Privacy policy

PRIVACY POLICY

Last updated: October 1, 2026

This Privacy Policy explains how Wasup d.o.o., Verovškova ulica 60a, 1000 Ljubljana, Slovenia (“Wasup”, “we”, “us” or “our”), collects, uses, stores and discloses personal data when you visit wasup.si, use our services, make a purchase or otherwise interact with us.

Wasup d.o.o. is generally the controller of the personal data we process in connection with our online store and services.

For privacy-related questions or to exercise your rights, you can contact us at:

Wasup d.o.o.
Verovškova ulica 60a
1000 Ljubljana
Slovenia

Email: info@wasup.si

Google, advertising and analytics

We may use services provided by Google, including Google Analytics, Google Ads, Google Tag Manager and other related Google services.

If you provide the appropriate consent, Google may receive information about your use of our website, such as device and browser information, IP address, pages visited, interactions with the website, advertising information and conversion-related data.

We may use this information for:

  • website analytics,

  • measuring the effectiveness of advertising campaigns,

  • conversion measurement,

  • remarketing,

  • displaying and personalizing advertisements,

  • improving our website and user experience,

  • fraud prevention and security.

Where consent is required by applicable law, we do not use optional cookies or similar technologies for analytics, advertising or ad personalization until you provide your consent.

More information about how Google uses data from websites and apps that use its services is available on Google’s page How Google uses information from sites or apps that use our services.

You can change or withdraw your consent to optional cookies at any time through the cookie settings available on our website.

1. Personal data we collect

The type of personal data we collect depends on how you use our website and services.

Information you provide directly to us

This may include:

  • first and last name,

  • shipping address,

  • billing address,

  • email address,

  • telephone number,

  • order information,

  • account information,

  • information you provide when communicating with us,

  • information related to returns, complaints and warranty claims,

  • information you provide when subscribing to newsletters or other marketing communications.

Order and payment information

When you make a purchase, we may process information necessary to:

  • process your order,

  • process payment,

  • issue invoices,

  • deliver products,

  • handle returns and complaints.

Payment card details are generally processed by payment service providers. Wasup does not normally store full payment card details.

Website usage data

When you visit our website, certain information may be collected automatically, including:

  • IP address,

  • device type,

  • browser type and version,

  • operating system,

  • language settings,

  • approximate location based on IP address,

  • pages visited,

  • time and duration of visits,

  • interactions with the website,

  • referring page information,

  • shopping cart and purchasing activity.

We may use cookies, pixels and similar technologies to collect this information.

2. How we collect personal data

We may collect personal data:

  • directly from you,

  • automatically when you use our website,

  • from Shopify,

  • from payment service providers,

  • from delivery and logistics partners,

  • from analytics and advertising service providers,

  • from marketing service providers,

  • from other service providers that support the operation of our online store.

3. Purposes and legal bases for processing

We process personal data only where an appropriate legal basis exists.

Performance of a contract

We process your data where necessary to perform a contract or process your order, including for:

  • processing orders,

  • processing payments,

  • issuing invoices,

  • delivering products,

  • managing customer accounts,

  • handling returns, complaints and warranty claims.

The legal basis is Article 6(1)(b) GDPR.

Legal obligations

We also process data where necessary to comply with legal obligations, for example in relation to accounting, taxation, consumer protection and other applicable laws.

The legal basis is Article 6(1)(c) GDPR.

Legitimate interests

We may process personal data on the basis of our legitimate interests where those interests are not overridden by your rights and freedoms.

This may include:

  • fraud and abuse prevention,

  • website security,

  • service improvement,

  • handling claims and disputes,

  • business administration,

  • protecting legal claims.

The legal basis is Article 6(1)(f) GDPR.

Consent

Where required by applicable law, we process personal data on the basis of your consent.

This applies in particular to:

  • optional analytics cookies,

  • advertising cookies,

  • ad personalization,

  • remarketing,

  • certain types of conversion measurement,

  • marketing communications where consent is required.

The legal basis is Article 6(1)(a) GDPR.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4. Shopify

Our online store uses the Shopify platform.

Shopify provides the technical infrastructure used to operate our online store and may process certain information about visitors and customers on our behalf or for its own defined purposes.

This may include information about:

  • devices,

  • website usage,

  • orders,

  • payments,

  • customer accounts,

  • shopping activity.

Shopify may use cookies and similar technologies to provide, secure and improve its services.

Where Shopify acts as our processor, it processes personal data in accordance with our instructions and the applicable data processing terms.

5. Cookies and similar technologies

We use cookies and similar technologies on our website.

Cookies are small files stored on a user’s device by a website.

We may use the following types of cookies:

Necessary cookies

These cookies are required for the online store to function properly.

They may enable, for example:

  • shopping cart functionality,

  • customer account login,

  • security,

  • order processing,

  • remembering essential settings.

Consent is generally not required for strictly necessary cookies.

Functional cookies

These cookies are used to improve functionality and user experience, for example by remembering selected language or other preferences.

Analytics cookies

Analytics cookies help us understand how visitors use the website, which pages they visit and how they interact with different features.

