Privacy Policy

1. Introduction

At Mimelo we respect your privacy and process personal data responsibly, transparently and in accordance with applicable legislation.

In this Privacy Policy we explain what personal data we collect, why we need it, how we protect it, how long we keep it, and what rights you have regarding its protection.

We process personal data in accordance with:

  • the General Data Protection Regulation (GDPR),
  • the Personal Data Protection Act (ZVOP-2),
  • the Electronic Communications Act (ZEKom-2),
  • and other applicable Slovenian and European legislation.

By using the website or placing an order, you confirm that you are aware of this Privacy Policy.

2. Data Controller

The controller of personal data is:

Media Bus d.o.o.
Breznikova cesta 7A
1230 Domžale

Company registration number: 5447496000

VAT identification number: SI10290524

E-mail: info@mimelo.si

Phone: +386 40 587 588

For any questions regarding the processing of personal data, you can write to us at info@mimelo.si.

3. What Personal Data Do We Collect?

Depending on your use of the online store, we may collect the following personal data:

Data You Provide Yourself

  • first and last name,
  • delivery and billing address,
  • e-mail address,
  • phone number,
  • company information (if ordering as a legal entity),
  • the content of messages you send us via e-mail or the contact form.

Order-Related Data

  • ordered products,
  • order date,
  • payment method,
  • delivery method,
  • order history,
  • data on issued invoices.

Technical Data

When visiting the website, certain technical data may also be automatically collected, such as:

  • IP address,
  • browser type and version,
  • device type,
  • operating system,
  • date and time of the visit,
  • pages visited,
  • data on the use of the online store,
  • data collected through cookies and similar technologies.

4. Why Do We Process Your Personal Data?

We process your personal data solely for lawful and predetermined purposes.

Most commonly, we use it to:

  • process and fulfill your order,
  • deliver ordered products,
  • issue invoices,
  • communicate regarding your order,
  • respond to user questions and requests,
  • provide the user account,
  • improve the operation of the website,
  • analyze website traffic,
  • ensure the security of the website,
  • fulfill legal obligations,
  • send newsletters and promotional content, where you have given your consent to this,
  • inform existing customers about new Mimelo products and promotions on the basis of legitimate interest, unless you have explicitly objected to this,

We do not use your personal data for automated decision-making that would have legal or other significant effects on you.

The provision of personal data necessary for concluding and fulfilling an order (e.g. first and last name, address, contact details) is a contractual requirement. If you do not provide this data, we unfortunately will not be able to fulfill your order.

5. Legal Bases for Processing

We process personal data on the basis of one or more of the following legal bases:

Performance of a Contract

Where processing is necessary to fulfill an order, deliver products, issue an invoice, or otherwise perform the contractual relationship.

Compliance with Legal Obligations

Where the law requires us to retain certain data (for example, accounting or tax legislation).

Your Consent

If you give us your explicit consent to do so (for example by subscribing to the newsletter or by ticking the relevant consent box when placing an order), we may use your personal data to:

  • send newsletters,
  • inform you about new products, collections, special offers and other news,
  • send useful content related to our offering,
  • send other content and notifications related to the activities of the Mimelo online store.

You may withdraw your consent at any time by clicking the unsubscribe link in any e-mail you receive, or by writing to us at info@mimelo.si. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

This consent applies to regular receipt of the newsletter. Separately, as an existing customer, we may also send you occasional notifications about new Mimelo products and promotions on the basis of our legitimate interest, as explained below (see “Legitimate Interest”).

Legitimate Interest

In certain cases, we also process personal data for the purposes of our legitimate interests, where these do not override your rights and freedoms.

This includes in particular:

  • ensuring the security of the website,
  • preventing misuse,
  • improving the user experience,
  • analyzing the operation of the online store,
  • establishing or defending legal claims,
  • informing existing customers about new Mimelo products and promotions, where they have previously purchased goods or services from us and have not explicitly objected to this (the so-called “soft opt-in” under ZEKom-2).

