Privacy policy

Last updated: July 8, 2026

1. Who we are

This Privacy Policy explains how Prosecco 37 d.o.o. ("we", "us", "our") collects, uses, and protects your personal data when you visit our website or purchase our digital products. We are the data controller responsible for your personal data.

·       Prosecco 37 d.o.o.

·       Igriška ulica 5, 1000 Ljubljana, Slovenia

·       Email: support@prosecco37.com

·       Company registration number: 2366568000

·       VAT number: SI72261536

This Policy is written to comply with the EU General Data Protection Regulation (GDPR) and applicable Slovenian data protection law, and applies regardless of where in the world you access our Site from.

2. What personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

·       Identity and contact data: your name, email address, and billing address (where required for invoicing or VAT purposes).

·       Order and transaction data: details of the products you purchase, order value, and payment status. Your card or payment details themselves are collected and processed directly by our payment provider, not stored by us.

·       Account data: login credentials and access details for our online course platform.

·       Communications: messages you send us via email or contact forms, including support requests.

·       Technical and usage data: IP address, browser type, device information, pages visited, and how you interact with our Site, collected automatically through cookies and similar technologies.

·       Marketing preferences: whether you have opted in to receive marketing emails from us.

3. How we collect your data

We collect personal data directly from you when you place an order, create an account, sign up for our newsletter, or contact us. We also collect data automatically through cookies and analytics tools when you browse our Site.

4. Why we use your data and our legal basis

·       To process your order and provide access to the Course (performance of a contract).

·       To issue invoices and comply with tax and accounting obligations (legal obligation).

·       To respond to your enquiries and provide customer support (performance of a contract / legitimate interest).

·       To send you marketing communications, where you have opted in (consent, which you may withdraw at any time).

·       To maintain the security of our Site, prevent fraud, and improve our Products and user experience (legitimate interest).

5. Cookies

Our Site uses cookies and similar technologies to operate correctly, remember your preferences, and understand how visitors use our Site. Some cookies are essential for the Site to function; others (such as analytics or marketing cookies) are only used with your consent, which you can manage through the cookie banner shown when you first visit the Site. You can also control cookies through your browser settings.

6. Sharing your data with third parties

We do not sell your personal data. We share personal data only with trusted third parties who help us operate our business, including:

·       Our e-commerce platform (Shopify), which hosts our Site and processes orders.

·       Payment processors, who securely handle your payment details.

·       Email and marketing platforms, used to send order confirmations and, where you have consented, marketing communications.

·       Analytics providers, who help us understand how our Site is used.

·       Accounting and tax advisors, where necessary to meet our legal obligations.

These third parties are only permitted to use your personal data to provide services to us and are required to protect it in line with applicable data protection law.

7. International data transfers

Some of the third-party providers we use may process personal data outside the European Economic Area (EEA), including in the United States. Where this occurs, we rely on appropriate safeguards recognised under GDPR, such as the European Commission’s Standard Contractual Clauses, or the provider’s participation in an approved data protection framework.

8. How long we keep your data

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including any legal, accounting, or reporting requirements. Order and invoicing records are generally kept for the period required under Slovenian tax and accounting law. Marketing data is kept until you withdraw your consent or unsubscribe.

9. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Children’s privacy

Our Products and Site are intended for business and professional use by adults. We do not knowingly collect personal data from children under the age of 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The updated version will be posted on this page with a revised "Last updated" date.

12. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

·       Prosecco 37 d.o.o.

·       Igriška ulica 5, 1000 Ljubljana, Slovenia

·       Email: support@prosecco37.com