Privacy Policy

PART A. ENGLISH VERSION

PRIVACY POLICY

Last updated: September 2026

1. WHO WE ARE

The controller of personal data collected through eNumis.shop is:

eNumis, trgovina d.o.o. Stegne 3, 1000 Ljubljana, Slovenia

Registration number: 8261156000 

Email: info@enumis.shop Telephone: +386 70 429 715

This Privacy Policy explains what personal data we process when you visit eNumis.shop, place an order, write to us or subscribe to our notifications, why we process it, how long we keep it and what rights you have.

2. WHAT WE PROCESS, WHY, AND ON WHAT LEGAL BASIS

Orders and delivery. Name and surname, delivery and billing address, email address, telephone number, the items ordered, the amount paid, the chosen payment and delivery method, and the order history. We need these data to conclude and perform the sales contract with you, to dispatch the goods, to handle returns, withdrawals and claims, and to answer questions about your order. Legal basis: performance of a contract, and compliance with our legal obligations in tax and accounting matters.

Customer account. If you create an account, we process your login details, contact details and order history for as long as the account exists. You can buy from eNumis.shop without creating an account. Legal basis: performance of a contract.

Correspondence. If you write to us by email or contact us by telephone, we process your contact details and the content of your message in order to answer it and to keep a record of what was agreed. Legal basis: performance of a contract where the message concerns an order, otherwise our legitimate interest in answering enquiries addressed to us.

Newsletter. If you sign up for our newsletter, we process your email address in order to send it. You can unsubscribe at any time. Legal basis: your consent.

Coin alerts. If you ask us to notify you when a matching coin appears in stock, we process your email address and the parameters of the alert until you cancel it. Legal basis: your consent.

Website operation and security. Our web server and our security measures process the IP address, the request, the time and the browser identification of every visit, as any web server does, and our shop software keeps a technical session so that the basket, the language and the currency work. Legal basis: our legitimate interest in operating and securing the website.

Advertising and measurement cookies. Only if you press Accept in our cookie banner, Google cookies are used for advertising and measurement in connection with our Google Shopping listings and Google Ads campaigns. If you press Reject, or press nothing, they are not used. See Section 6. Legal basis: your consent.

We do not make decisions about you by automated means alone, and we do not sell personal data.

3. WHO RECEIVES YOUR DATA

We disclose personal data only to the extent necessary, and only to:

  • our hosting and email provider, Neoserv, Slovenia;
  • our domain and SSL provider, Avant.si, Slovenia;
  • payment service providers: Stripe and Bankart for card payments, Apple Pay and Google Pay, and PayPal where that method has been agreed;
  • delivery providers: The Post of Slovenia and DHL Express, which receive the recipient’s name, address, telephone number and email address for the purpose of delivery and parcel status notifications;
  • Google, in connection with the advertising and measurement cookies described in Section 6, and only where you have consented;
  • our external accountants, who process order and invoice data in order to keep our books;
  • competent authorities, where we are required by law to disclose data.

Our processors act on our instructions and are bound to protect the data they process for us.

4. TRANSFERS OUTSIDE THE EUROPEAN ECONOMIC AREA

Our website, our email and our shop database are hosted in Slovenia.

Where you order delivery outside the European Economic Area, the delivery address and contact details are necessarily transferred to the postal or courier operator and to the customs authorities of the destination country, so that the parcel can be delivered and cleared.

Payment service providers and Google may process data outside the European Economic Area. Where that happens, such transfers take place under the safeguards provided for in Chapter V of the GDPR.

5. HOW LONG WE KEEP IT

  • Order data and the related accounting documents: 10 years. Slovenian tax law requires documentation to be kept until the absolute limitation period for the collection of the tax it relates to has expired, and that period is ten years from the day the limitation period first started to run.
  • Customer account: for as long as the account exists. You can ask us to delete it at any time.
  • Newsletter: until you unsubscribe.
  • Coin alerts: until you cancel the alert.
  • Correspondence: for as long as is necessary to deal with the matter, and thereafter within the applicable limitation periods.
  • Cookie consent: your choice is stored in your own browser until you clear it or change it.

