Privacy policy

Privacy Policy — GreatRobot d.o.o.

Effective date: 01.09.2025

This Privacy Policy explains how GreatRobot d.o.o. (“we”, “us”, “our”) processes your personal data when you use our website www.greatrobot.eu, purchase or rent products, subscribe to our communications, or otherwise interact with us.

1) Controller & Contact

Controller: GreatRobot d.o.o.
Address: Spodnji Brnik 121, 4207 Cerklje na Gorenjskem, Slovenia (EU)
Email: info@greatrobot.eu

We have not appointed a Data Protection Officer (DPO) because our activities do not require one under GDPR or ZVOP-2. For any privacy-related questions or to exercise your rights, contact us at the email above or by post.

2) Categories of Personal Data

We may process the following personal data:

Order & account data: name, surname, billing/delivery address, company details (if applicable), VAT number, email, phone, purchase history.
Payment data: payment status and method (credit card, bank transfer, cash on delivery). We do not store credit card details.
Logistics data: tracking numbers, delivery status.
Communications data: inquiries, support requests, emails.
Marketing subscriptions: name (optional), email, consent/unsubscribe details, engagement with newsletters.
Technical data (website): IP address, browser/device, basic analytics, cookies (see Section 10).

3) Purposes & Legal Bases

We process personal data for the following purposes:

Contractual obligations (Art. 6(1)(b) GDPR): order fulfilment, invoicing, delivery, returns, warranty.
Legal obligations (Art. 6(1)(c) GDPR): tax and accounting compliance (e.g., retention of invoices).
Consent (Art. 6(1)(a) GDPR): newsletters, promotions, marketing campaigns. You may withdraw consent at any time.
Legitimate interests (Art. 6(1)(f) GDPR): fraud prevention, IT security, customer communications, improving services.

4) Retention

Customer account & order data: retained for the duration of your account and up to 5 years after contract fulfilment (unless longer required).
Invoices & tax records: retained for 10 years (ZDavP-2).
Marketing subscriptions: retained until withdrawal of consent.
After expiry, data are deleted or anonymised.

5) Recipients & Processors

Your data may be shared only with trusted partners under data processing agreements:

Logistics: GLS (for shipping).
Payments: card acquirer, banks, COD courier handling.
IT & hosting providers.
Marketing tools: email platforms.
Advisors & authorities: accountants, auditors, regulators, where legally required.

We do not sell your personal data.

6) International Transfers

If data are transferred outside the EEA, we rely on adequacy decisions or Standard Contractual Clauses (SCCs) with supplementary safeguards.

7) Your Rights

You have the following rights under GDPR (Arts. 15–22):

Access to your data.
Rectification of inaccurate data.
Erasure (“right to be forgotten”).
Restriction of processing.
Portability of data.
Objection to processing (including direct marketing).
Withdrawal of consent (without affecting prior processing).

Contact us at info@greatrobot.eu to exercise these rights. We respond within one month.
You also have the right to complain to the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec): www.ip-rs.si.

8) Providing Data

Providing personal data is voluntary, but required for purchases (e.g., without address details we cannot deliver your order).

9) Security

We apply technical and organisational measures (secure hosting, access control, encryption in transit, backups, monitoring) to protect personal data. No online system is 100% secure, but we strive to maintain appropriate safeguards.

10) Cookies & Online Identifiers

Our website uses cookies for functionality and analytics.

Essential cookies: necessary for shopping cart, checkout, login (no consent needed).
Analytics cookies: used to improve performance (consent required).
Marketing cookies: if applied in future, require consent.

11) Profiling & Automated Decisions

We do not use personal data for automated decision-making or profiling that produces legal or significant effects.

12) Children’s Data

Some of our products are designed for children (e.g., educational robots suitable for ages 3+, 8+). However, our website, online store, and account registration are intended for use by adults (18+) only. We do not knowingly enter into contracts directly with children or collect their personal data without parental or guardian involvement.

If you are under 18, please ask a parent or guardian to place orders on your behalf. Any personal data relating to minors (e.g., shipping address including the child’s name for a gift) must be provided with the consent of a parent or guardian.

If we become aware that we have collected personal data from a child without appropriate consent, we will delete it as soon as possible.

13) Complaints & Disputes

Please contact us first at info@greatrobot.eu with any concerns. We aim to resolve issues amicably. If unresolved, disputes fall under Slovenian law and the jurisdiction of the competent court in Slovenia.

14) Changes

We may update this Policy from time to time. The latest version is always available at www.greatrobot.eu, with the effective date shown at the top.