Privacy policy

Privacy Policy

Last updated: 17 August 2026

This Privacy Policy describes how Denis Ilis Sauperl s.p., trading under the MIROCOOL brand (“MIROCOOL”, “we”, “us”, or “our”), collects, uses, stores and protects your personal data when you visit mirocool.com, create an account, make a purchase, contact us, subscribe to marketing communications, or otherwise interact with our online store and services.

We are committed to protecting your privacy and processing personal data transparently and in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Slovenian data protection legislation, including the Personal Data Protection Act (ZVOP-2).

1. Data Controller

The controller responsible for processing your personal data is:

Denis Ilis Sauperl s.p.
Limbuška graba 18
2341 Limbuš
Slovenia
VAT ID: SI47682965

Trading brand: MIROCOOL
Website: mirocool.com
Email: info@manukamed.si

For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us using the email address above.

2. Personal Data We Collect

Depending on how you interact with our website, we may collect and process the following categories of personal data:

Identification and contact information

This may include:

  • first and last name;

  • billing address;

  • shipping address;

  • email address;

  • telephone number, if provided for order fulfilment or delivery;

  • company name;

  • VAT number or other business information, where applicable.

Account information

If you create a customer account, we may process information associated with your account, including:

  • name;

  • email address;

  • account credentials or authentication information;

  • saved addresses;

  • order history;

  • account preferences.

Order and transaction information

When you place an order, we may process:

  • products purchased;

  • order value;

  • billing and shipping details;

  • payment method;

  • transaction status;

  • discounts or promotional codes;

  • returns, refunds and complaints;

  • correspondence relating to your order.

Payment information

Payments may be processed through third-party payment providers, including Shopify Payments and PayPal.

Depending on the payment method used, payment providers may process payment card information, bank information, transaction identifiers and other information necessary to process and secure your payment.

MIROCOOL does not generally receive or store your complete payment card details where those details are processed directly by the relevant payment service provider.

Technical and usage information

When you visit our website, certain information may be collected automatically, including:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • approximate geographic location;

  • pages visited;

  • products viewed;

  • referring website;

  • date and time of access;

  • interactions with our website;

  • cookie and similar technology identifiers.

Communications

When you contact us, we may process:

  • your name;

  • email address;

  • the content of your message;

  • order information;

  • any other information you voluntarily provide.

Marketing information

If you subscribe to our newsletter or consent to marketing communications, we may process:

  • your email address;

  • marketing preferences;

  • consent status;

  • engagement with marketing communications, where applicable.

3. How and Why We Use Your Personal Data

We process personal data only where we have an appropriate legal basis under applicable data protection law.

Performance of a contract

We process personal data where necessary to:

  • process and fulfil your orders;

  • accept and process payments;

  • arrange shipping and delivery;

  • provide order confirmations and updates;

  • manage returns and refunds;

  • respond to issues concerning your purchase;

  • manage your customer account;

  • provide customer support.

The legal basis for this processing is Article 6(1)(b) GDPR.

Compliance with legal obligations

We may process and retain certain personal data where necessary to comply with legal obligations, including accounting, tax, consumer protection and other applicable legal requirements.

The legal basis is Article 6(1)(c) GDPR.

Legitimate interests

Where appropriate, we may process personal data based on our legitimate interests, including:

  • protecting our website and business from fraud and abuse;

  • securing our systems;

  • preventing fraudulent transactions;

  • improving our services and customer experience;

  • handling and defending legal claims;

  • maintaining appropriate business records;

  • understanding the performance of our business where such processing does not require consent.

The legal basis is Article 6(1)(f) GDPR.

Where we rely on legitimate interests, we consider whether our interests are overridden by your fundamental rights and freedoms.

Consent

Where required by law, we rely on your consent for activities such as:

  • email marketing;

  • certain analytics technologies;

  • advertising and remarketing technologies;

  • non-essential cookies and similar tracking technologies.

The legal basis is Article 6(1)(a) GDPR.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

4. Shopify

Our online store is hosted on Shopify.

