Pravilnik o zasebnosti

Last updated: August 2026

At SOLARAE, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, make a purchase, contact us or otherwise interact with SOLARAE.

1. Who We Are

The controller responsible for your personal data is:

SOLARAE D.O.O.
Zrkovska cesta 87
2000 Maribor
Slovenia

VAT number: 33771880
Company registration number: 7527497000

Email: hello@solarae.eu

SOLARAE D.O.O. processes personal data in accordance with the General Data Protection Regulation (GDPR), applicable Slovenian data-protection legislation including ZVOP-2, and other applicable laws. ZVOP-2 supplements the GDPR framework in Slovenia.

2. Personal Data We Collect

Depending on how you interact with SOLARAE, we may collect information such as:

Contact information
Your name, surname, email address, telephone number, billing address and delivery address.

Order information
Products purchased, order number, order value, shipping information, returns, refunds and warranty requests.

Payment information
Information necessary to process your payment. Payments may be processed by third-party payment providers, and SOLARAE does not necessarily receive or store your complete payment card information.

Account information
If customer accounts are available, we may process information associated with your account.

Customer support information
Information you provide when contacting us, including emails, messages, complaints, questions, returns and warranty claims.

Technical and device information
Depending on your cookie choices and website configuration, this may include your IP address, browser type, device information, operating system and information about how you interact with our website.

Marketing information
Your marketing preferences and, where applicable, information about your interaction with our emails or advertisements.

3. How We Use Your Personal Data

We may process your personal data to:

process and fulfil your orders;
process payments;
arrange shipping and delivery;
send order and shipping confirmations;
manage returns and refunds;
handle warranty claims;
provide customer support;
respond to questions and complaints;
maintain the security and functionality of our website;
prevent fraud and misuse;
comply with accounting, tax and other legal obligations;
improve our website, products and customer experience;
send marketing communications where legally permitted;
measure advertising and website performance where you have provided any required consent.

We will not use your personal data for purposes incompatible with those for which it was collected unless permitted by applicable law.

4. Legal Bases for Processing

Under the GDPR, we must have a valid legal basis for processing personal data.

Depending on the situation, we may rely on:

Performance of a contract
We process information necessary to process your order, receive payment, deliver your products and provide customer service relating to your purchase.

Legal obligations
Certain information must be processed and retained to comply with accounting, tax, consumer protection and other legal requirements.

Legitimate interests
We may process certain information where necessary for our legitimate business interests, for example to protect our website, prevent fraud, manage our business or defend legal claims, provided those interests do not override your fundamental rights and freedoms.

Consent
Where required, we rely on your consent for activities such as certain marketing communications, analytics technologies and advertising cookies.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn. GDPR requires the privacy notice to identify the purpose and legal basis for processing and, when legitimate interests are relied upon, the relevant legitimate interests.

5. Orders & Payments

When you place an order, we process the information necessary to complete your purchase.

This may include your name, contact details, billing and delivery address, order details and information required for payment processing.

Payment transactions may be processed by external payment providers. These providers may process your information according to their own privacy policies and applicable legal obligations.

We only receive the payment information necessary for us to confirm and administer your transaction.

6. Shopify

Our online store is powered by Shopify.

Shopify may process certain personal information on our behalf to provide the ecommerce infrastructure necessary to operate our store, including website hosting, checkout and other ecommerce functionality.

Depending on the services used, information may be processed in countries outside your country of residence.

Where international transfers of personal data take place, appropriate safeguards must be used where required under the GDPR.

7. Shipping & Delivery Providers

To deliver your order, we may share necessary personal information with shipping, logistics and delivery providers.

This may include your:

name;
delivery address;
email address;
telephone number;
order or shipment information.

Only information reasonably necessary to provide the delivery service will be shared.

8. Email Marketing

If you subscribe to our newsletter or otherwise validly consent to marketing communications, we may use your email address to send you SOLARAE news, product information, special offers and other marketing content.

Where required, we will only send such communications after obtaining the appropriate consent or where another lawful basis permits us to do so.

