Privacy Policy

PRIVACY POLICY

Your privacy is very important to us. FC Olimpija d.o.o. respects your privacy and understands the concerns that may arise regarding the privacy and protection of personal data that you provide to us by visiting or through our websites, online stores or through our mobile applications (hereinafter referred to as the “Services”; “Online Services”). Therefore, please read how FC Olimpija d.o.o. (hereinafter referred to as “FCO”) treats your personal data.

The purpose of this Privacy Policy is to provide you with a simple overview of the personal data we collect about you, the grounds on which and the purposes for which we process it, the options available to you with regard to the management of your privacy settings, and your rights in relation to your personal data.

FCO’s Privacy Policy complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“General Data Protection Regulation”) and the legislation of the Republic of Slovenia and includes the following information:

• contact information of the FCO and the contact details of the Data Protection Officer,
• the legal bases and purposes for processing personal data,
• the types of personal data we collect,
• the use of cookies and related technologies,
• manage your privacy settings,
• the provision of personal data,
• retention periods for personal data,
• protection of personal data,
• the rights of individuals with regard to personal data, including the right to lodge a complaint,
• changes to the privacy policy.

• FC OLIMPIJA, d.o.o.
• Vojkova cesta 100
• 1000 Ljubljana
• (“FCO”).
• E-mail: office@nkolimpija.si

FCO collects, records, processes, stores, transfers and otherwise processes the personal data we hold about you on various legal bases and for the purposes set out below.

FCO processes personal data for the purpose of exercising rights and fulfilling obligations under contracts, namely:

• contracts for the sale/purchase of products – personal data provided by customers in online shops at www.shop.nkolimpija.si (regardless of registration);
• contracts for the use of online or mobile services – personal data of service subscribers.

In the context of the exercise of rights and performance of contractual obligations, FCO processes personal data of individuals for the purposes of identification of the individual, conclusion of the contract (although the contract for the sale of products between FCO and the customer in the online shop is concluded at the moment FCO sends an email to the customer about the status of his/her order (“order shipped/ready for collection”), it is considered, the personal data provided in this case is processed on the basis of the contractual legal basis also for the purpose of concluding the contract), for the purpose of communicating with you, for providing customer support and, in the case of a purchase, for the purpose of fulfilling the order, for sending notifications to individuals regarding the fulfillment of orders and for any other purposes necessary for the fulfillment of the order, for carrying out any recovery procedures and for our own accounting and tax purposes.

FCO processes personal data on the basis of legal obligations to which FCO is subject.

FCO may process personal data on the basis of legitimate interests pursued by FCO, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data. Where further processing of data collected about an individual is involved, the FCO shall carry out an assessment in accordance with the General Data Protection Regulation. For example, such further use of data in pseudonymised or aggregated (aggregated) form constitutes a legitimate use of the data for marketing and other business or technical analyses of the FCO. As an additional measure, the deletion of certain data may also be used as an additional measure for some forms of further processing of traffic data.

On the basis of legitimate interest, the FCO may process personal data to the extent strictly necessary and proportionate to ensure the operation of the Online Services, as well as to protect its intellectual property rights in relation to the Online Services.

On the basis of legitimate interests, FCO may also process your personal data for the purposes of direct marketing (in the case of customers), preventing abuse, asserting claims or defending claims in administrative and judicial proceedings.

FCO processes personal data on the basis of the data subject’s consent to the processing of personal data for the following purposes:

• for direct marketing purposes – to receive notifications. The notifications contain current offers, benefits and/or invitations to events of the Manager and its business partners, as well as useful tips, news and reminders from the world of sport and healthy lifestyle;
• to carry out marketing analyses and customer segmentation, and to provide tailored product and service offers;

Depending on the personal data you provide, you may receive notifications and personalised offers by SMS, MMS to the mobile phone number you provide, by email to the email address you provide or in hard copy to the address you provide.

You may withdraw or modify your consent at any time in the same way as consent was given; by clicking on the ‘unsubscribe’ button at the bottom of the email or by sending a request to withdraw consent for a specific purpose to office@nkolimpija.si.

Where consent involves direct marketing based on an individual’s profile, FCO may segment individuals based on their use of FCO’s websites for the purposes of tailored offers of services and products.

FCO collects a variety of information about you, including personal information that can be used to directly or indirectly identify you, if you or others choose to share that personal information with FCO. We receive information in a number of ways, including when you shop in our online store, sign up for e-newsletters (direct marketing), or visit FCO’s websites. FCO collects information about your use of the services we offer.

