Z E N' E I — Privacy Policy
Z E N ' E I

Privacy Policy

Effective date: April 22, 2026
Last updated: April 22, 2026
Regulation: GDPR (EU) 2016/679
Your privacy matters. This policy explains what data we collect, why we collect it, how we use it, and what your rights are. It applies to everyone who visits zenei.eu, places an order, or joins our Friends & Family community.

Z E N' E I is based in Slovenia and operates within the European Union. Questions: info@zenei.eu
Section 01

Who We Are

The data controller responsible for your personal data is:

Data Controller
Tina Vintar s.p.
Brdnikova ulica 34e, 1000 Ljubljana, Slovenia
DŠ: 41060903  · 
Not subject to VAT (Article 287, EU VAT Directive 2006/112/EC)
info@zenei.eu  ·  zenei.eu
Section 02

What Data We Collect & Why

We only collect data that is necessary for a specific, legitimate purpose.

2.1 — When you place an order
What
Name, email address, delivery address, order details, payment confirmation reference (not card details — those go directly to Stripe)
Why
To fulfil your order and send confirmation and shipping updates (contract performance); to comply with tax and accounting obligations (legal obligation)
How long
Order records retained 7 years per Slovenian accounting law, then deleted
2.2 — When you join Friends & Family
What
Name, email and/or phone number, size preferences (voluntary), how you joined, SMS marketing consent status
Why
To manage your membership (contract performance); to send SMS marketing about drops and exclusives — only if you have explicitly opted in (consent)
How long
For as long as you are an active F&F member. Marketing data deleted within 30 days of opt-out or deletion request. Order records: 7 years.
2.3 — SMS Marketing
Consent
SMS messages sent only where explicit, specific, and informed consent has been given. The F&F sign-up form includes an optional, unticked checkbox. Ticking is not required for membership.
What we text
New drops, early access windows, sample sale announcements, F&F exclusive releases. Nothing unrelated to Z E N' E I.
Opt-out
Reply STOP to any SMS · Update preferences at zenei.eu/ff/account · Email info@zenei.eu. Opting out does not affect F&F membership.
2.4 — Website analytics
Tools
Google Analytics 4, Meta Pixel
What
Anonymised behavioural data (pages visited, time spent, traffic source). Does not identify you personally unless you consent to personalised tracking.
Legal basis
Consent (via cookie banner). Strictly necessary cookies do not require consent.
Section 03

Who We Share Your Data With

We do not sell your data. We do not share it with third parties for their own marketing purposes. We share data only with the following processors, strictly to provide our services:

ProcessorPurposeLocation
StripePayment processingUSA / EU (SCCs apply)
Pošta Slovenije / DPD / GLSShipping and deliverySlovenia / EU
Klaviyo (when activated)Email and SMS marketing managementUSA (SCCs apply)
WooCommerce / WordPressOrder management and websiteEU hosting
Google AnalyticsWebsite analyticsUSA (SCCs apply)
Meta (Facebook Pixel)Advertising and analyticsUSA (SCCs apply)

All processors are contractually bound to process your data only as instructed and to maintain appropriate security measures. International transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission.

Section 04

Your Rights Under GDPR

To exercise any of the following rights, contact us at info@zenei.eu. We will respond within 30 days.

Access
Request a copy of the personal data we hold about you.
Rectification
Ask us to correct inaccurate or incomplete data.
Erasure
Ask us to delete your data, unless required to retain it for legal reasons.
Restriction
Ask us to limit how we process your data in certain circumstances.
Portability
Request your data in a machine-readable format for transfer.
Object
Object to processing based on legitimate interests or for direct marketing.
Withdraw consent
Withdraw consent (e.g. SMS marketing) at any time without penalty.
Complain
Lodge a complaint with the Slovenian supervisory authority (see below).
Supervisory Authority — Slovenia
Information Commissioner of the Republic of Slovenia (IP RS)
Dunajska cesta 22, 1000 Ljubljana
www.ip-rs.si  ·  gp.ip@ip-rs.si
Section 05

Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure — including secure connections (HTTPS), access controls, and working only with reputable processors.

If we become aware of a data breach that affects your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform you directly where required by law.

Section 06

Cookies

TypePurposeConsent required?
Strictly necessaryShopping cart, login session, site functionNo
AnalyticsGoogle Analytics 4 — site behaviourYes
AdvertisingMeta Pixel — ad targeting and analyticsYes

Manage cookie preferences at any time via the consent banner on our website.

Section 07

Children

Our products and website are not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us at info@zenei.eu and we will delete it.

Section 08

Changes to This Policy

We may update this policy from time to time. The effective date at the top of this document reflects the current version. Significant changes will be communicated to F&F members via email.