Privacy Policy

1. Controller

The controller of personal data in the online shops mausser.net, quad-gume.hr, obor-tires.si, atv-tires.si is:

• DANIJEL MAUSSER s.p.
• Naselje Aleša Kaple 3A, 1430 Hrastnik
• Registration number: 3983447000
• VAT ID: SI25207687
• E-mail: info@mausser.net · phone: +386 41 350 817

For questions about the processing of personal data and exercising your rights, please write to us at info@mausser.net.

2. What data we collect and why

Orders — first and last name, e-mail address, phone number, billing and delivery address, optionally company name and VAT ID, items ordered and amount. We need this data to fulfil the contract (delivery, invoicing, complaints); invoices are retained as required by tax legislation.

User account — same as for orders, plus password (stored in hashed form only), wish list, consents and order history. The legal basis is the user account agreement.

Business account (B2B) — company details (name, VAT ID, registration number, registered address, business activity). The legal basis is the contract or our legitimate interest in verifying a business customer.

Newsletter — e-mail address, only with your consent. You may withdraw your consent at any time in the 'My Account' section or via the link in the e-mail.

Communications — messages you send us by e-mail or phone, for the purpose of responding to them.

3. Processors and recipients

We share data only with service providers we need to operate the shop, and only to the extent necessary:

• Stripe — card payment processing (you enter your card details directly with Stripe; we do not receive them);
• server hosting provider and e-mail service provider;
• delivery services — name, address and phone number for delivery;
• Photon (komoot) / OpenStreetMap — when you type in a street address, the text you enter is sent via our server to retrieve address suggestions, without any other data about you;
• accounting services and public authorities, where required by law.

4. How long we retain data

• Invoices and order data: 10 years from the end of the year in which the invoice was issued (Value Added Tax Act).
• User account: until you delete it or request its deletion; an unconfirmed account is deleted after 7 days.
• Newsletter data: until consent is withdrawn.
• Other data: for as long as necessary for the purpose for which it was collected.

5. Your rights

You have the right to access your data, to rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw consent at any time. In the 'My Account' section you can update your details yourself, download all your data (JSON file) and request account deletion; we will process the request within 30 days. Orders and invoices will remain stored after deletion as required by law, but will no longer be linked to your account.

If you believe we are processing your data unlawfully, you may lodge a complaint with the Information Commissioner of the Republic of Slovenia (www.ip-rs.si).

6. Cookies and browser storage

We use only cookies and storage that are strictly necessary for the operation of the shop and therefore do not require your consent:

• mm-customer — logged-in customer session (up to 30 days);
• shopping cart, wish list and discount code — stored in your browser (localStorage) so you do not lose them between visits;
• Stripe — cookies for secure payment processing and fraud prevention, only during card payment.

We do not currently use any analytics or advertising cookies. If we introduce them, we will ask for your consent beforehand.

7. Security

The site operates over an encrypted connection (HTTPS). Passwords are stored in hashed form, and only authorised persons have access to data.

8. Changes

This Privacy Policy may be updated. The current version is always published on this page.