GENERAL INFORMATION ON DATA PROCESSING
The data controller is Rok Goljar s.p., registration number 49963538, Suhadolčanova ulica 38, 1231 Ljubljana-Črnuče.
By accessing and using the website, various information and data are exchanged between your device and the server, which may include personal data as defined under the EU General Data Protection Regulation (Regulation (EU) 2016/679, hereinafter “the GDPR”) and the applicable Slovenian personal data protection legislation. Below we outline the data exchanges and precisely define their purpose, legal basis, and rationale.
The website is accessible via the HTTPS secure protocol, which ensures an encrypted connection and data exchange. Our servers are also kept up to date with the latest software versions, which further enhances security.
PERSONAL DATA AND PROCESSING
Personal data is any information that identifies you as a specific or identifiable individual. The data controller, in accordance with the purposes defined in this privacy policy, collects the following personal data:
- Basic customer data collected when placing an order in the online store (first name, last name, address, email address, and phone number) and when registering as a user in the online store (username, email address, and access password).
- Data on user purchases and issued invoices
- Device IP address
- and the operating system in use
The data controller does not collect or process your personal data unless you provide or consent to it, or unless there is a legal basis for processing and the controller has a legitimate interest in doing so.
DATA PROCESSING BASED ON LAW OR CONTRACTUAL RELATIONSHIP
PURCHASE IN THE ONLINE STORE
In order to enter into and perform a contract with the data controller (i.e. making a purchase in the online store), you must provide personal data for the purposes of contract conclusion. Processing an order in the online store is not possible without submitting personal data.
When processing your order, we transfer your data to an accounting system registered in the EU that demonstrates appropriate technical and organisational measures in compliance with the GDPR for the secure processing of your personal data.
We also share your personal data with a delivery service registered in the EU that demonstrates appropriate technical and organisational measures in compliance with the GDPR for the secure processing of your personal data.
SENDING PROMOTIONAL MESSAGES
In accordance with Article 158(2) of the Electronic Communications Act (ZEKom-1), the data controller may send you electronic messages about promotions or new offerings to the email address you provided when placing your order. Your email address will under no circumstances be shared with third parties, and you always have the option to unsubscribe from promotional messages by clicking the link within the message itself. The data controller always respects your decision, and the unsubscription is processed automatically and takes effect immediately.
DATA PROCESSING BASED ON LEGITIMATE INTEREST
In accordance with the GDPR, the data controller may also process data on the basis of legitimate interest. The data controller always strives to ensure that the rights and freedoms of the individual or website visitor take precedence over such interests. If you do not wish your data to be processed, or if you wish to request deletion or termination of processing, you may notify us by email at
info@yourpokerway.com.
GENERAL STATISTICAL PROCESSING
For the purposes of website optimisation, monitoring proper website functionality, analysing sales, repeat purchases, and customer behaviour, as well as for business optimisation and measuring business performance, we use the Google Analytics tool. We use it to track sales by channel, the frequency and value of repeat purchases, responses to advertising campaigns, and general visitor statistics. We use IP address anonymisation, meaning your IP address is never transmitted in full. Once anonymised, it is no longer possible to identify you, so Google Analytics cannot link your device to any other Google data.
ACCESS TO ORDER HISTORY AND OTHER DATA
When you call or send an email, employees of the data controller or its contracted business partners involved in delivering services may — if you provide your personal data or order/invoice number — access your order history and personal data. This allows them to offer you better service, tailored offers, and effective resolution of any complaints.
PERSONALISED COMMUNICATION WITH EXISTING AND POTENTIAL CUSTOMERS
Personalised communication (via email, browser notifications, or social media) is used to present relevant offers, send discounts and other content that may be of interest to you based on your past interactions with our website. For this purpose we use demographic data (gender, age, and location), purchase history (products purchased, number of purchases), engagement and product views (email opens, link clicks), and behavioural data and browsing patterns on the website, which may trigger the sending of personalised messages.
In our personalised communication, we never create individual user profiles, nor do we profile you or focus on your personal data — we process data only at the level of broader groups, which prevents identification of you as an individual.
DATA PROCESSING BASED ON CONSENT
The data controller may process and collect your personal data if you provide consent, for the purposes of verifying and ensuring access to and use of your online account created by registering on the website, and for sending promotional messages and other content by email where there is no other legal basis and you have given explicit consent. The data controller may also process and collect your personal data for other purposes, but only if you have been clearly informed of those purposes and have given explicit consent.
If you do not wish your data to be processed, or if you wish to request deletion or termination of processing, you may notify us by email at
info@yourpokerway.com.
COOKIES
To ensure an excellent user experience, maintain statistics, and monitor website performance, we use cookies. Our analytical cookies include IP address anonymisation, so your personal data is not shared with third parties.
You can control and manage cookies in various ways. Please note that removing or blocking cookies may negatively affect your user experience and access to certain pages of our online store.
Most browsers automatically accept cookies, but you can configure whether to accept them through your browser’s control settings, usually found in the “Tools” or “Settings” menu. For more information on how to change browser settings or how to block, manage, or filter cookies, visit:
www.allaboutcookies.org.
RETENTION OF PERSONAL DATA
The data controller retains your data for as long as necessary to fulfil the purpose for which the personal data was collected and processed. Where a specific law prescribes a retention period, the data controller processes the data in accordance with that law.
If you have placed, completed, and received an order, we retain order data on the server for 2 years from the date of receipt. If you submit a request for deletion of your data from our databases, we may delete it sooner, with the exception of invoice data which, under applicable legislation, may not be deleted and must be retained by the data controller for 5 years.
Data in analytical tools (Google Analytics) is deleted after 26 months.
DATA PROCESSING BASED ON CONTRACT
By using the website, you acknowledge that the data controller may also entrust your personal data to contracted processors, who may process the data solely on behalf of the data controller and within the scope of the controller’s authorisation. We work with the following contracted processors:
- Provider of the accounting software and customer relationship management system,
- Two business partners, for the purposes of event organisation and the coaching process.
Your privacy matters greatly to us, which is why the data controller will never share your personal data with unauthorised third parties. The data controller works exclusively with verified contracted processors whose software is compliant with the GDPR.
In the event of transferring personal data to third countries outside the EU, the data controller ensures that such transfer is justified by a Commission adequacy decision, or by specific contractual clauses between the controller and the processor or recipient in the third country, in accordance with Article 46 of Regulation (EU) 2016/679.
YOUR RIGHTS
In accordance with Articles 15, 16, 17, 18, 20, and 21 of the GDPR, you have the right to obtain information about your personal data held by us, the right to rectification and completion of data, the right to erasure, the right to restriction of processing, the right to object, and the right to data portability.
You may submit a request for a copy of the data we hold by email at
info@yourpokerway.com or in writing to our postal address. You may also submit requests for deletion or modification of data to the same email address.
For more information about data processing or if you have additional questions, please contact us via the email address above or by written request to the company’s address.
You have the right to withdraw consent at any time, and to lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, Ljubljana, +386 1 230 97 30,
gp.ip@ip-rs.si.
Date of last amendment to this privacy notice: March 2026
