At Dmitrix, we value your privacy and are aware of the responsibility that comes with handling your personal data. All personal data you provide to us is treated confidentially and in accordance with the General Data Protection Regulation (GDPR), the Personal Data Protection Act (ZVOP-2), and the Electronic Communications Act (ZEKom-1).
This privacy policy defines how we collect, use, disclose, and protect your information when you visit our website or make a purchase.
1. Data Controller
The controller of personal data collected on the website dmitrix.eu is:
-
Company: Dmitry Surchin, s.p.
-
Registered office: Trg komandanta Staneta 8, 1000, Ljubljana, Slovenia
-
Registration number: 9463704000
-
Email address: info@dmitrix.eu
2. What personal data do we collect and why?
We only collect your personal data when it is strictly necessary for fulfilling your order or improving your user experience:
-
Order fulfillment data: First name, last name, shipping address, billing address, phone number, and email address. We need this information to process your order, issue an invoice, and deliver the device.
-
Payment data: Credit card information or other payment methods are processed through secure and encrypted payment gateways and are not stored on our servers.
-
Communication: If you contact us via email, we collect your email address and the content of your message for the purpose of resolving your inquiry.
-
Technical data: To ensure security and analyze website performance, we collect IP address, browser information, and operating system data (via cookies).
3. Legal basis for data processing
We process your personal data on the following legal grounds:
-
Performance of a contract: Processing is necessary to execute the purchase and deliver the goods.
-
Legal obligation: We are required to retain invoice data in accordance with tax legislation.
-
Consent: For direct marketing purposes (e.g., newsletters) or analytical cookies, we only process data if you give explicit consent.
4. Use of the Shopify platform and data transfer
Our online store uses the Shopify platform to process order data and operate the shopping cart. Your data is stored via Shopify's secure database. Shopify ensures a high level of data security and complies with relevant international standards for data transfer to the EU.
5. Who has access to your data?
In addition to the controller, only our contractual partners who are strictly bound to protect your privacy have access to certain personal data:
-
Delivery service: Pošta Slovenije / GLS, to whom we provide your name, address, and phone number for the purpose of package delivery.
-
Payment service providers: For secure transaction processing.
-
External accounting service: For the purpose of booking issued invoices in accordance with the law.
We will never sell, lease, or share your data with unauthorized third parties.
6. Data retention period
We store personal data only for as long as it is necessary to achieve the purpose for which it was collected:
-
Data on received orders and invoices are kept for 10 years due to tax laws.
-
Data for warranty or claim resolution purposes are kept until the warranty period of the device expires (12 months for used devices).
-
Data collected based on consent (e.g., cookies) are kept until the consent is withdrawn.
7. Your rights
Regarding your personal data, you have the following rights at any time:
-
Right of access: You may request a printout of the data we hold about you.
-
Right to rectification: You may request immediate correction of inaccurate or incomplete data.
-
Right to erasure (Right to be forgotten): You may request the deletion of your data if there is no legal basis for its further retention (e.g., tax laws).
-
Right to restrict processing and Right to object.
You can send all requests regarding the exercise of your rights to the email address info@dmitrix.eu. We will respond as soon as possible, no later than 30 days. If you believe your rights have been violated, you can contact the Information Commissioner of the Republic of Slovenia.
8. Website traffic analysis (Vercel Web Analytics)
-
Anonymous processing: The tool processes connection and traffic data at a completely anonymous level.
-
No tracking cookies: Vercel Web Analytics does not use cookies to track users and does not collect personal data or unique device identifiers.
- Data retention: Collected session metric data is deleted daily, ensuring that data is not stored longer than necessary for basic insights into site performance.
9. Changes to the privacy policy
We reserve the right to update this privacy policy periodically to adapt to changes in legislation or our business operations. Any changes will be posted on this page.