Privacy policy

Last updated: 20.8.2026

This Privacy Policy explains how Mint Sorbet, operated by Petra Berko under the Personal Supplementary Work (Osebno dopolnilno delo – ODD) regime, collects, uses, stores and protects personal data when you visit or use the Mint Sorbet website at mint-sorbet.com or place an order through our online store.

We respect your privacy and process personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Slovenian legislation, including the Personal Data Protection Act (ZVOP-2).

1. Data Controller

The controller responsible for your personal data is:

Petra Berko
Trading name: Mint Sorbet
Legal status: Personal Supplementary Work (Osebno dopolnilno delo – ODD)
Address: Dvorakova ulica 4, 2000 Maribor, Slovenia
Tax number: 35004266
E-mail: info@mint-sorbet.com
Website: mint-sorbet.com

For any questions concerning the processing of your personal data or the exercise of your data protection rights, you may contact us at:

info@mint-sorbet.com

2. Personal Data We Collect

Depending on how you use our Website and services, we may collect the following categories of personal data:

Information provided when placing an order

When you purchase a product, we may collect:

First and last name;
Billing and delivery address;
E-mail address;
Telephone number, if provided;
Order details and purchased products;
Payment-related information necessary to process the transaction;
Information relating to returns, refunds, complaints or customer support.

We do not normally have access to complete payment card details when payments are processed by third-party payment providers.

Information provided when contacting us

If you contact us by e-mail or through a contact form, we may collect:

Your name;
E-mail address;
The contents of your message;
Any other information you voluntarily provide.

Technical information

When you visit our Website, certain technical information may be collected automatically, depending on the services and cookies enabled on the Website.

This may include:

IP address;
Browser type and version;
Device type;
Operating system;
Approximate location derived from technical information;
Pages visited;
Date and time of access;
Referring website;
Technical information relating to your interaction with the Website.

3. Purposes of Processing

We may process personal data for the following purposes:

Processing and fulfilling orders

We use personal data to:

Process and confirm orders;
Process payments;
Prepare and dispatch products;
Deliver orders;
Communicate with customers regarding orders;
Handle returns, refunds and complaints;
Provide customer support.

Legal and accounting obligations

We may process personal data where necessary to:

Comply with tax and accounting obligations;
Issue and maintain invoices and other legally required records;
Comply with consumer protection legislation;
Respond to lawful requests from competent authorities;
Establish, exercise or defend legal claims.

Website operation

We process certain technical information where necessary to:

Operate and maintain the Website;
Maintain website security;
Prevent fraud and abuse;
Diagnose technical problems;
Ensure the proper functioning of the Shopify online store.

Marketing

Where legally required, we may process your personal data for direct marketing purposes only where we have an appropriate legal basis, such as your valid consent.

You may withdraw your consent to marketing communications at any time.

4. Legal Bases for Processing

Depending on the circumstances, we process personal data on one or more of the following legal bases under the GDPR:

Performance of a contract

We process information that is necessary to process and fulfil your order and perform our obligations under the purchase contract.

Legal obligation

We may process personal data where processing is necessary to comply with legal obligations, including accounting, tax, consumer protection and other statutory requirements.

Legitimate interests

Where permitted by law, we may process certain personal data where this is necessary for our legitimate interests, provided that those interests are not overridden by your fundamental rights and freedoms.

Examples may include website security, fraud prevention, protecting our legal rights and maintaining the proper operation of our business.

Consent

Where required by law, we will ask for your consent before processing personal data for specific purposes, such as certain marketing activities or non-essential cookies and similar tracking technologies.

You may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Payment Providers

Payments made through the Website may be processed by third-party payment service providers, including providers supporting:

Credit and debit card payments;
Apple Pay;
Google Pay;
PayPal.

Payment providers may process personal data in accordance with their own privacy policies and terms.

Mint Sorbet does not intentionally store complete payment card numbers or security codes.

The information necessary to complete a payment may be shared with the relevant payment provider.

6. Shopify

Our online store is operated using Shopify.

Shopify provides the infrastructure and technology necessary to operate our online store, including functions related to product presentation, checkout, orders, customer information and website operation.

Shopify may process personal data in accordance with its own privacy policy and applicable data protection requirements.

Personal data may be processed or stored on servers located outside Slovenia or the European Economic Area where applicable.

Where personal data is transferred outside the European Economic Area, appropriate safeguards required under applicable data protection legislation will be used where necessary.

7. Delivery and Shipping Providers

To deliver your order, we may provide relevant personal data to the shipping provider responsible for delivering your order.