Shopify provides the e-commerce infrastructure that enables us to operate the MIROCOOL online store, including functions related to the storefront, customer accounts, shopping cart, checkout, order management and payment processing.

When you browse our store, create an account or make a purchase, certain personal data may therefore be processed through Shopify's systems.

Depending on the particular service, Shopify may process information such as:

  • contact information;

  • billing and shipping information;

  • order information;

  • transaction information;

  • device and browser information;

  • IP address;

  • website usage information.

Shopify and its affiliates and service providers may process personal data in countries outside the European Economic Area as described further in Section 12 of this Privacy Policy.

5. Payments

We intend to offer payment options that may include Shopify Payments and PayPal.

When you choose a particular payment method, information necessary to process the transaction may be transferred to and processed by the relevant payment service provider.

Payment providers may process your data independently in accordance with their own privacy policies and applicable legal obligations, including obligations relating to fraud prevention, payment security, anti-money laundering and financial regulation.

We recommend reviewing the privacy information provided by the payment provider you choose.

6. Analytics

We may use Google Analytics, subject to applicable consent requirements, to understand how visitors use our website and to improve its performance.

Depending on your consent choices and the configuration used, Google Analytics may process information such as:

  • device and browser information;

  • interactions with our website;

  • pages viewed;

  • approximate location;

  • traffic source;

  • session information;

  • cookie or similar identifiers.

Where required under applicable law, Google Analytics and other non-essential analytics technologies will only be activated after you have provided the appropriate consent.

You can change or withdraw your cookie preferences through the cookie settings available on our website.

7. Advertising

We may use Google Ads and related advertising technologies to promote MIROCOOL and measure the effectiveness of our advertising campaigns.

Where required by law, advertising and remarketing technologies will only operate after you have provided the necessary consent.

Depending on your consent and the technologies used, advertising providers may process information concerning your interactions with our website, advertisements and products.

You may withdraw or modify your consent through the cookie preference settings available on our website.

8. Email and Newsletter Communications

Our business email communications may be provided through Titan Email.

If we introduce newsletter or email marketing services, these may be provided through a specialist email marketing provider such as Mailchimp or another provider identified in this Privacy Policy or our cookie/privacy settings at the relevant time.

We will only send electronic marketing communications where we have an appropriate legal basis to do so.

Where marketing is based on your consent, you may withdraw that consent at any time.

Every promotional email will provide an appropriate method to unsubscribe from future marketing communications.

Please note that unsubscribing from marketing communications does not prevent us from sending transactional communications necessary for an existing order, customer service request, account security or another contractual relationship.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some cookies are strictly necessary for the website and online store to function. These may be used for purposes such as:

  • maintaining your shopping cart;

  • enabling checkout;

  • maintaining security;

  • remembering essential preferences;

  • authenticating customer accounts;

  • preventing fraud.

Other cookies may be used for:

  • analytics;

  • performance measurement;

  • advertising;

  • remarketing;

  • personalisation.

Where required under applicable law, non-essential cookies will not be activated until you have provided consent.

You will be able to manage your preferences through the cookie consent mechanism provided on our website.

Further information may be provided in our separate Cookie Policy.

10. Who We May Share Personal Data With

We may share personal data with service providers where necessary to operate our business and provide our services.

These may include:

  • Shopify and its affiliated companies;

  • payment service providers;

  • PayPal;

  • banks and payment processors;

  • shipping and logistics companies;

  • fulfilment providers;

  • IT and hosting providers;

  • email service providers;

  • analytics providers;

  • advertising providers;

  • accountants and professional advisers;

  • public authorities where disclosure is legally required.

We do not disclose personal data to third parties merely for their own unrelated purposes unless we have an appropriate legal basis to do so.

Service providers acting on our behalf are expected to process personal data only as necessary to provide their services and in accordance with applicable data protection requirements.

11. Shipping and Delivery

To fulfil your order, we may provide necessary personal data to shipping, courier, postal and logistics providers.

This information may include:

  • your name;

  • delivery address;

  • email address;

  • telephone number where necessary for delivery;

  • order or shipment reference;

  • other information necessary to complete delivery.

The exact logistics provider may depend on the destination, shipping method and availability.