6. COOKIES AND SIMILAR TECHNOLOGIES

Before you make a choice, no cookies other than strictly necessary ones are used.

Strictly necessary. Cookies and similar storage that make the shop work: the shopping basket and the checkout session, the selected language and currency, and protection against misuse. Without these the website cannot function, and under Article 225 of the Slovenian Electronic Communications Act (ZEKom-2) they do not require consent.

Advertising and measurement. Google cookies used in connection with our Google Shopping listings and Google Ads campaigns. These are used only after you press Accept. Until then, and permanently if you press Reject, the Google tags on our site run with storage disabled, which means they set no cookies.

Your choice. When you first visit eNumis.shop, a banner offers Accept and Reject as two equal options. Your choice is stored in your own browser. You can change it at any time by opening the cookie settings from the link in the footer of any page, or by clearing your browser storage for this site. Withdrawing consent does not affect the lawfulness of what was done before you withdrew it.

You can also block or delete cookies in your browser settings. If you block the strictly necessary ones, parts of the shop will stop working.

7. YOUR RIGHTS

Under the GDPR you have the right to:

  • obtain confirmation whether we process your personal data, to access it and to receive a copy;
  • have inaccurate or incomplete data corrected;
  • have your data erased, where the conditions for erasure are met;
  • have processing restricted, where the conditions are met;
  • receive the data you gave us in a structured, commonly used, machine-readable format, and have it transmitted to another controller, where processing is based on consent or on a contract and is carried out by automated means;
  • object to processing based on our legitimate interest;
  • withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, write to info@enumis.shop or to the postal address in Section 1. We may ask for information needed to establish your identity, so that we do not disclose your data to somebody else.

If you believe your data is processed unlawfully, you may lodge a complaint with the supervisory authority. In the Republic of Slovenia this is the Information Commissioner (Informacijski pooblaščenec), www.ip-rs.si.

8. SECURITY

The website is served over an encrypted connection. Access to the shop administration, to the database and to the server is limited to authorised persons. Payment card details are entered on the payment provider’s systems and are not stored on our website.

9. CHANGES TO THIS POLICY

We may update this Privacy Policy. The version published on eNumis.shop at any given time is the applicable one. Where a change materially affects how we process your data, we will make that clear on the website.

10. CONTACT

eNumis, trgovina d.o.o. Stegne 3, 1000 Ljubljana, Slovenia

Email: info@enumis.shop Telephone: +386 70 429 715


PART B. SLOVENSKA RAZLIČICA

POLITIKA ZASEBNOSTI

Zadnja posodobitev: september 2026

1. KDO SMO

Upravljavec osebnih podatkov, zbranih prek spletne trgovine eNumis.shop, je:

eNumis, trgovina d.o.o. Stegne 3, 1000 Ljubljana, Slovenija

Matična številka: 8261156000 

Elektronski naslov: info@enumis.shop Telefon: +386 70 429 715

Ta politika zasebnosti pojasnjuje, katere osebne podatke obdelujemo, ko obiščete eNumis.shop, oddate naročilo, nam pišete ali se prijavite na obvestila, zakaj jih obdelujemo, kako dolgo jih hranimo in katere pravice imate.

2. KAJ OBDELUJEMO, ZAKAJ IN NA KATERI PRAVNI PODLAGI

Naročila in dostava. Ime in priimek, naslov za dostavo in za račun, elektronski naslov, telefonska številka, naročeni predmeti, plačani znesek, izbrani način plačila in dostave ter zgodovina naročil. Te podatke potrebujemo za sklenitev in izvedbo prodajne pogodbe, za odpremo blaga, za obravnavo vračil, odstopov in zahtevkov ter za odgovore na vprašanja o naročilu. Pravna podlaga: izvajanje pogodbe in izpolnjevanje zakonskih obveznosti na davčnem in računovodskem področju.

Uporabniški račun. Če ustvarite račun, obdelujemo prijavne podatke, kontaktne podatke in zgodovino naročil, dokler račun obstaja. Nakup v spletni trgovini eNumis.shop je mogoč tudi brez računa. Pravna podlaga: izvajanje pogodbe.