If we rely on this basis, we clearly inform you of the option to receive such notifications already at the time of purchase, and at that point allow you to decline this free of charge and easily; the same option (unsubscribe) is available in every individual message you receive. Such notifications relate exclusively to our own Mimelo products and offering, and are sent with moderate frequency (generally no more than once a month). We do not share data for this purpose with third parties.

6. Disclosure of Personal Data

We process your personal data confidentially and do not sell, rent out, or disclose it to unauthorized third parties.

Where necessary for the provision of our services, or where required by law, we may disclose personal data to contractual partners who provide certain services on our behalf, such as:

  • delivery service providers,
  • payment service providers,
  • accounting service providers,
  • website hosting and maintenance providers,
  • analytics and marketing service providers,
  • government authorities or other competent institutions, where required by law.

All contractual partners process personal data in accordance with applicable legislation and only to the extent necessary to provide the relevant service.

Some of the aforementioned contractual partners (e.g. providers of payment, analytics and marketing services such as Stripe, Google Analytics and Meta) may be based, or may have servers, outside the European Union or the European Economic Area, in particular in the USA. In such cases, we ensure that the transfer of personal data is based on appropriate safeguards, such as the European Commission’s standard contractual clauses, an adequacy decision of the European Commission (e.g. the EU-U.S. Data Privacy Framework), or another appropriate legal basis under Articles 44–49 of the GDPR. A copy of the relevant safeguards can be obtained on request at info@mimelo.si.

7. Retention of Personal Data

We retain personal data only for as long as necessary for the purpose for which it was collected, or for as long as required by applicable regulations.

Individual categories of data are generally retained as follows:

  • data on orders and issued invoices, in accordance with tax and accounting legislation,
  • user account data, until the account is deleted or its use is discontinued,
  • data collected on the basis of consent to receive newsletters, until the consent is withdrawn,
  • data from communication with users, for as long as necessary to resolve the relevant request or to protect the provider’s legitimate interests.

After the retention period expires, we delete or anonymize personal data, where permitted by law.

8. How Do We Protect Your Personal Data?

To protect personal data, we implement appropriate organizational and technical measures to prevent unauthorized access, loss, misuse or unauthorized disclosure of data.

Among other things, we implement the following measures:

  • the use of secure, encrypted connections (SSL),
  • limiting access to personal data to authorized personnel only,
  • regular updating of software and security systems,
  • maintaining the security of information systems.

We do not store payment card data. Card payments are processed through the secure payment systems of contracted payment service providers.

9. Your Rights

In accordance with applicable legislation, you have the following rights regarding your personal data:

  • the right to access your personal data,
  • the right to rectification of inaccurate or incomplete data,
  • the right to erasure of personal data, where the legal conditions for this are met,
  • the right to restriction of processing,
  • the right to data portability,
  • the right to object to the processing of personal data,
  • the right to withdraw consent, where processing is based on consent.

You may send a request to exercise your rights at any time to info@mimelo.si.

If you believe that we are not processing your personal data in accordance with applicable legislation, you have the right to file a complaint with the Information Commissioner of the Republic of Slovenia.

10. Cookies

The website uses cookies and similar technologies to ensure the proper functioning of the website, improve the user experience, analyze traffic, and display personalized content and advertisements.

On your first visit to the website, you can choose which types of cookies to allow. You may change your settings at any time.

More information about the use of cookies is available in the cookie settings on our website.

11. Changes to the Privacy Policy

We may update this Privacy Policy from time to time due to changes in legislation, business practices, or the operation of the online store.

The current version is always published on the Mimelo website.

12. Minors

The Mimelo online store is intended for purchases by adults (parents, guardians and other adult customers). The service is not intended for direct ordering by minors. Where consent is required for the processing of a minor’s personal data, in accordance with the Personal Data Protection Act (ZVOP-2) such consent is valid if the minor is at least 15 years of age; for younger minors, the consent of a parent or guardian is required.

If you believe that we have processed the personal data of a minor without appropriate consent, please contact us at info@mimelo.si so that we can address the matter appropriately.

13. Contact

If you have questions regarding the processing of personal data or wish to exercise your rights, you can contact us:

Media Bus d.o.o.
Breznikova cesta 7A
1230 Domžale

📧 info@mimelo.si

📞 +386 40 587 588