PRIVACY POLICY
Data Protection
Protection of Personal Data
At Izobraževanje Luka Arh s.p., we treat data protection as one of the key pillars of our success. In this document, we explain how your personal data is processed, how we ensure its security, and what rights you have in relation to it, all in accordance with the General Data Protection Regulation of the European Parliament and Council 2016/679 (hereinafter: the Regulation), specifically Articles 5, 12, and 13.
Controller of Personal Data
The controller of personal data is Izobraževanje Luka Arh s.p., with its business address at:
Pot na Gorjance 21, 8000 Novo mesto
Tax number: 56825609
Registration number: 9970525000
Validity and Use of This Policy
This privacy and personal data protection policy applies to the website spiritualna.si (hereinafter: the website), operated by Izobraževanje Luka Arh s.p. (hereinafter: the provider). This policy applies to all users of the website.
By using the website, the user confirms that they understand, accept, and agree to all provisions of this privacy and personal data protection policy.
This policy may be changed or amended at any time without prior notice. By continuing to use the website after such changes, the user confirms their agreement with the changes.
What Data About Users Does the Provider Collect?
The provider collects personal and other user data through the website or with its assistance.
Types of data collected:
-
First name
-
Last name
-
Email address
-
Phone number
-
Gender
-
Street and house number
-
Postal code and city
-
Country of residence
-
Company name
-
Username
-
Password
Where and How Data Is Collected
-
When a user registers to use the online platform and related services
-
When filling out a contact form
-
When registering to use the Spiritualna.si online store
-
When registering to participate in prize contests
-
Through survey questionnaires published on the website or included in emails
Purpose of Using Collected Data
-
Sending newsletters, expert articles, and other website-related content to the provided email address
-
Providing benefits, discounts, etc. related to the provider’s products and services for newsletter subscribers
-
Recording potential customers
-
Preparing and sending offers to the provided email address
-
User segmentation (demographic, geographic, etc.)
Data Processing
Some of your data must be shared with other personal data controllers. These are mainly providers of payment services (banks, PayPal, etc.).
Another group includes transportation companies that ensure products are delivered to your address.
For business organization purposes, we also use subcontractors who perform certain services for us, such as web hosting and certain online services.
We have signed personal data processing agreements with all such subcontractors in accordance with Article 28 of the GDPR.
Data may also be provided to government authorities if they request it and there is a valid legal basis for doing so. This means the authority must have the legal right to request the data and must do so in an appropriate written form.
The provider will not share collected data with third parties unless there is a lawful basis to do so (e.g., court orders or requests from other authorities).
The user acknowledges and agrees that the provider may entrust certain tasks related to collected data to third parties (contract processors). These third parties may process entrusted data only within the limits of the provider’s authorization and in accordance with the purposes defined in the section “What Data About Users Does the Provider Collect?”
Data Protection and Retention Period
The provider protects all user data in accordance with this policy and the personal data protection requirements set by Slovenian law and European Union regulations.
The provider regularly performs data backups.
-
Registration data for the online store is stored for 5 years after the last login.
-
Purchase history data is stored as long as you have an active account with us. When you close your online store account, or after 5 years from your last login, your account data is deleted.
-
Direct marketing data (consent records and communication channels you approved) is stored for 2 years after the end of the year in which you fully withdrew your consent.
Other data may be stored only as long as necessary to fulfill the purpose for which it was collected, after which it must be permanently deleted or effectively anonymized.
User Rights
The provider will allow any user who has agreed to receive provider emails to unsubscribe at any time in a simple and understandable way.
Users may update or supplement their personal data at any time either through the website or by sending an email to:
Users may request correction or completion of inaccurate or incomplete personal data by emailing:
Users may request confirmation of whether the provider collects and processes their personal data, and which data is collected and processed.
This request may be made once every 3 months.
Users may request an electronic copy of their personal data by emailing:
This request may be made once every 3 months.
Before providing copies of personal data, the provider may require proof of identity. If doubts remain regarding identity, the request may be rejected.