12. International Transfers of Personal Data

Some of the service providers used by our online store operate internationally.

As a result, your personal data may in certain circumstances be transferred to or processed in countries outside Slovenia or the European Economic Area (“EEA”), including countries such as Canada and the United States.

Where personal data are transferred outside the EEA, appropriate safeguards will be used where required by applicable law. Depending on the circumstances, these may include:

  • an adequacy decision adopted by the European Commission;

  • Standard Contractual Clauses approved by the European Commission;

  • Binding Corporate Rules;

  • another legally recognised transfer mechanism.

We take reasonable steps to ensure that service providers processing personal data on our behalf provide appropriate safeguards for personal data.

13. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law.

Retention periods may differ depending on the nature of the information and the purpose of processing.

For example, information relating to orders, invoices and transactions may be retained for the period required under applicable accounting, tax and commercial legislation.

Customer service correspondence may be retained for as long as reasonably necessary to resolve inquiries, protect our legitimate interests and establish, exercise or defend legal claims.

Marketing data based on consent may generally be processed until you withdraw your consent or until the data are no longer required for the relevant marketing purpose.

When personal data are no longer required, they will be deleted, anonymised or otherwise handled in accordance with applicable law.

14. Your Rights Under the GDPR

Subject to the conditions and limitations provided by applicable law, you may have the right to:

Right of access

You may request confirmation of whether we process your personal data and obtain access to those data.

Right to rectification

You may request correction of inaccurate or incomplete personal data.

Right to erasure

You may request deletion of your personal data where the legal requirements for erasure are satisfied.

Right to restriction of processing

You may request that processing of your personal data be restricted in certain circumstances.

Right to data portability

Where applicable, you may request personal data you provided to us in a structured, commonly used and machine-readable format and may have the right to transmit those data to another controller.

Right to object

Where processing is based on legitimate interests, you may have the right to object to the processing.

You have the right to object at any time to processing of your personal data for direct marketing purposes.

Right to withdraw consent

Where processing is based on consent, you may withdraw your consent at any time.

Rights concerning automated decision-making

Where applicable, you have rights concerning decisions based solely on automated processing that produce legal effects or similarly significantly affect you.

To exercise your rights, contact:

info@manukamed.si

We may need to verify your identity before fulfilling a request.

15. Right to Lodge a Complaint

If you believe that your personal data have been processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority.

For Slovenia, the supervisory authority is:

Information Commissioner of the Republic of Slovenia
(Informacijski pooblaščenec Republike Slovenije)

You may also have the right to contact another competent data protection authority, particularly in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

We encourage you to contact us first if you have a privacy concern so that we have an opportunity to address it.

16. Security

We implement reasonable technical and organisational measures designed to protect personal data against:

  • unauthorised access;

  • accidental or unlawful destruction;

  • loss;

  • alteration;

  • unauthorised disclosure;

  • other unlawful processing.

However, no method of transmitting or storing information electronically can guarantee absolute security.

You are responsible for maintaining the confidentiality of any credentials associated with your customer account.

17. Children's Privacy

Our products and services are intended for a general adult audience and are not specifically directed at children.

We do not knowingly seek to collect personal data directly from children for marketing purposes.

If you believe that a child has provided us with personal data in circumstances where we should not process those data, please contact us.

18. Third-Party Websites and Services

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices, security or content of third-party websites that are not under our control.

We recommend reviewing the privacy policies of any third-party services you choose to use.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • changes to our services;

  • changes to technologies used on our website;

  • changes to our service providers;

  • changes in legal or regulatory requirements;

  • changes in our business operations.

The current version will be published on mirocool.com, together with the date of the latest update.

Where required by law, we will provide additional notice of material changes.

20. Contact

For questions concerning privacy, personal data or your rights under applicable data protection law, please contact:

MIROCOOL
Denis Ilis Sauperl s.p.
Limbuška graba 18
2341 Limbuš
Slovenia

VAT ID: SI47682965

Email: info@manukamed.si

Website: mirocool.com

© 2026 MIROCOOL / Denis Ilis Sauperl s.p.