You may unsubscribe at any time by using the unsubscribe link contained in our marketing emails or by contacting us at:

hello@solarae.eu

Withdrawing your marketing consent will not affect transactional communications relating to an order you have placed.

9. Cookies & Similar Technologies

We use cookies and similar technologies to operate our website and, depending on your choices, for functionality, analytics and marketing purposes.

Strictly necessary cookies may be used without consent where permitted because they are required for essential website functionality.

Optional analytics and marketing technologies will only be used where an appropriate legal basis exists and any legally required consent has been obtained.

For more information, please see our Cookie Policy and the cookie settings available on our website.

10. Who We Share Personal Data With

Where necessary, we may share personal data with categories of recipients such as:

Shopify and ecommerce technology providers;
payment processors;
banks and payment networks;
shipping and logistics providers;
email and customer communication providers;
website hosting and IT service providers;
analytics and advertising providers where permitted;
accountants, legal advisers and other professional advisers;
public authorities where required by law.

We do not sell your personal data.

Service providers acting on our behalf are expected to process information only for authorised purposes and in accordance with applicable data-protection requirements.

GDPR requires consumers to be informed about recipients or categories of recipients of their data.

11. International Data Transfers

Some of our service providers may process personal data outside Slovenia or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we take steps to ensure that the transfer complies with applicable data-protection legislation.

Depending on the destination and provider, this may include reliance on an adequacy decision adopted by the European Commission or appropriate safeguards such as Standard Contractual Clauses.

GDPR requires information about transfers to third countries and the applicable safeguards to be provided where relevant.

12. How Long We Keep Your Data

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to comply with applicable legal requirements.

Retention periods may depend on the type of information and purpose of processing.

For example, order, invoice and transaction information may be retained for the period required under applicable accounting and tax legislation.

Customer service, warranty and complaint information may be retained for the period necessary to resolve the matter and establish, exercise or defend potential legal claims.

Marketing information may be retained until you withdraw your consent or unsubscribe, unless another lawful basis applies.

GDPR requires businesses to disclose either the retention period or the criteria used to determine it.

13. How We Protect Your Information

We take reasonable technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no method of transmitting or storing information electronically can guarantee absolute security.

14. Your Privacy Rights

Subject to the requirements and limitations provided by applicable law, you may have the right to:

access the personal data we hold about you;
request correction of inaccurate or incomplete information;
request deletion of your personal data;
request restriction of processing;
object to certain processing;
request data portability where applicable;
withdraw consent at any time where processing is based on consent;
lodge a complaint with a supervisory authority.

These rights are expressly included among the transparency requirements under GDPR Article 13.

To exercise your rights, contact:

hello@solarae.eu

We may need to verify your identity before processing certain requests.

15. Right to Lodge a Complaint

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority.

In Slovenia, the supervisory authority is the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec). ZVOP-2 regulates the Slovenian implementation and enforcement framework alongside the GDPR.

You may also have the right to contact the competent supervisory authority in another EU/EEA Member State where applicable.

16. Automated Decision-Making

SOLARAE does not intend to make decisions producing legal or similarly significant effects solely through automated processing unless this is specifically disclosed and permitted by applicable law.

Certain ecommerce, fraud-prevention, analytics or advertising services may nevertheless use automated technologies to provide their services.

Where GDPR requires additional information regarding automated decision-making or profiling, we will provide it. Article 13 specifically requires disclosure of qualifying automated decision-making and meaningful information about its logic and expected consequences.

17. Children's Privacy

Our products and online store are intended for adults.

We do not knowingly collect personal information from children in circumstances where parental consent or another legal basis would be required.

If you believe a child has provided us with personal information improperly, please contact us at hello@solarae.eu.

18. Third-Party Links

Our website may contain links to third-party websites or services.

SOLARAE is not responsible for the privacy practices of independent third parties.

We encourage you to review their privacy policies before providing personal information.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, service providers or applicable legal requirements.

The latest version will be published on this page and the Last updated date will be revised accordingly.

20. Contact Us

If you have questions about this Privacy Policy or would like to exercise your data-protection rights, please contact: