Privacy policy
Please read our Privacy Policy carefully before using our website ooo-la-la.com.
Introductory provision
The ooo-la-la.com online store respects the trust you place in us when you provide us with your personal data and allow us to use it. This Privacy Policy (hereinafter: the Policy) informs you about the purposes and legal bases for processing personal data and your rights in this area.
Information about the data controller
Data controller
The controller of personal data processed in accordance with this Policy is Spletna trgovina Nataša Spreitzer s.p., Pot na Debeli Hrib 54, 1291 Škofljica, Slovenia, which is also the designated person responsible for personal data protection.
Contact details of the data controller
Spletna prodaja Nataša Spreitzer s.p.
Email address: info@ooo-la-la.com
Postal address: Pot na Debeli Hrib 54, 1291 Škofljica, Slovenia
Contact details of the supervisory authority
You have the right to lodge a complaint regarding a potential violation of your rights with the Information Commissioner at any time using the contact details below:
Name: Information Commissioner
Postal address: Dunajska cesta 22, 1000 Ljubljana, Slovenia
Telephone number: +386 1 230 97 30
Email address: gp.ip@ip-rs.si
Website: www.ip-rs.si
Purposes and legal bases for processing personal data
We collect and process your data to provide you with the best possible experience when browsing our website and to provide the services you request. By using the website, you agree to the provisions of this Privacy Policy.
We respect your right to privacy and will process the collected data only in accordance with applicable EU legislation.
Types of data collected
The types of data collected by this website include:
• Identification data, including the user’s first and last name.
• Contact data, including email address, postal (delivery) address, billing address and telephone number.
• Financial data, including bank account details and payment or credit card details.
• Transaction data, including information about payments and other details relating to purchased goods or services.
• Technical data, including your Internet Protocol (IP) address, login details, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
• Usage data, including information about how you use our website, products and services.
• Profile data, including your username and password, purchases or orders, interests, preferences, feedback and survey responses.
• Marketing and communications data, including your preferences regarding receiving marketing communications from us and our partners, as well as your communication preferences.
• Special categories of data, including information about your sex life to the extent that it can be inferred from your behaviour on the website and from submitted orders, preferences, interests, survey responses and similar information.
We do not collect, use or share aggregated data, such as statistical or demographic data, for any purpose. Aggregated data may be derived from your data but is not considered personal data under the law, as it does not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users who access a particular website feature. However, if we combine or connect aggregated data with your data in a way that directly or indirectly identifies you, we treat the combined data as personal data, which will be used in accordance with this document.
We do not collect any special categories of data about you (including details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health information, or genetic and biometric data).
How we collect data
We use various methods to collect data:
Direct interactions. You may provide us with your data by completing forms or communicating with us by email or telephone. This includes data you provide when you:
• place an order or purchase our products or services;
• create an account on our website;
• subscribe to our newsletter or marketing communications;
• participate in a survey or complete forms; or
• send us feedback or contact us.
Automated technologies or interactions. As you interact with our website, we will automatically collect technical data about your equipment, browsing activity and patterns. We collect this data using cookies and other similar technologies. You can read more about this in the following section (Cookies).
Participation in prize draws. When you participate in a prize draw, you provide your personal data as part of your entry. We process this data to conduct the prize draw and award prizes. The data may include your first and last name, address, email address, telephone number, year of birth and tax number (only if you receive a prize).
Cookies
A cookie is a small file containing a sequence of letters and numbers that is stored on your computer or other device when a website is loaded in your browser. Cookies are commonly used because they remember you and your preferences, improving your user experience and making it quicker and easier to purchase products on our website.
Cookies provide visitors with a consistent and efficient user experience while ensuring the operation of essential features, such as user registration and the storage of login details. Cookies may be set by the provider of the website you are visiting or by third parties, such as those that add content to the website or provide advertising and analytics services on the website (“third-party cookies”).
The table below lists the types of cookies we use and their purposes:
| Cookie name | Purpose | Cookie duration |
|---|---|---|
| AdWords - A, AdsUserLocale, I, SAG, aptenv, mid | Enables sales analysis, page-view statistics and user retargeting. | 90 days |
| Facebook - locale, datr, reg_fb_ref, reg_fb_gate | Used to increase user engagement through social media, analyse sales and retarget users. | Does not expire |
| Google Analytics - utma | Enables page-view statistics. | 2 years |
| Google Analytics - utmb | Enables statistics based on the time a user arrives on the website. | 30 minutes |
| Google Analytics - utmc | Enables statistics based on the time a user leaves the website. | When the browser is closed |
| Google Analytics - utmz | Enables visitor and sales statistics across different channels. | 6 months |
| Google Analytics - utmv | Enables user segmentation on the website. | 2 years |
| Google Analytics - ga | Page-view statistics and sales analysis across different sales channels. | 6 months |
| Google Analytics - cid | Page-view statistics and sales analysis across different sales channels. | 6 months |
| Twitter - pid | Used to increase user engagement through social media. | 2 years |
| OneSignal - _OneSignal_session | Enables direct messaging services. | Does not expire |
Removing cookies from your device. You can delete all cookies already stored on your device by clearing your browser history. This will remove all cookies from all websites you have visited. You may also lose some stored information, such as saved login details and website preferences.
Rejecting cookies. You can reject or block all or selected types of cookies by changing your browser’s cookie settings. Please note that most browsers automatically accept cookies. Therefore, if you do not want cookies to be used, you may need to actively delete or block them. If you reject cookies, you will still be able to visit our website, but some features may not function correctly.
Learn how to manage cookies in the most commonly used browsers:
• Google Chrome
• Mozilla Firefox
• Microsoft Internet Explorer
• Opera
• Apple Safari
Legal bases
We may process data relating to you if one of the following applies:
• you have consented to the processing for one or more specific purposes;
• processing is necessary for the performance of a contract with you and/or to fulfil any pre-contractual or contractual obligation;
• processing is necessary for compliance with a legal obligation to which we are subject;
• processing relates to a task carried out in the public interest or in the exercise of official authority vested in us;
• processing is necessary for the legitimate interests pursued by us or by a third party.
We do not primarily rely on consent as the legal basis for processing your data, although we will obtain your consent before sending you direct marketing communications by email or text message. You have the right to withdraw your consent to marketing at any time by contacting us.
Location of processing
Data is processed at our offices and at any other locations where the partners involved in the processing are located. Depending on your location, data transfers may involve transferring data to a foreign country.
Purpose of processing
Data relating to you is collected to enable you to use the website and to allow us to provide our services, comply with our legal obligations, respond to requests to exercise your rights, protect our rights and interests (or those of our users or third parties), detect malicious or fraudulent activity, and for the following purposes:
• registration and verification;
• enquiries and purchases of products;
• enquiries and provision of services;
• business communication;
• conducting surveys and research;
• analytics;
• advertising, including sending marketing communications.
We will use your data only for the purposes for which it was collected, unless we reasonably believe that we need to use it for another reason and that this reason is compatible with the original purpose. If you would like an explanation of how processing for a new purpose is compatible with the original purpose, please contact us. If we need to use your data for an unrelated purpose, we will notify you and explain the legal basis that allows us to do so.
Transfer of data to third countries
We do not transfer data to third countries.
Retention period
Data is processed and stored for as long as required for the purpose for which it was collected:
• Data collected for purposes related to the performance of a contract between us and you is retained until the contract has been fully performed.
• Data collected for the purposes of our legitimate interests is retained for as long as necessary to fulfil those purposes. Specific information about the legitimate interests we pursue can be found in the relevant sections of this Privacy Policy.
• We may retain data for longer whenever you have given consent to such processing, provided that the consent has not been withdrawn. We may also be required to retain data for a longer period when necessary to comply with a legal obligation or an order from an authority.
After the retention period expires, the data is permanently deleted. Consequently, the right of access, the right to erasure, the right to rectification and the right to data portability can no longer be exercised after the retention period has expired.
Device permissions for data access
Depending on the device you use to access the website, you may need to grant certain permissions. If you want to change these permissions, you may need to do so in your device settings. If you withdraw a permission, this may affect the normal operation of the website.
Your rights
• You may withdraw your consent at any time. You have the right to withdraw consent where you have consented to the processing of your data;
• You have the right to object to the processing of your data where the processing is carried out on a legal basis other than consent. Further details are provided in the section below;
• You have the right to find out whether we are processing your data, request disclosure regarding certain aspects of the processing and obtain a copy of the data being processed;
• You have the right to verify the accuracy of your data and request that it be updated or corrected;
• In certain circumstances, you have the right to restrict the processing of your data. In this case, we will not process your data for any purpose other than storing it;
• In certain circumstances, you have the right to request that we erase your data;
• You have the right to receive your data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted to another controller without hindrance. This provision applies provided that the data is processed by automated means and that the processing is based on your consent, on a contract to which you are a party, or on pre-contractual or contractual obligations;
• You have the right to lodge a complaint with the competent data protection authority. The Information Commissioner’s details are provided at the beginning of this document.
How can you exercise your rights? You may submit any request to exercise your rights using our contact details. These requests may be submitted free of charge and will be handled as quickly as possible and always within one month.
Additional information about data collection and processing
Reliability. You are responsible for backing up all important data stored on or accessible through this website to your computer or another device. We do not represent or warrant that any content you store or access through our website will not be unintentionally damaged, corrupted or lost.
Security. We will use reasonable care to protect the confidentiality of data. Nevertheless, we cannot be held responsible for any loss or disclosure of data, or any loss or damage arising from transmission errors, unauthorised or unlawful acts by third parties, or your decision to disclose data. No system can be completely secure, and despite our efforts, there is always a risk of unauthorised access to your data. By using this website, you accept this risk.
Legal proceedings. We may use your data for legal purposes in court or in proceedings that may lead to legal action arising from the improper use of this website or related services. You acknowledge that we may be required to disclose data at the request of public authorities.
Additional information about your data. In addition to the information contained in this Privacy Policy, this website may provide you, upon request, with additional and contextual information concerning particular services or the collection and processing of data.
VALIDITY OF THE POLICY
This Policy is published on ooo-la-la.com. The Policy was last updated on 20 July 2025.