Where required, analytics cookies are activated only after you provide consent.

Advertising and personalization cookies

These cookies may be used for:

  • displaying advertisements,

  • personalizing advertisements,

  • remarketing,

  • measuring advertising performance,

  • measuring conversions.

Where applicable law requires consent, we do not use these cookies until you accept them.

6. Managing cookie consent

When you first visit our website, you may be shown a cookie consent banner.

You may be able to:

  • accept optional cookies,

  • reject optional cookies,

  • customize your preferences.

You can change your choice at any time through the cookie settings available on our website.

If you reject optional cookies, you can still use the essential functions of our online store.

7. Google Analytics and Google Ads

We may use Google Analytics and Google Ads for analytics and advertising purposes.

If you provide consent, certain technical and behavioral information may be shared with Google, such as:

  • IP address,

  • device and browser information,

  • pages visited,

  • website interactions,

  • shopping activity,

  • conversion data.

Google may use this information for analytics, measurement, provision of its services, fraud prevention and, where permitted and where you have provided consent, ad personalization.

We may use Google Consent Mode and Shopify’s privacy management system to manage consent signals.

8. Marketing and electronic communications

If you subscribe to our newsletter or other marketing communications, we may use your email address to send:

  • news,

  • promotions,

  • special offers,

  • information about new products,

  • other marketing content.

You can unsubscribe from marketing communications at any time using the unsubscribe link in the relevant message or by contacting us.

Even after unsubscribing, we may still send you transactional communications relating to orders, invoices, returns or other services.

9. Sharing personal data

We may disclose personal data, where necessary, to:

  • Shopify,

  • payment service providers,

  • banks,

  • delivery and logistics partners,

  • IT service providers,

  • hosting and infrastructure providers,

  • analytics providers,

  • Google and other advertising partners, where permitted,

  • email marketing providers,

  • accounting and legal advisers,

  • public authorities where required by law.

We only share the data that is necessary for each provider to perform its functions.

10. International transfers of personal data

Some of our service providers, including Shopify and Google, may process personal data outside the European Economic Area.

Where personal data is transferred to countries without an adequacy decision, we use appropriate safeguards such as:

  • Standard Contractual Clauses approved by the European Commission,

  • other transfer mechanisms permitted under the GDPR,

  • other appropriate safeguards.

11. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected or for as long as required by applicable law.

When determining retention periods, we take into account:

  • the duration of the contractual relationship,

  • legal obligations,

  • accounting and tax requirements,

  • limitation periods,

  • security requirements,

  • dispute resolution and legal claims.

When data is no longer required, we delete, anonymize or otherwise securely dispose of it, unless continued retention is required by law.

12. Data security

We use reasonable technical and organizational measures to protect personal data against:

  • loss,

  • unauthorized access,

  • misuse,

  • alteration,

  • disclosure,

  • destruction.

However, no method of data transmission or storage is completely secure and absolute security cannot be guaranteed.

13. Your rights

If the GDPR or similar privacy legislation applies to you, you may have the following rights:

  • right of access,

  • right to rectification,

  • right to erasure,

  • right to restriction of processing,

  • right to object to processing,

  • right to data portability,

  • right to withdraw consent,

  • right to lodge a complaint with a supervisory authority.

Where we process personal data based on legitimate interests, you have the right to object to such processing on grounds relating to your particular situation.

Where personal data is used for direct marketing, you have the right to object to such use at any time.

14. Exercising your rights

You may submit a request regarding your personal data by contacting us at:

info@wasup.si

or in writing at:

Wasup d.o.o.
Verovškova ulica 60a
1000 Ljubljana
Slovenia

Before responding to your request, we may ask for additional information necessary to verify your identity.

We respond to requests within the time limits required by applicable law.

15. Right to lodge a complaint

If you believe that we process your personal data in breach of applicable law, you may first contact us.

You also have the right to lodge a complaint with the competent supervisory authority.

In Slovenia, the competent authority is:

Information Commissioner of the Republic of Slovenia
Dunajska cesta 22
1000 Ljubljana
Slovenia

Email: gp.ip@ip-rs.si

16. Children

Our services are not intended for children who are not legally able to enter into contracts or provide valid consent on their own.

We do not knowingly collect personal data from children for behavioral advertising or ad personalization purposes.

If you believe that a child has provided personal data to us without an appropriate legal basis, please contact us so that we can take appropriate action.

17. Links to third-party websites

Our website may contain links to third-party websites.

We are not responsible for the content, security or privacy practices of those websites.

We recommend that you review their privacy policies before using them.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time due to:

  • changes to our services,

  • technological developments,

  • new service providers,

  • changes in applicable law,

  • regulatory requirements.

When we update this Privacy Policy, we will revise the “Last updated” date at the top of the document.

Where required by law, we will provide additional notice of material changes.

19. Contact

For questions relating to privacy, personal data processing or cookies, please contact us:

Wasup d.o.o.
Verovškova ulica 60a
1000 Ljubljana
Slovenia

Email: info@wasup.si

Website: wasup.si