Komunikacija. Če nam pišete po elektronski pošti ali nas pokličete, obdelujemo vaše kontaktne podatke in vsebino sporočila, da nanj odgovorimo in ohranimo zapis o dogovorjenem. Pravna podlaga: izvajanje pogodbe, kadar se sporočilo nanaša na naročilo, sicer naš zakoniti interes, da odgovorimo na prejeta vprašanja.

E-novice. Če se prijavite na e-novice, obdelujemo vaš elektronski naslov za njihovo pošiljanje. Odjava je mogoča kadar koli. Pravna podlaga: vaša privolitev.

Obvestila o kovancih. Če želite obvestilo, ko je na zalogi ustrezen kovanec, obdelujemo vaš elektronski naslov in parametre obvestila, dokler ga ne prekličete. Pravna podlaga: vaša privolitev.

Delovanje in varnost spletne strani. Naš strežnik in varnostni mehanizmi ob vsakem obisku obdelajo naslov IP, zahtevek, čas in podatek o brskalniku, kot to velja za vsak spletni strežnik, programska oprema trgovine pa vzdržuje tehnično sejo, da delujejo košarica, izbrani jezik in valuta. Pravna podlaga: naš zakoniti interes za delovanje in varnost spletne strani.

Oglaševalski in merilni piškotki. Samo če v pasici pritisnete Accept, se uporabijo Googlovi piškotki za oglaševanje in merjenje v zvezi z našimi objavami v Google Shopping in kampanjami Google Ads. Če pritisnete Reject ali ne pritisnete ničesar, se ne uporabijo. Glejte 6. točko. Pravna podlaga: vaša privolitev.

O vas ne odločamo zgolj na podlagi avtomatizirane obdelave in osebnih podatkov ne prodajamo.

3. KDO PREJME VAŠE PODATKE

Osebne podatke razkrijemo le v nujnem obsegu, in sicer:

  • ponudniku gostovanja in elektronske pošte Neoserv, Slovenija;
  • ponudniku domene in potrdila SSL Avant.si, Slovenija;
  • ponudnikom plačilnih storitev: Stripe in Bankart za kartična plačila, Apple Pay in Google Pay ter PayPal, kadar je ta način dogovorjen;
  • ponudnikom dostave: Pošta Slovenije in DHL Express, ki za namen dostave in obveščanja o statusu pošiljke prejmeta ime, naslov, telefonsko številko in elektronski naslov prejemnika;
  • družbi Google v zvezi z oglaševalskimi in merilnimi piškotki iz 6. točke, in le kadar ste v to privolili;
  • zunanjim računovodjem, ki obdelujejo podatke o naročilih in računih za vodenje poslovnih knjig;
  • pristojnim organom, kadar smo podatke dolžni razkriti po zakonu.

Naši obdelovalci ravnajo po naših navodilih in so zavezani k varovanju podatkov, ki jih obdelujejo za nas.

4. PRENOSI ZUNAJ EVROPSKEGA GOSPODARSKEGA PROSTORA

Spletna stran, elektronska pošta in baza trgovine gostujejo v Sloveniji.

Če naročite dostavo zunaj Evropskega gospodarskega prostora, se naslov za dostavo in kontaktni podatki nujno prenesejo poštnemu ali kurirskemu izvajalcu in carinskim organom namembne države, da je pošiljko mogoče dostaviti in ocariniti.

Ponudniki plačilnih storitev in Google lahko podatke obdelujejo zunaj Evropskega gospodarskega prostora. Kadar do tega pride, takšni prenosi potekajo ob upoštevanju zaščitnih ukrepov iz V. poglavja Splošne uredbe o varstvu podatkov.

5. KAKO DOLGO HRANIMO PODATKE

  • Podatki o naročilih in povezana računovodska dokumentacija: 10 let. Slovenska davčna zakonodaja določa, da je dokumentacijo treba hraniti do poteka absolutnega zastaralnega roka pravice do izterjave davka, na katerega se nanaša, ta rok pa je deset let od dneva, ko je zastaranje prvič začelo teči.
  • Uporabniški račun: dokler račun obstaja. Izbris lahko zahtevate kadar koli.
  • E-novice: do odjave.
  • Obvestila o kovancih: do preklica obvestila.
  • Komunikacija: toliko časa, kolikor je potrebno za obravnavo zadeve, nato pa v okviru veljavnih zastaralnih rokov.
  • Privolitev za piškotke: vaša izbira je shranjena v vašem brskalniku, dokler je ne izbrišete ali spremenite.

