Privacy policy

Last updated: April 23, 2026

Your privacy is extremely important to JKH, which is why we have prepared this Privacy Policy, describing how we collect, use, and share your personal data when you visit or make a purchase on jkh-identity.com (hereinafter "the Website").

1. PERSONAL DATA CONTROLLER

In accordance with the Personal Data Protection Act (ZVOP-2) and the EU General Data Protection Regulation (GDPR), the data controller of this website is: Divas d.o.o. | Vrhovčeva ul. 1, 1000 Ljubljana, Slovenia | Registration No.: 3958493000 | Tax No.: 67949088 | E-mail: kaja@jkh-identity.com

2. DATA WE COLLECT

  • Order Data: Upon purchase, we collect your name, billing address, shipping address, email address, and phone number.
  • Payment Data: Payments are processed via Stripe/PayPal providers. We do not store your credit card numbers on our servers.
  • Technical Data: We automatically collect your IP address and device information to ensure security and improve website speed (via the NitroPack service).

3. PURPOSES OF DATA PROCESSING

  • Fulfillment of contractual obligations: To process and deliver your order (Article 6(1)(b) GDPR).
  • Legal obligation: For tax reporting purposes, we are required by Slovenian law to keep invoices (Article 6(1)(c) GDPR).
  • Consent: We only send e-newsletters if you explicitly subscribe to them. You can revoke your consent at any time.

4. DATA RETENTION (RETENTION PERIODS)

  • Invoices and order data: In accordance with the Value Added Tax Act (ZDDV-1), we must store this data for 10 years.
  • Marketing data: We keep your email address for e-newsletter purposes until you unsubscribe.
  • Technical logs: Stored for up to 2 years for security purposes.

5. SHARING YOUR DATA

We share your data only with necessary partners:

  • Delivery services: (e.g., Pošta Slovenije, DHL, or GLS) to deliver your order.
  • Professional services: Our accounting service in Slovenia and payment service providers.
  • Analytics: Google Analytics (using anonymized IP addresses).

6. YOUR RIGHTS AND COMPLIANCE

We respect your control over your personal data. In accordance with ZVOP-2 and GDPR, you have the right to access, correct, or delete your data at any time. We inform you that the age for digital consent in Slovenia, according to ZVOP-2, is set at 15 years. While we strive for the highest standards of data protection, you have the legal right to contact the supervisory authority in case of violations: Information Commissioner, Dunajska cesta 22, 1000 Ljubljana (gp.ip@ip-rs.si).

7. CHANGES

We may update this privacy policy from time to time for operational, legal, or regulatory reasons.