Privacy policy

Effective from: 28 October 2026

Data controller

The controller of personal data processed in connection with the Rosalli.eu online store is:

Petra Jančar s.p.
Novo Polje, cesta XII 6
1260 Ljubljana - Polje
Slovenia

Company registration number: 3761681000
Tax number: 87528339
Email: jancar.petra@gmail.com
Phone: +386 31 527 083
Website: Rosalli.eu

When processing personal data, we comply with applicable personal data protection legislation, including Regulation (EU) 2016/679 (GDPR) and applicable Slovenian legislation.

Personal data we collect

Depending on how you use the online store, we may collect and process:

Your first and last name;
Your delivery address and information required to issue an invoice;
Your email address;
Your telephone number;
Information about your order and purchased products;
Payment-related information;
The content of communications when you contact us;
Technical information about your use of the website, such as device and browser information, your IP address and information collected through cookies.

We collect and use only the data necessary for each purpose.

How and why we use personal data

We may collect personal data:

Directly from you when you place an order, complete a form or contact us;
Automatically when you use our website;
Through service providers that enable us to operate the online store, process payments, deliver products and provide other business services.

We primarily use your data to:

Process and fulfil orders;
Process payments;
Prepare and deliver ordered products;
Communicate about your order;
Handle returns, withdrawals, complaints and other requests;
Issue and retain invoices and fulfil other legal obligations;
Maintain the security of the online store and prevent misuse;
Respond to your questions and messages;
Send newsletters when you have voluntarily subscribed;
Improve the operation and user experience of the online store where there is an appropriate legal basis for doing so.

Legal bases for processing

We process personal data on the basis of:

Performance of a contract, where processing is necessary to fulfil your order or take steps before entering into a contract;
Compliance with legal obligations, for example when issuing and retaining invoices;
Our legitimate interests, where processing is necessary for security, preventing misuse, protecting our rights or ensuring the smooth operation of the online store;
Your consent, where consent is required for a particular purpose, for example for certain types of newsletters or cookies.

Where processing is based on consent, you may withdraw it at any time.

Shopify and the operation of the online store

The services are hosted by Shopify, which collects and processes personal data about your access to and use of the services in order to provide and improve the services for you. Information you submit to the services will be shared with Shopify and third parties that may be located in countries other than the country where you live, in order to provide and improve the services for you.

In addition, to protect, grow and improve our business, we use certain enhanced Shopify features that incorporate data and information obtained from your interactions with our store, other merchants and Shopify. To provide these enhanced features, Shopify may use personal data collected about your interactions with our store, other merchants and Shopify.

In these circumstances, Shopify is responsible for processing your personal data, including responding to your requests to exercise rights concerning the use of your personal data for these purposes.

To learn more about how Shopify uses your personal data and the rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights concerning your personal data through the Shopify Privacy Portal.

Payments

When making a purchase, you can use the payment methods displayed at checkout.

At Rosalli, we use:

Payment cards through Shopify Payments;
PayPal;
Shop Pay;
Apple Pay;
Google Pay.

The availability of individual payment methods may depend on your country, device, browser or digital wallet settings.

Information required to process a payment is processed by the relevant payment service providers. Rosalli does not require full payment card details to fulfil an order.

Who we may share personal data with

To the extent necessary for each purpose, we may share your personal data with, or provide access to it to, service providers that help us operate our business.

These may include:

Shopify and its associated services;
Shopify Payments;
PayPal;
Service providers connected with Shop Pay, Apple Pay and Google Pay;
Pošta Slovenije or another delivery provider where necessary to deliver an order;
Accounting services and other business service providers;
Competent public authorities where we are legally required to disclose information.

We do not sell personal data.

Newsletters

If you subscribe to our newsletters, we will use your email address to send you updates about new products, collections and news from Rosalli.

Newsletter subscription is voluntary. You may unsubscribe at any time using the method stated in each message or by emailing us at jancar.petra@gmail.com.

Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

The Rosalli online store uses cookies and similar technologies necessary for the operation of the online store, to improve the user experience and, where appropriate, for analytics and other purposes.

We inform you about the use of cookies through the cookie banner, where you can also express your preferences where required.

Retention of personal data

We retain personal data for as long as necessary for the purpose for which it was collected or for as long as required by applicable regulations.

We may retain data relating to orders, invoices and business operations after an order has been fulfilled where necessary for accounting, tax, legal or other statutory obligations.

Unless otherwise required by law, we retain data processed on the basis of consent until consent is withdrawn or until the purpose for which it was collected no longer applies.

Transfers of personal data

Because we use services provided by Shopify and other service providers, personal data may, in certain circumstances, be processed outside the European Economic Area.

Where such a transfer requires an appropriate level of personal data protection, appropriate mechanisms and safeguards are used in accordance with applicable law.

For further information about Shopify's processing of personal data, please also refer to the Shopify Consumer Privacy Policy.

Your rights

In accordance with applicable law, you may have the right to:

Access your personal data;
Correct inaccurate or incomplete data;
Have personal data erased where the legal conditions are met;
Restrict processing;
Object to processing in circumstances specified by law;
Data portability where the legal conditions are met;
Withdraw consent where processing is based on consent.

To exercise your rights, you may email us at:

jancar.petra@gmail.com

For security reasons, we may verify your identity when handling a request.

If you believe that the processing of your personal data has infringed your rights, you have the right to lodge a complaint with the competent personal data protection supervisory authority in Slovenia.

Security of personal data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or other unauthorised processing.

Nevertheless, complete security of data transmission or storage over the internet cannot be guaranteed.

Links to other websites

Our website may contain links to other websites or third-party services.

We are not responsible for their content, personal data protection practices or use of data. Before using such services, we recommend reviewing their privacy policies.