Personal data we collect:

• basic personal data such as first and last name, date of birth, email address, residential address (street address, street number, postcode, city, country), delivery address (street address, street number, postcode, city, country) and telephone number;
• information about the purchase and the method of payment, except that if the payment is made in an online shop using a credit card, the content of the card data shall not be stored in FCO’s databases;

Cookies are placed on your computer when you use our online services. In general, cookies and related technologies work by assigning a unique number to your browser or device that has no meaning outside of FCO.
FCO uses these technologies to personalize your experience and to help deliver content that is specific to your use.
A list of the cookies used by the website can be found at this link.
You can use the settings on your browser or mobile device to manage the collection of information through cookies or related technologies. FCO is committed to enabling you to manage your privacy and sharing, but assumes no responsibility for missed “Do Not Track” signals via your web browser. Refusal of cookies may result in some features of the services offered not being available to you.

FCO may share your personal data with third parties with whom we have contracts for the processing of personal data (“Contract Processors”) for the purposes of support, analysis and continuous improvement of our services, payment processing or order delivery. Contract processors shall only have access to the personal data that they strictly need to provide the services they perform for us, and only for the purposes of carrying out these tasks on our behalf, and shall not use it for any other purpose. Contract processors are obliged to protect your personal data.

FCO may work with contract processors who process statistical data about your use of our services for us in order to advertise our services or to display information that may be of interest to you. Such processors will only hold anonymised data.

We may share your personal data with contractual partners with whom we act as a joint controller who process your personal data in accordance with this Privacy Policy (e.g. the example of a prize draw in cooperation with suppliers).

In the event of a merger, or if FCO is involved in a business combination, demerger or transfer of business to a third party, we may transfer your information to the third party associated with the acquisition of FCO.

Notwithstanding the provisions regarding the retention period of personal data under the Privacy Policy, we may retain your personal data for a longer period of time and may disclose it to third parties such as the police, prosecutor’s office, court and other competent state authorities within or outside the Republic of Slovenia, if we deem such disclosure necessary and required by law, including for the purposes of preventing, investigating, detecting or prosecuting criminal offences. We may also disclose your personal data to state authorities where this is necessary for the establishment, exercise or defence of legal claims in legal proceedings or in administrative or extrajudicial proceedings.

If you use online services outside of EU Member States, the data you provide may be transferred, stored or processed in third countries where data protection legislation requires different standards than in EU or EEA Member States in order to provide online services. By using services in countries outside of the EU, you agree that your personal data may be transferred or transmitted to entities located in third countries. FCO will not otherwise itself export your personal data to countries outside the EU or EEA.

We keep personal data for as long as is necessary to provide our services or longer if there are legal obligations.

The personal data associated with your user account will be stored until the account is closed, in which case the data related to the purchase made by the user in the online shop will be retained. You can close your user account yourself in your account settings or ask us to delete it. It may take up to 10 working days from the time of the complete request to close the user account and delete your personal data. Please note that we may retain certain information from closed accounts to comply with the law, to prevent fraud, to collect debts, to resolve disputes, to troubleshoot problems, to assist with investigations by competent authorities, to enforce the Terms of Service, and to take other actions permitted by law. The information we retain will be treated in accordance with this Privacy Policy.

For the purpose of fulfilling contractual obligations, data relating to the payment for online shop purchases and related contact details of individuals may be retained until full payment for services has been made or until the expiry of any statute of limitations relating to a particular claim, which may be up to five years under the law. In accordance with the tax rules, invoices shall be kept for 10 years after the end of the year in which the invoice is issued.

Personal data obtained on the basis of consent will be retained until the consent is withdrawn, up to a maximum of 5 years.

We may anonymise information about you that is no longer necessary for the purposes for which it was collected or otherwise processed and combine it with other non-personally identifiable information to gain insight into statistical information that is commercially useful to the FCO, such as statistics on the use of the services we provide. This personal data is anonymised and does not offer a link to an identifiable individual.

We implement a number of technical and organisational measures to ensure the security of personal data during collection, transmission and storage. FCO endeavours to adequately protect your personal data, but we do not guarantee the complete security of the personal data you provide to us and we are not liable for any theft, destruction, loss, intentional or accidental disclosure of your personal data or information about you. FCO adheres to generally accepted standards to protect the information we receive both during transmission and after receipt, but no method of electronic transmission or storage is 100% secure and we cannot guarantee complete security. FCO uses SSL (Secure Sockets Layer) technology to provide encryption of personal and credit card information. FCO works with a company that ensures the security of our services and your personal information. FCO’s servers are further protected by the use of firewalls and other technologies to ensure data security.

