This notice explains who processes your personal data when you use this store, why, on what legal basis, how long it is kept and what rights you have.
1. Data controller
FORI d.o.o.
Prešernova cesta 1A, 3320 Velenje, Savinjska, Slovenia
VAT no. SI57248729
E-mail: info@ortevayastik.com
Because we are established in the European Union, the General Data Protection Regulation (EU) 2016/679 (GDPR) applies to our processing. Where we offer goods to people located in Türkiye, Turkish Law no. 6698 on the Protection of Personal Data (KVKK) also applies, and we treat both sets of rights as cumulative — you may rely on whichever is more favourable to you.
2. What we collect
| Category | Examples |
|---|---|
| Identity | Name and surname |
| Contact | E-mail address, telephone number, delivery address |
| Order | Products ordered, quantity, amount, order number, delivery status, returns |
| Payment | Payment method and the transaction result. We never see or store your full card number. |
| Technical | IP address, browser and device type, pages visited, cookie identifiers |
| Correspondence | The content of messages you send us through the contact form or by e-mail |
3. Why we process it, and on what basis
- To conclude and perform your purchase — taking the order, shipping, invoicing, returns and after-sales support. Basis: performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
- To meet legal obligations — tax, accounting and consumer-law record keeping. Basis: legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).
- To keep the site working and secure — fraud prevention, error diagnosis, strictly necessary cookies. Basis: legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
- To measure use of the site and, where you ask for it, to send marketing — optional analytics cookies and commercial e-mail. Basis: your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)), which you may withdraw at any time.
4. Who we share it with
We do not sell your data. We share the minimum necessary with: our e-commerce platform (Shopify), the carrier delivering your order, our payment service provider, our accountant, and public authorities where the law requires it. Each of them processes the data only for the purpose we gave it to them for.
5. International transfers
Our service providers may store data outside your country, including in the European Economic Area and in countries whose data-protection rules differ from your own. Where that happens we rely on the transfer safeguards recognised under the GDPR (adequacy decisions or standard contractual clauses) and, for KVKK purposes, on the conditions set out in Article 9 of that law.
6. How long we keep it
- Order, invoice and accounting records: 10 years, as required by tax and commercial law.
- Contact-form correspondence: 2 years after the matter is closed.
- Optional analytics cookie data: up to 24 months, or until you withdraw consent.
When a retention period ends, the data is deleted or irreversibly anonymised.
7. Your rights
You may ask us to confirm whether we hold data about you; to give you a copy; to correct it; to erase it; to restrict or object to processing; to receive it in a portable format; and to withdraw a consent you gave. You may also object to decisions produced solely by automated analysis. To exercise any of these rights, write to info@ortevayastik.com from the address you used for your order. We answer within 30 days at the latest, free of charge.
8. Complaints
If you are not satisfied with our answer, you may complain to the Slovenian Information Commissioner (Informacijski pooblaščenec) or to the supervisory authority in your EU country of residence. Data subjects in Türkiye may also apply to the Personal Data Protection Board (KVKK Kurulu) after first applying to us.
9. Cookies
Which cookies we set, and how to change your choice, is explained in the Cookie Policy. Optional cookies are not activated until you accept them.
10. Changes
If this notice changes, the new version is published on this page with a new date. Material changes are announced on the site.
Last updated: 14 September 2026.
