Protection of personal data

In the company Natural, Stiven Žlebič, s.p., Trgovina Woodhit (in the following: Natural), we respect the privacy of our customers, we act responsibly, carefully with their personal data and in accordance with regulations in force in the Republic of Slovenia and the internal files of the Natural company. Access to personal data is permitted only to authorized employees and contractors, to the extent and with the purpose necessary for the smooth running of work processes, the provision of business services and the fulfilment of rights and obligations under the contractual relationship with the customer.

Use of personal data

Natural uses your personal data only to fulfil your order (sending you informational material, offers, invoices, anything related to your order) and anything related to your order and the communication, and for the purposes for which we have obtained your consent.

Data collected during the purchase will not be passed on to third parties. At any time, the buyer may request from the supplier to permanently or temporarily cease the use of personal data and purchase information for the purposes mentioned above. At the time of the personal data management, the data in the database may, upon request, be submitted for inspection and updated. We are committed to ensure that personal data collected on the website is fully stored, protected and processed by Natural. With all personal data acquired, the operator of the website will act in accordance with the Data Protection Act and the General Regulation for the Protection of Personal Data. Your data is protected against loss, destruction, forgery, manipulation and unauthorized access or unauthorized disclosure by third parties.

Person authorized for the protection of personal datav

If you have any questions regarding our privacy policy or how we handle your personal data, you may contact the person responsible for the protection of your personal data by e-mail to

Purpose of processing personal data and legal basis

Personal data of customers is processed by Natural within the framework and for the implementation of contractual relationships. On the basis of the contractual legal basis, personal data will be processed to the extent necessary for the conclusion of contracts, in the negotiation phase, on receipt of the offer or request and with customer complaints. If you purchase services online, warrants all necessary technical and organizational solutions for the complete security of the purchase. The transfer of personal data given at registration on the website and the transaction data regarding the purchase on a website are performed in secure mode using the SSL protocol (SecureSocketsLayer). Data is encrypted and transmitted to the server of Natural in a protected form. Thus, the system prevents the interception of personal data sent by a customer to the online store. The security of personal data at the time of purchase is also ensured by compliance with the applicable legal obligations and recommendations of the Slovenian and international consumer associations.

Natural also processes personal data on the basis of the legal basis:

  • the Act on Combating Money Laundering and the Financing of Terrorism for transferring personal data of individuals to be reported to the Office Combating Money Laundering and the Financing of Terrorism,
  • and on the basis of other international treaties, EU regulations and national laws that require Natural to transfer personal data of individuals to national authorities and other operators in order to fulfil their own or their legal obligations or responsibilities.

On the basis of the legal interest, personal data is processed by Natural in order to reduce the risks of intrusion into the website (information security, minimizing the risk of unauthorized access to important business information, personal data and information systems) and to carry out analyses of personal data for the regulation of credit risk and optimization of business decisions (protecting the economic interests of Natural) and statistical processing to prepare management reports; whereas the reports always contain only anonymized data.

In certain cases, Natural asks its customers and other individuals to give their consent to the processing of their personal data for the purpose of evaluating certain personal aspects relating to an individual, in particular to analyse the economic situation, personal preferences, interests and behaviours of that person (profiling), the production and presentation of personalized offers of goods and services, including notification or direct marketing and conducting market research. In these cases, the processing of personal data takes place in the context of an individual statement on the permissible scope of personal data, purpose and agreed communication channels until revocation.

Cookies and location data

Natural also collects personal data when visiting its websites through cookies in order to obtain better functionality and user experience, security, undisturbed activity of the websites or portals and for counting website's or portal's users.

Natural uses the following cookies:

  • Mandatory cookies: They are necessary to ensure an undisturbed functioning of the website or the web portal owned or managed by Natural. They are saved when the website's visitor submits the form, logs on or has any interaction with the website by clicking on simple links.
  • Analytical cookie: With these cookies Natural analyses the data traffic on a particular website to improve the user experience. The visitor accepts a cookie by clicking on a field on the webpage or by actively surfing on a webpage after receiving a cookie notification.
  • Cookies for social networks: Cookies for social networks enable to share the content of a website on some social networks. Third-party plugins and tools are used as cookies, provide functionality, help with the frequency analysis of the website visits and the use of websites.

To enable proper operation and use of all features in mobile and online apps, Natural may process the user's location data: GPS coordinates (longitude and latitude), IP settings (browser location or user's apps) captured with the user's mobile device. Natural processes location data in a way that it can not be assigned to any particular or identifiable person or based on prior consent of the user. Upon request for consent, Natural notifies users of the option to refuse consent, the nature of the data to be processed, the purpose and duration of such processing, and the ability to transfer location data to a third party to provide a value-added service. The user may process their consent/revocation regarding the use of location data each time he/she connect to the network, or for any communication transmission either in the app itself or in the "location tools" of the mobile device. This may prevent features that use such data. However, other apps are available that do not relate to location data.

Personal data processors and possible transmission of personal data to third countries

Apart from the company Natural (employee), personal data is processed on its behalf and for its account by processors, such as companies that support Natural in processing personal data, eg. manufacturers and operators of computer apps, websites and information services, developers and software solution providers, call centres and processors who are commissioned by Natural to provide services required to execute contracts, such as: technicians or provider of services, printing, insurance, delivery, point of sale managers, external marketers, transporters of goods to customers, registrars of manning conditions, marketing, research and analysis companies, external marketing agencies and event organizers, Natural representatives for the execution and stipulation of contracts including recovery and possible legal proceedings.

If your personal information is transferred to third countries (outside the EU and the EEA), we will ensure appropriate measures are taken to ensure the safety of personal data and the fundamental rights and freedoms of individuals in accordance with applicable national and EU rules and Privacy policy regulations by using the proposed mechanisms such as binding business rules, standard contract clauses, etc.

Rights of individuals

By written request sent to: Natural, Stiven Žlebič, s.p., Trgovina Woodhit, Cvetkova ulica 2, SI-9000 Murska Sobota, with the note "for GDPR", or to the e-mail address an individual may request access, supplement, correction, editing restriction, deletion of personal data, or one may object to the processing of the user's data and request data transfer.

The user may revoke consents to the processing of personal data at any time permanently or temporarily by a written request to the following address: Natural, Stiven Žlebič, s.p., Trgovina Woodhit, Cvetkova ulica 2, SI-9000 Murska Sobota, with the note "for GDPR", or to the e-mail address an individual may request access, supplement, correction, editing restriction, deletion of personal data, or one may object to the processing of the user's data and request data transfer. The revocation of consent has no influence on the lawfulness of the processing which was carried out on the basis of the consent until its revocation.

The user is entitled to lodge a complaint with the Information Agent of the Republic of Slovenia if he/she considers that his/her personal data is not stored or processed to the current rules governing the protection of personal data.

Deadlines of personal data retention

Natural processes personal data to the extent necessary to achieve processing purposes and as long as it is necessary to achieve the objective pursued, in the case of personal data obtained by consent, and until deletion, except in cases where the retention period for personal data is set by law. In these cases, data will be kept by Natural in accordance with the legal obligation.