It is also the user’s responsibility to protect their data by ensuring that their mobile device or computer is properly secured, as well as by protecting their username, password and the appropriate software (anti-virus) protection of their electronic device. To ensure that these measures are effective in preventing unauthorised access to your personal data, you should be aware of the security features available to you through your browser. Use a browser that allows you to set security features before you transmit your personal or credit card information over the Internet. Please be aware that if you are using a browser that does not support the use of SSL technology, such transmission of personal information may be risky.

Most browsers allow you to be notified if you are on a website that does not provide a secure connection, or if you are sending data over an insecure connection. The FCO recommends that you enable these features on your browser to help keep your personal data secure. You can also monitor the address where you are located (URL). Secure web addresses start with https:// instead of http://, together with the secure link symbol used by your browser (usually a padlock at the beginning of the web address). This symbol indicates the use of secure communication with the server. Please also check the details (validity) of the security certificate of the website you are visiting.

Limitation of liability. FCO is committed to protecting personal data and information about you, but no connection over the Internet can be 100% secure and we cannot guarantee the complete security of the information you provide to us. You provide us with your personal information at your own risk.

Requests made by an individual in relation to the exercise of rights may be sent to office@nkolimpija.si or by post to the above address. The individual is obliged to provide proof of identity and/or address for requests not made from the registered user’s e-mail address. FCO will respond to your request in accordance with applicable law.

The data subject has the following rights in relation to personal data:

8.1 Right of access to data

The individual may at any time request that the FCO confirms whether data relating to him or her is being processed and, if so, provides access to the personal data and information regarding the processing of his or her personal data (e.g. the purpose of the processing, the type of personal data, the users to whom the personal data have been or will be disclosed, the envisaged period of retention of the data, technical and organisational measures to protect the data, etc.).

8.2 Right to rectification

The individual may at any time request that the FCO allow him or her to correct inaccurate personal data concerning him or her and to complete incomplete personal data.

8.3 Right to erasure

Subject to the terms and conditions as further specified in the applicable regulations, the data subject may at any time request that the FCO grant him or her the right to erasure of his or her personal data (the “right to be forgotten”).

8.4 Right to restriction of processing

Subject to the terms and conditions as further specified in the applicable regulations, the data subject may at any time request that the FCO provide him or her with the right to restrict the processing of his or her personal data. Registered users of the Online Services can do so in your user account settings.

Please note that if we restrict the processing of certain personal data, we may not be able to provide a complete service.

8.5 Right to data portability

The individual may at any time request that the FCO allow the personal data to be provided to the individual in a structured, commonly used and machine-readable format, or transferred to a controller of the individual’s choice (if technically feasible), subject to the conditions as further specified in the applicable regulations.

8.6 Right to object

In the event that the FCO processes personal data on the basis of the FCO’s legitimate interests, as set out above, the data subject may object to such processing in certain cases. FCO will cease processing that personal data unless it considers that we have compelling legitimate grounds for continuing to process it or if the processing is necessary for legal reasons.

You can also object to the processing of personal data for direct marketing purposes by withdrawing your consent to receive notifications by clicking on the ‘unsubscribe’ button at the bottom of the email or by following the instructions in each notification sent to you.

8.7 Withdrawal of consent

The individual may withdraw consent at any time, in cases where he or she has given consent for a specific purpose for the processing of your personal data.

Withdrawal of consent shall not affect the lawfulness of the processing of personal data carried out until the withdrawal of consent.

8.8 Right of appeal to the supervisory authority

The individual has the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia if he or she considers that his or her personal data are being processed in breach of the applicable regulations governing the protection of personal data. The procedure for lodging a complaint with the supervisory authority is published on the website of the supervisory authority.

9. CHANGES TO THE PRIVACY POLICY

FCO reserves the right to change its privacy policy in light of the situation and the legislation on the protection of personal data. Please review it from time to time.

We will inform you in advance of any changes to the processing of your personal data and/or changes (updates) to our Privacy Policy. Changes to the Privacy Policy will also be posted on our website and mobile app pages in a timely manner.

If you do not agree to this Privacy Policy, please stop using our online services and withdraw your consent.

This Privacy Policy was last updated on 15.11.2025.