Privacy notice
Last updated
We collect as little about you as we can. This notice explains what we collect when you visit this website, order a watch or write to us, and what rights you have.
Who is responsible
The controller of your personal data is VEZENJE ERCIGOJ proizvodno in trgovsko podjetje d.o.o., Gasilska cesta 18, 1000Ljubljana, Slovenia, registration number 5694973000. For anything about your data, write to watches@ercigoj.com or call +386 1 515 72 60.
When you visit the website
We do not use analytics, advertising or tracking, and we set no cookies (see cookies). Our hosting provider, Vercel, processes your IP address, the page requested, the time and your browser type in order to deliver the page and protect the site from abuse. These server logs are kept for a short period only and we do not use them to identify you.
Legal basis: our legitimate interest in running a secure website (GDPR Art. 6(1)(f)).
When you order a watch
You pay in Stripe's secure payment form on our checkout page. Stripe passes to us your name, email address, telephone number, billing address and delivery address, the model you ordered, any color wish you entered, and the fact and amount of your payment. To price your delivery while you order, we send the country, postal code and city of your delivery address, and nothing else, to DHL Express, which ships your watch. We never receive or see your full card or PayPal details.
We use these details to confirm your order, agree the details of your watch, make and deliver your watch, handle withdrawal, complaints and warranty claims, and keep the accounting records the law requires.
Legal basis: the contract with you and the steps before it (GDPR Art. 6(1)(b)), and our legal obligations under tax and accounting law (GDPR Art. 6(1)(c)).
When you write or call us
We use your name, contact details and what you tell us to answer you. Legal basis: the steps you ask for before a contract (Art. 6(1)(b)) or our legitimate interest in answering you (Art. 6(1)(f)).
Who receives your data
- Stripe (Stripe Payments Europe, Ltd., Dublin, Ireland) processes your payment. Stripe acts on our behalf when it runs the checkout for us, and as a separate controller for its own purposes such as fraud prevention, security and its legal obligations as a payment provider, under its privacy policy. If you pay with PayPal, PayPal (Europe) S.à r.l. et Cie, S.C.A. processes that payment under its own privacy statement.
- Vercel (Vercel Inc., USA) hosts the website on our behalf.
- Our email and web host in Slovenia stores our email on our behalf.
- DHL Express, which delivers your watch, receives the country, postal code and city of your delivery address while you order, to price the delivery, and your name, delivery address and telephone number to deliver it; outside the EU, so do its customs broker and the customs authorities.
- Our accountant, our bank and, where the law requires, the tax authorities receive invoice and payment data.
We never sell your data and never share it for advertising.
Transfers outside the EU
Vercel (Vercel Inc.) and Stripe (Stripe, LLC) may process data in the United States. These transfers rely on the EU–US Data Privacy Framework, under which both companies are certified; should it cease to apply, the European Commission's Standard Contractual Clauses in their data processing agreements apply. If your watch is delivered outside the EU, your delivery details necessarily travel to the destination country to complete the delivery you asked for (GDPR Art. 49(1)(b)).
How long we keep it
- Invoices and accounting records: 10 years after the end of the year of the invoice, as tax law requires.
- Order, contract and warranty records: 5 years after delivery, the period in which claims from the contract can be made.
- Other correspondence: up to 2 years after our last exchange, unless it leads to an order.
- Hosting server logs: a short period set by our hosting provider.
Your rights
You have the right to:
- see the data we hold about you and receive a copy;
- have it corrected, or erased where we no longer need it;
- have its use restricted;
- receive the data you gave us in a portable format;
- object at any time to uses based on our legitimate interest.
Write to watches@ercigoj.com. We answer free of charge within one month and give reasons if we cannot do what you ask. If you think we handle your data unlawfully, you may complain to the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si, or to the data protection authority in your own country.
Do you have to give us your data?
Only what is needed to deliver your order. Without a name, contact and delivery address we cannot make and send your watch. We make no automated decisions and no profiling.