) are retained until consent is revoked.

7. Your rights

You have the following rights regarding your personal data at any time:

Right of access: You can request a printout of the data we hold about you.
Right to rectification: You can request immediate correction of inaccurate or incomplete data.
Right to erasure (Right to be forgotten): You can request the erasure of your data if there is no legal reason for their continued retention (e.g., tax laws).
Right to restriction of processing and Right to object.

All requests regarding the exercise of your rights can be sent to us at the email address info@dmitrix.eu. We will respond to you as soon as possible, but no later than within 30 days. If you believe that your rights have been violated, you can contact the Information Commissioner of the Republic of Slovenia.

8. Changes to the privacy policy

We reserve the right to update this privacy policy from time to time to adapt it to changes in legislation or our operations. Any changes will be published on this page.