1. Introduction
This privacy policy outlines how the company Menstra d.o.o., Štihova ulica 13, 1000
Ljubljana, registration number: 7418353000, tax number: 86587587 (hereinafter:
controller) collects, processes, and protects personal data of users of the online store
menstra.eu (hereinafter: online store). We are committed to protecting your
privacy and personal data in accordance with applicable legislation, especially the Personal Data Protection Act (ZVOP-2) and the General Data Protection Regulation (GDPR).
2. Collection of Personal Data
The controller collects personal data that users voluntarily provide during
registration, purchase, newsletter subscription, or other interactions with the online store.
We collect the following types of data:
Identification data: name, surname, address, email address, phone
number.
Purchase data: information about ordered products, payment method, purchase
history.
Technical data: IP address, browser data, operating system, time and
date of access to the online store.
3. Purpose of Processing Personal Data
We collect and process personal data for the following purposes:
Order fulfillment: processing and delivery of ordered products, issuing invoices,
communication with the user regarding the order.
User support: resolving questions, complaints, and claims.
Marketing: sending newsletters, notifications about promotions and news (only with the user's explicit
consent).
Service improvement: analyzing the use of the online store to optimize
user experience and offerings.
Compliance with legal obligations: maintaining records, fulfilling tax and
other legal requirements.
4. Legal Basis for Processing
We process personal data based on the following legal grounds:
Contract: processing is necessary for the performance of a contract (purchase) or to take
steps at the request of the individual prior to entering into a contract.
Legal obligation: processing is necessary for compliance with legal
obligations (e.g., tax legislation).
Consent: processing is based on the individual's consent (e.g., for
receiving newsletters).
Legitimate interests: processing is necessary for the legitimate interests
of the controller (e.g., service improvement, abuse prevention).
5. Retention of Personal Data
We retain personal data only as long as necessary to fulfill the purposes for
which they were collected, or as required by applicable legislation. After the
need for retention ceases, the data is deleted or anonymized.
6. Users of Personal Data
We do not disclose personal data to third parties, except when necessary for
service execution, e.g., delivery service, or when required by law. All contractual
processors are obliged to protect personal data in accordance with applicable legislation.
7. Rights of Individuals
Users have the right to:
Access data: view collected personal data.
Rectification of data: request correction of inaccurate or incomplete data.
Erasure of data (right to be forgotten): request deletion of personal data if there is no
longer a legal basis for their processing.
Restriction of processing: request restriction of processing in certain cases.
Data portability: right to receive personal data in a structured,
commonly used, and machine-readable format and the right to transmit those
data to another controller.
Objection: object to the processing of personal data based on legitimate
interests.
Withdrawal of consent: withdraw consent for data processing when processing
is based on consent.
To exercise these rights, you can contact us via email: info@menstra.eu.
8. Data Protection
The controller uses appropriate technical and organizational measures to protect personal
data from unauthorized access, disclosure, alteration, or destruction. This
includes encryption, firewalls, access control, and regular security backups.
9. Complaint
If you believe your rights regarding personal data protection have been violated, you have the right
to file a complaint with the Information Commissioner of the Republic of Slovenia (Zaloška 59,
1000 Ljubljana, email: gp.ip@ip-rs.si).
10. Changes to the Privacy Policy
The controller reserves the right to change this privacy policy. We will notify users of any
changes by posting on the website. The privacy policy is effective from 24. 4. 2026.
Menstra d.o.o. Štihova ulica 13 1000 Ljubljana menstra@info.eu