For Mint Sorbet, orders are generally shipped using Pošta Slovenije.

Information shared may include:

Name;
Delivery address;
Contact details necessary for delivery;
Order or shipment information.

The shipping provider processes the information necessary to perform the delivery service and may process it in accordance with its own privacy policy and applicable legislation.

8. Other Service Providers

We may use third-party service providers where necessary to operate our business and Website.

These may include:

Website and hosting providers;
Payment providers;
Shipping and delivery providers;
E-mail and communication providers;
IT and security providers;
Accounting and professional service providers;
Shopify applications and other technical service providers.

Such providers may process personal data only to the extent necessary to provide their services and under applicable legal requirements.

9. Cookies and Similar Technologies

The Website uses cookies and similar technologies.

Cookies may be used for different purposes, including:

Essential website functionality;
Shopping cart and checkout functionality;
Security;
Remembering preferences;
Website analytics;
Marketing and advertising.

Cookies that are strictly necessary for the operation of the Website may be used without prior consent where permitted by applicable law.

For non-essential cookies and similar tracking technologies, we will request your consent where required by applicable Slovenian law.

You may manage your cookie preferences through the cookie consent mechanism available on the Website and, where applicable, through your browser settings.

For more information about cookies used on the Website, including their purposes and duration, please refer to our cookie settings or cookie information displayed on the Website.

10. Direct Marketing

If you subscribe to receive marketing communications from Mint Sorbet, we may use your e-mail address to send you information about products, promotions, offers and other marketing communications where we have a valid legal basis to do so.

You may unsubscribe from marketing communications at any time by:

Using the unsubscribe mechanism included in the relevant e-mail; or
Contacting us at info@mint-sorbet.com.

The rules applicable to electronic direct marketing are also governed by applicable Slovenian electronic communications legislation.

11. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law.

Different categories of personal data may therefore be retained for different periods.

For example:

Order and transaction information may be retained for as long as necessary to fulfil the purchase contract and comply with accounting, tax and other legal obligations;
Customer support communications may be retained for as long as necessary to resolve the relevant matter and protect our legal interests;
Marketing data may be retained until you withdraw your consent or unsubscribe, unless another lawful basis for retention applies;
Technical information and cookie data may be retained for periods determined by the relevant technology and applicable law.

When personal data is no longer required, it will be deleted or otherwise securely disposed of where reasonably possible.

12. Your Rights

Subject to the conditions and limitations established by applicable law, you have the right to:

Request access to your personal data;
Request correction of inaccurate or incomplete personal data;
Request deletion of personal data;
Request restriction of processing;
Object to certain processing;
Request data portability where applicable;
Withdraw consent where processing is based on consent;
Lodge a complaint with the competent supervisory authority.

To exercise your rights, contact:

info@mint-sorbet.com

We may need to verify your identity before processing certain requests in order to protect your personal data from unauthorised access.

13. Right to Object

Where we process your personal data on the basis of legitimate interests, you may object to such processing where the legal requirements for exercising this right are met.

You have an absolute right to object to the processing of your personal data for direct marketing purposes.

14. Right to Lodge a Complaint

If you believe that your personal data has been processed unlawfully or that your rights under applicable data protection legislation have been violated, you have the right to lodge a complaint with the competent supervisory authority.

In Slovenia, the competent supervisory authority is:

Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec)

Dunajska cesta 22
1000 Ljubljana
Slovenia

E-mail: gp.ip@ip-rs.si

The Information Commissioner supervises compliance with data protection legislation in Slovenia.

15. Data Security

We take reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no method of transmission or storage over the Internet can be guaranteed to be completely secure.

If we become aware of a personal data breach that requires notification under applicable law, we will take the measures required by the GDPR and applicable Slovenian legislation.

16. Children's Privacy

Our Website is not specifically directed at children.

We do not knowingly collect personal data from children for marketing purposes.

If you believe that a child has provided personal data to us without appropriate consent, please contact us at info@mint-sorbet.com.

17. International Data Transfers

Some of our service providers may process personal data outside Slovenia or the European Economic Area.

Where personal data is transferred to a country outside the European Economic Area, we will ensure that the transfer is carried out in accordance with applicable data protection legislation.

Depending on the circumstances, this may include an adequacy decision of the European Commission, Standard Contractual Clauses or another legally recognised transfer mechanism.

18. Automated Decision-Making and Profiling

Mint Sorbet does not generally make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on customers.

If this changes in the future, we will provide the information required by applicable data protection legislation.