6. PIŠKOTKI IN PODOBNE TEHNOLOGIJE

Dokler ne izberete, se ne uporabljajo nobeni piškotki razen nujno potrebnih.

Nujno potrebni. Piškotki in podobna shramba, ki omogočajo delovanje trgovine: košarica in seja ob zaključku nakupa, izbrani jezik in valuta ter zaščita pred zlorabami. Brez njih spletna stran ne more delovati, po 225. členu Zakona o elektronskih komunikacijah (ZEKom-2) pa zanje privolitev ni potrebna.

Oglaševanje in merjenje. Googlovi piškotki v zvezi z našimi objavami v Google Shopping in kampanjami Google Ads. Uporabijo se šele, ko pritisnete Accept. Do takrat, in trajno, če pritisnete Reject, Googlove oznake na naši strani delujejo z onemogočeno shrambo, kar pomeni, da ne nastavijo nobenih piškotkov.

Vaša izbira. Ob prvem obisku spletne trgovine eNumis.shop se prikaže pasica z enakovrednima možnostma Accept in Reject. Izbira se shrani v vašem brskalniku. Spremenite jo lahko kadar koli prek povezave do nastavitev piškotkov v nogi katere koli strani ali tako, da za to spletno mesto počistite shrambo brskalnika. Preklic privolitve ne vpliva na zakonitost obdelave, ki je potekala pred preklicem.

Piškotke lahko blokirate ali izbrišete tudi v nastavitvah brskalnika. Če blokirate nujno potrebne, deli trgovine ne bodo delovali.

7. VAŠE PRAVICE

Po Splošni uredbi o varstvu podatkov imate pravico:

  • da pridobite potrditev, ali obdelujemo vaše osebne podatke, da do njih dostopate in prejmete njihovo kopijo;
  • da se netočni ali nepopolni podatki popravijo;
  • da se vaši podatki izbrišejo, kadar so izpolnjeni pogoji za izbris;
  • da se obdelava omeji, kadar so izpolnjeni pogoji;
  • da prejmete podatke, ki ste nam jih posredovali, v strukturirani, splošno uporabljani in strojno berljivi obliki ter da se posredujejo drugemu upravljavcu, kadar obdelava temelji na privolitvi ali pogodbi in se izvaja z avtomatiziranimi sredstvi;
  • da ugovarjate obdelavi, ki temelji na našem zakonitem interesu;
  • da privolitev kadar koli prekličete, kadar obdelava temelji na privolitvi, ne da bi to vplivalo na zakonitost obdelave pred preklicem.

Za uveljavljanje teh pravic pišite na info@enumis.shop ali na poštni naslov iz 1. točke. Zaprosimo lahko za podatke, potrebne za ugotovitev vaše istovetnosti, da vaših podatkov ne razkrijemo komu drugemu.

Če menite, da vaše podatke obdelujemo nezakonito, lahko vložite pritožbo pri nadzornem organu. V Republiki Sloveniji je to Informacijski pooblaščenec, www.ip-rs.si.

8. VARNOST

Spletna stran se prenaša po šifrirani povezavi. Dostop do skrbniškega dela trgovine, do baze podatkov in do strežnika je omejen na pooblaščene osebe. Podatki o plačilnih karticah se vnašajo v sistemih ponudnika plačilnih storitev in se na naši spletni strani ne shranjujejo.

9. SPREMEMBE TE POLITIKE

Politiko zasebnosti lahko posodobimo. Veljavna je različica, objavljena na eNumis.shop. Kadar sprememba bistveno vpliva na obdelavo vaših podatkov, bomo to na spletni strani jasno označili.

10. KONTAKT

eNumis, trgovina d.o.o. Stegne 3, 1000 Ljubljana, Slovenija

Elektronski naslov: info@enumis.shop Telefon: +386 70 429 715