Privacy & cookies
Controller and contact
The controller is Trgovina s športno opremo, Luka Polanc s.p., Cvetlična ulica 11, 5290 Šempeter pri Gorici, Slovenia, registration number 9846956000, tax number 71337695. For questions and requests about personal data, write to [email protected].
Purchases, invoices and messages
To fulfil an order we process your name, contact details, address, order contents, chosen payment and the data needed for delivery. The legal basis is performance of the contract; for invoices and other mandatory records, a legal obligation. ATHLUX does not store card numbers or security codes; they are processed by the selected payment provider. To reply to a contact message we process the form data on the basis of pre-contractual steps or our legitimate interest in replying. The contact form is not a newsletter sign-up. Please don't enter data that isn't needed for a reply.
The ATHLUX list
We send news based on your voluntary consent. When you sign up we collect your name, email address and chosen interest, e.g. shin guards. You confirm via a link in an email. Unconfirmed sign-ups expire after 24 hours. For confirmed sign-ups we keep the sign-up and confirmation times and the version of the consent text. You can unsubscribe at any time via the link in any message or at [email protected]. Withdrawing consent does not affect the lawfulness of processing before withdrawal. If the list is used in MailerLite, processing terms, the transfer method and unsubscribe synchronisation must be confirmed before the first campaign; currently the package provides local confirmation and export of confirmed contacts.
Local analytics
Analytics is off by default. Only after you choose “Accept analytics” do we record daily totals of page and product views, product clicks, add-to-bag buttons, checkout starts and contact links. A click is not proof of a completed purchase; sales data is kept by WooCommerce. We do not store names, email addresses, form contents, screen recordings, personal profiles or full URLs. Counters are kept on the store's server for at most 90 days. You can change the setting in the footer and further recording stops. To limit abuse of forms and statistics we use a short-lived hashed key of the network address, which is not part of the analytics data; it expires after at most 10 minutes.
Cookies and similar storage
Essential cookies enable functions you explicitly request, such as login, the bag and checkout. WooCommerce may use woocommerce_cart_hash and woocommerce_items_in_cart until the end of the session and wp_woocommerce_session_* usually for two days. WordPress sets login cookies when you log in; their duration depends on “remember me”. athlux_consent stores your choice for essential functions and analytics for 180 days. Local analytics sets no additional identifying cookie. On the bilingual site your language choice (athlux_language) may be stored. The exact list of cookies from additional payment, language and hosting services must be checked on the live site after setup and completed before public launch. This package contains no Google Analytics, Meta Pixel or session recording.
Recipients and retention
Hosting, email, delivery, accounting and payment providers involved in fulfilling orders or legal obligations receive data to the extent necessary. The final providers and any transfers outside the EEA must be listed before launch once hosting, payment and email services are chosen. Accounting records are kept for the statutory periods, usually ten years after the end of the year they relate to. Other order and message data is kept only as long as needed for fulfilment, claims and the defence of rights, then deleted or anonymised. The newsletter list is kept until you unsubscribe, subject to limited retention of consent records where needed for legal claims. Actual retention and backup settings are aligned during setup.
Your rights
Under applicable law you may request access to your data, rectification, erasure, restriction of processing or portability, and object to processing where the conditions are met. You can withdraw consent at any time. Send requests to [email protected]; to protect your data we may verify your identity. You have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (ip-rs.si). Some data is required for an order; without it we cannot fulfil the order. Newsletter sign-up and analytics are optional. We do not carry out automated decision-making with legal or similarly significant effects.