Users may also request permanent deletion of all their personal data by emailing:
The provider may require proof of identity before deleting data.
Limitation of Liability
The provider is not responsible for damage caused to users if they provided incorrect, false, incomplete, or outdated personal information.
The provider is not responsible for damages caused if unauthorized third parties access, obtain, modify, or otherwise process user data without the provider’s explicit consent, despite the provider exercising reasonable care.
The provider is also not liable if such incidents occur because the user failed to properly safeguard access credentials (username and password).
Users are solely responsible for protecting login credentials.
Users must immediately notify the provider of any suspected misuse of personal data or login credentials.
If a contractual relationship exists between the provider and the user, the terms of that agreement (contract, general terms, etc.) apply regarding limitations of liability.
Website User Rights
You have all rights provided under Articles 15 to 20 of the Regulation.
These include the right to request:
-
Access to personal data (Article 15)
-
Correction of personal data (Article 16)
-
Deletion of personal data (Article 17)
-
Restriction of processing (Article 18)
-
Objection to processing (Article 21)
-
Data portability (Article 20)
You may exercise these rights by sending an email to:
Within the legal deadline (30 days from receiving a complete request), we will verify whether you meet the conditions for exercising your rights and notify you of our decision.
Right to File a Complaint
You may file a complaint regarding personal data processing at any time with Slovenia’s supervisory authority:
Information Commissioner
Dunajska 22
1000 Ljubljana
Final Provisions
The invalidity of any provision of this policy, regardless of the reason, does not render the entire policy invalid.
In such a case, the invalid provision shall be considered unwritten, while the rest of the policy remains valid.
Legal relationships between users and the provider are governed by the laws of the Republic of Slovenia and European Union law.
Any disputes shall be resolved by the competent court in Ljubljana, Republic of Slovenia.
Cookies
Cookies are small files containing information that are temporarily stored on your computer.
When cookies are installed on your computer, you are not specifically notified.
The main purpose of cookies is to allow web servers to recognize your computer and browser, customize the website, and ensure ease and speed of use.
Cookies help us display relevant information that you are searching for and interested in.
By collecting and remembering your website preferences through cookies, we can provide a better website and marketing experience.
Cookies do not give us access to your computer, and the data collected through cookies does not include personal data.
Cookies Used by Spiritualna.si
Essential cookies required for website functionality
Session cookie
Required for the content management and display system. This cookie ensures proper reception of electronic messages and website content. It is deleted when the user leaves the website.
Cloudflare Cookie
Used for Cloudflare CDN services to speed up server access.
Third-Party Cookies
Google Analytics
These cookies are used to track visitor statistics.
They do not contain personal information and serve only to ensure unique visit tracking.
More information about Google Analytics cookies, their purpose, and duration can be found at:
https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
If you want to block only Google Analytics services, you can do so through their website.
These cookies are used for Facebook plugin functionality.
For more information about storing and using collected information, see:
https://www.facebook.com/help/cookies
How to Manage Cookies
Most web browsers allow you to manage cookie settings.
You can reject or accept cookies using built-in browser settings.
If you reject cookies, you may still use our website, but certain pages may not function properly.
Below are links to instructions for disabling cookies in your browser:
-
Mozilla Firefox
-
Internet Explorer
-
Chrome
-
Safari
IMPORTANT: Cookies are files stored on your computer. To remove them, check the links above for instructions on deleting cookies in your browser.
Products and Services
-
High-vibration oracle cards from various authors such as Rebecca Campbell, Gabby Bernstein, and Yasmin Boland
-
Sage smudge incense, Palo Santo (Holy Wood), and Satya incense sticks
-
Incense holders
-
Journals (with or without crystal pens) for manifestation, journaling daily experiences, and rituals
-
Self-care packages that combine the above products and others. These packages are designed around specific themes and purposes and are intended for those who are new to spirituality or want to give a unique gift to someone important to them.
-
Oracle card reading — a service intended for people seeking support and guidance when making decisions or facing life challenges.