Privacy policy
Privacy Policy (In accordance with Articles 12 and 13 of the GDPR)
Last updated: 1.1. 2026
The company KOLPA, d.o.o. Metlika (hereinafter: “the company” or “we”) respects your privacy and is committed to protecting your personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and the Personal Data Protection Act (ZVOP-2). In this privacy policy, we inform you about which personal data we collect, how we use it, and what rights you have regarding it.
Data Controller
The controller of your personal data is:
KOLPA, Production and Processing of Plastics, d.o.o. Metlika
Address: Rosalnice 5, 8330 Metlika, Slovenia
Company registration number: 5002289000
Email: info@kolpa.si
Contact for data protection inquiries: varstvopodatkov@kolpa.si
Types of personal data we collect
We collect the following types of personal data depending on your relationship with us (e.g., website visitor, customer, business partner):
Contact details: first name, last name, email address, phone number, delivery address. Website usage data: IP address, cookie data, browser and device information. Data related to business relationships: order and contract data, invoicing and payment data, communication regarding orders and complaints.
Purpose and legal basis for data processing
| Performance of contractual obligations (order processing, delivery, complaint resolution) | 6(1)(b) – Processing is necessary for the performance of a contract. |
| Communication with users (e.g., responding to inquiries) | 6(1)(f) – Legitimate interest for effective communication and customer support. |
| Sending newsletters and promotional content | 6(1)(a) – Consent of the individual. |
| Improving user experience on the website (analytics) | 6(1)(f) – Legitimate interest to ensure the operation and security of the information system and optimize the website. |
| Compliance with legal obligations (e.g., issuing and storing invoices) | 6(1)(c) – Processing is necessary to comply with a legal obligation (e.g., tax and accounting regulations). |
| Conducting customer satisfaction surveys | 6(1)(f) – Legitimate interest to improve services or 6(1)(a) – Consent if obtained separately. |
Cookies and tracking technologies
Our website uses cookies for:
Ensuring website functionality (necessary cookies). Traffic analysis and improving user experience (analytical cookies). Personalized advertising (marketing cookies).
More about the cookies we use can be found in our Cookie Policy available on our website.
Data retention
We store your personal data:
Data collected based on consent (e.g., for newsletters) are stored until you withdraw consent. Data collected for contract performance purposes are stored for 5 years after the termination of the contractual relationship (general statute of limitations). Data we must retain due to legal obligations (e.g., invoices) are stored for 10 years from the date of issue.
After the retention period expires, we will permanently delete or anonymize your data.
Data sharing with third parties
We will not share your data with unauthorized third parties. We may share data only with:
Our contractual processors who provide the same level of data protection as we do (e.g., delivery service, accounting service, newsletter system provider). Competent state authorities if required by legal obligations (e.g., tax authorities, courts). If you have given your explicit consent.
Transfer of data to third countries
Your personal data are generally not transferred to third countries outside the European Economic Area (EEA). If such a transfer occurs, we will inform you and provide appropriate safeguards in accordance with the GDPR.
Your rights
Under the GDPR, you have the following rights:
The right to access your personal data (Article 15). The right to rectify inaccurate or incomplete data (Article 16). The right to erasure (“right to be forgotten”) (Article 17). The right to restrict processing (Article 18). The right to data portability (Article 20). The right to object to data processing (Article 21). The right to withdraw consent if processing is based on consent.
To exercise your rights, you can write to us at varstvopodatkov@kolpa.si.
If you believe your rights have been violated, you may file a complaint with the Information Commissioner of the Republic of Slovenia (Address: Dunajska cesta 22, 1000 Ljubljana, Email: gp.ip@ip-rs.si, Website: www.ip-rs.si).
Data security
We use appropriate technical and organizational measures to protect your personal data, such as encryption, access control, and regular security monitoring, to prevent unauthorized destruction, loss, alteration, or disclosure of data.
Changes to the privacy policy
We may update this privacy policy from time to time. You will be notified of significant changes by posting them on our website. We recommend reviewing the policy regularly. Your personal data are generally not transferred to third countries outside the European