1. Introduction
This privacy policy defines how the company Menstra d.o.o., Štihova ulica 13, 1000
Ljubljana, registration number: 7418353000, tax number: 86587587 (hereinafter:
the controller) collects, processes, and protects personal data of users of the online store
menstra.eu (hereinafter: the online store). We are committed to protecting your
privacy and personal data in accordance with applicable legislation, especially with the Personal Data Protection Act (ZVOP-2) and the General Data Protection Regulation (GDPR).
2. Collection of Personal Data
The controller collects personal data that users voluntarily provide during
registration, purchase, subscription to e-newsletters, or other interaction with the online store.
We collect the following types of data:
Identification data: name, surname, address, email address, telephone
number.
Purchase data: data on ordered products, payment method, purchase history.
Technical data: IP address, browser data, operating system, time and
date of access to the online store.
3. Purpose of Personal Data Processing
We collect and process personal data for the following purposes:
Order fulfillment: processing and delivery of ordered products, invoicing,
communication with the user regarding the order.
User support: resolving questions, complaints, and claims.
Marketing: sending e-newsletters, notifications about promotions and new products (only with explicit
user consent).
Service improvement: analysis of online store usage to optimize
user experience and offerings.
Fulfillment of legal obligations: maintaining records, fulfilling tax and
other legal requirements.
4. Legal Basis for Processing
We process personal data based on the following legal bases:
Contract: processing is necessary for the performance of a contract (purchase) or for taking
steps at the request of the individual prior to entering into a contract.
Legal obligation: processing is necessary for compliance with legal
obligations (e.g., tax legislation).
Consent: processing is based on the individual's consent (e.g., for
receiving e-newsletters).
Legitimate interests: processing is necessary for the legitimate interests of
the controller (e.g., improving services, preventing abuse).
5. Storage of Personal Data
We store personal data only for as long as necessary to fulfill the purposes for
which they were collected, or as long as required by applicable law. After the need for storage ceases,
the data is deleted or anonymized.
6. Users of Personal Data
We do not transfer personal data to third parties, except in cases where it is necessary for
the provision of services, e.g., delivery service, or when required by law. All contractual
processors are committed to protecting personal data in accordance with applicable legislation.
7. Individual Rights
Users have the right to:
Access to data: insight into collected personal data.
Correction of data: request for correction of inaccurate or incomplete data.
Erasure of data (right to be forgotten): request for deletion of personal data if there is no longer
a legal basis for their processing.
Restriction of processing: request for restriction of processing in certain cases.
Data portability: the right to receive personal data in a structured,
commonly used and machine-readable format, and the right to transmit this
data to another controller.
Objection: objection to the processing of personal data based on legitimate
interests.
Withdrawal of consent: withdrawal of consent for data processing, where processing
is based on consent.
To exercise these rights, you can contact us via e-mail: menstra@info.eu.
8. Data Protection
The controller uses appropriate technical and organizational measures to protect personal
data from unauthorized access, disclosure, alteration, or destruction. This
includes encryption, firewalls, access control, and regular backups.
9. Complaint
If you believe that your rights regarding the protection of personal data have been violated, you have the right
to file a complaint with the Information Commissioner of the Republic of Slovenia (Zaloška 59,
1000 Ljubljana, e-mail: gp.ip@ip-rs.si).
10. Changes to the Privacy Policy
The controller reserves the right to amend this privacy policy. We will notify users of all
changes by publishing them on the website. The privacy policy is valid from April 24, 2026.
Menstra d.o.o. Štihova ulica 13 1000 Ljubljana menstra@info.eu
