Privacy policy

PRIVACY POLICY

1. Data Controller

The controller of your personal data is:

Company: Nord Vita d.o.o.

Address: Rakuševa ulica 8, 1000 Ljubljana, Slovenia

Company registration number: 7348215000

VAT ID: SI74119435

Data protection e-mail: info@cigapan-europe.com

2. What Personal Data Do We Collect?

We collect and process only the personal data necessary for each specific purpose:

  • Purchase and delivery data: Full name, delivery address, billing address, e-mail address, phone number, and details of the products purchased and payment method.
  • Customer support data: Name, e-mail address, and the content of your message when contacting us via forms or e-mail.
  • Technical and analytical data: IP address, browser type, operating system, access time, and website navigation data (collected via cookies).
  • Marketing data (Newsletter): E-mail address and your explicit consent to receive notifications.

3. Purpose and Legal Basis for Processing

We process the collected data on the basis of the following legal grounds:

  • Performance of a contract (Art. 6(1)(b) GDPR): Processing is necessary to handle your order, issue invoices, deliver packages, and resolve any complaints.
  • Legal obligation (Art. 6(1)(c) GDPR): Processing and storage of data necessary to comply with tax and accounting regulations.
  • Legitimate interest (Art. 6(1)(f) GDPR): Improving website security, fraud prevention, technical maintenance, and traffic analytics.
  • Consent (Art. 6(1)(a) GDPR): Sending marketing communications (newsletter) and setting analytics and marketing cookies. You may withdraw your consent at any time.

4. Recipients of Personal Data

We do not sell or rent your personal data to third parties. We only share data with trusted partners (data processors) who are bound by confidentiality agreements:

  • Delivery services and logistics partners: To deliver ordered products to your address.
  • Payment service providers: For secure processing of card and online transactions.
  • IT and hosting partners: Providers of web hosting and technical support for the online store.
  • Accounting service providers: For bookkeeping purposes in accordance with the law.

5. Transfer of Data to Third Countries (Outside the EU/EEA)

Your personal data is primarily processed within the European Union. Where analytics or technical services are used whose servers are located outside the EU/EEA (e.g. Google Analytics), the transfer is carried out solely under appropriate safeguards required by the GDPR, such as Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework.

6. Data Retention Period

We retain personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by law:

  • Purchase and invoice data: Retained for 10 years in accordance with tax and accounting regulations.
  • Newsletter subscription data: Retained until unsubscription (withdrawal of consent).
  • Inquiries and correspondence: Retained until the inquiry is resolved, or for a maximum of 1 year after the last contact.
  • Cookies: Retained in accordance with the retention period defined in our Cookie Policy, or until deleted by the user.

7. Your Rights Under the GDPR

Regarding your personal data, you have the following rights:

  • Right of access: The right to be informed what data we process about you and to receive a copy of that data.
  • Right to rectification: The right to have inaccurate data corrected or incomplete data completed.
  • Right to erasure ("right to be forgotten"): The right to have your data deleted if it is no longer necessary for the purpose of processing, unless we are required by law to retain it.
  • Right to restriction of processing: The right to request a temporary restriction on the processing of your data under certain conditions.
  • Right to data portability: The right to receive your data in a structured, commonly used format.
  • Right to object: The right to object to processing based on legitimate interest or for direct marketing purposes.
  • Right to withdraw consent: You may withdraw your consent to processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, you may contact us by e-mail at: info@cigapan-europe.com

8. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data violates data protection regulations (GDPR), you have the right to lodge a complaint with the competent supervisory authority in the EU member state of your residence, place of work, or where the alleged infringement occurred.

Competent authority based on the company's registered office (Slovenia): Information Commissioner (IP-RS), Dunajska cesta 22, 1000 Ljubljana, Slovenia | E-mail: gp.ip@ip-rs.si | Website: www.ip-rs.si

For customers from other EU member states: A list and contact details of all national data protection supervisory authorities in the European Union can be found on the official website of the European Data Protection Board (EDPB): https://edpb.europa.eu/about-edpb/about-edpb/members

9. Cookies

Our website uses cookies to ensure proper functioning, improve user experience, and analyze traffic. Detailed information on the types of cookies used and how to manage your consent can be found in our Cookie Policy.

10. Protection of Minors

Our service and online store are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we learn that we have collected personal data from a minor without appropriate parental or guardian consent, we will take steps to delete such data as soon as possible. If you believe we may have collected data from a minor, please contact us at info@cigapan-europe.com.

11. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy at any time. Any changes will be published on this page in a timely manner, with an indication of the date of the last update.

Last updated: August 2026.