SHOP NOW

‌Effective Date: November 10, 2026‌

Welcome to the privacy policy of Outclimb, trgovina, posredništvo in storitve, d.o.o. (“we”, “us”, or “our”). This policy applies to our official e-commerce website www.outclimbshop.com, which is dedicated to providing lightweight, reliable outdoor gear that turns every casual weekend trip into a warm, unforgettable memory you will carry long after you get home. We are fully committed to protecting the personal data and privacy rights of all our users and customers, in full compliance with applicable data protection regulations.

All our personal data processing activities are carried out in strict accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, commonly known as the General Data Protection Regulation (GDPR), alongside the national legislation of the Republic of Slovenia including the Personal Data Protection Act (ZVOP-1, Official Gazette No. 94/07) and the Electronic Communications Act (ZEKom-1, Official Gazette No. 109/12).

1. Data Controller Information

The data controller responsible for all your personal data processing activities on this website is:
‌Outclimb, trgovina, posredništvo in storitve, d.o.o.‌

  • Registered Address: Jelovškova ulica 19, 1241 Kamnik, Slovenia
  • Contact Email: minty@outclimbshop.com
  • Contact Phone: +386 1 830 3569

We take full legal responsibility for ensuring that all processing of your personal data adheres to the requirements set out in this privacy policy and applicable laws. All company information required by Slovenian and EU legal requirements is displayed prominently on our website, and we never conceal our merchant identity from users.

2. Types of Personal Data We Collect

We only collect personal data that is necessary to deliver our e-commerce services, process your orders, and optimize your shopping experience on [www.outclimbshop.com]. The categories of personal data we may collect include:

2.1 Data Provided Voluntarily by You

  • Account registration data: When you create a user account on our website, we collect your full name, email address, chosen password, and preferred contact preferences.
  • Order processing data: When you place an order for our outdoor gear, we collect your billing address, shipping address, payment information (including billing name, payment card details or e-wallet information), phone number, and order-specific notes you provide.
  • Customer support data: When you contact our support team via email, phone, or online chat, we collect the content of your inquiries, feedback, and any additional personal information you voluntarily share with us to resolve your issues.
  • Marketing preference data: When you subscribe to our newsletter or sign up for our promotional alerts, we collect your email address, preferred communication channels, and your consent to receive marketing content from us.
  • Public user-generated content: If you submit product reviews, outdoor activity stories, or social media posts related to our products on our website, we collect the content you upload alongside your public display name.

2.2 Data Collected Automatically When You Use Our Website

  • Technical device data: We collect information about the device you use to access our website, including your IP address, browser type and version, operating system, language settings, time zone, and device identifiers.
  • Website usage data: We collect log data about your interactions with our website, including the pages you browse, the products you view, your search queries, click-through paths, page load times, session duration, and exit page information.
  • Cookie data: Our website uses mandatory and functional cookie modules as required by GDPR, and we will never store non-essential cookies on your device before we receive your explicit, informed consent. You can adjust your cookie preferences at any time via the cookie consent panel on our website.

3. Purposes and Legal Bases for Processing Your Personal Data

We process your personal data only for legitimate, clearly defined purposes, with corresponding legal bases as required by GDPR:

  1. ‌Order Fulfillment and Contract Performance‌: The legal basis for this processing is the performance of the sales contract between you and us. We use your personal data to process your payment, arrange product shipping, send you order confirmation and tracking notifications, handle return and exchange requests, and ensure you receive the correct outdoor gear you ordered in good condition.
  2. ‌Legal Compliance‌: The legal basis for this processing is our compliance with applicable legal obligations. We are required to retain your order, transaction, and tax-related data in line with Slovenian tax regulations, maintain records that meet local VAT declaration requirements, and cooperate with competent data protection authorities for official inquiries when legally required. As a merchant operating in Slovenia and the wider EU market, we ensure all our invoice templates conform to Slovenian tax specifications, and we process relevant personal data to meet these regulatory obligations.
  3. ‌Legitimate Interests Pursued by Us or Third Parties‌: The legal basis for this processing is our legitimate business interest to provide a secure, stable, and optimized e-commerce platform for our customers. We use your usage data to troubleshoot technical issues on our website, prevent fraud and unauthorized access to user accounts, improve our product recommendations for outdoor gear, and carry out internal statistical analysis to upgrade our service quality. We will never override your privacy rights for these interests, and you have the right to object to this processing at any time.
  4. ‌Explicit Consent‌: The legal basis for this processing is your freely given, specific, informed, and unambiguous consent. We use your personal data to send you personalized marketing newsletters, share information about new outdoor product launches, limited-time promotions, and outdoor event invitations, and provide you with customized shopping recommendations that match your demonstrated interest in outdoor activities. You can withdraw your consent at any time by clicking the unsubscribe link in any marketing email, or sending a message to our contact email listed above.
  5. ‌Public Task Protection‌: In limited circumstances, we may process your personal data to protect the vital interests of you or other natural persons, for example in the rare case that a product you ordered is found to have a safety defect that poses a risk to users during outdoor activities, and we need to contact you urgently for a product recall.

4. Recipients of Your Personal Data

We will never sell, lease, or trade your personal data to unauthorized third parties for commercial purposes without your explicit prior consent. We may share your personal data only with the following categories of trusted third parties, all of whom are required to process your data in full compliance with GDPR and our data protection agreements:

  • Logistics and shipping service providers: We share your shipping name, address, and contact phone number with our partnered delivery companies to ensure your outdoor gear can be delivered to the designated address accurately and on time.
  • Payment service providers: We share your necessary payment information with our PCI DSS compliant payment processors to complete secure transaction processing, prevent payment fraud, and verify the validity of your payment method.
  • Cloud service and website hosting providers: We store your non-public personal data on encrypted servers operated by our trusted hosting partners, who are located within the European Economic Area (EEA) to ensure an adequate level of data protection.
  • Competent public authorities: We may disclose your personal data when we are legally obligated to do so by a valid court order, regulatory requirement, or official request from Slovenian tax authorities, data protection supervisory bodies, or other government entities.

For any personal data transfer that would take place outside of the European Economic Area, we will ensure appropriate safeguards are put in place, including using the European Commission’s Standard Contractual Clauses, to guarantee that your personal data receives the same level of protection as required under GDPR.

5. Data Retention Period

We will not retain your personal data for longer than it is necessary to achieve the specific purposes for which it was collected:

  • For order-related data including invoices, transaction records, and tax documents, we retain this data for the duration required by Slovenian tax laws, which is 10 years after the completion of the relevant transaction, to meet local VAT declaration and audit requirements.
  • For user account data, we retain your personal account information for as long as your account remains active. If you choose to delete your account, we will erase all your associated personal data within 30 days, except for data we are required to retain for legal compliance purposes.
  • For marketing-related contact data, we retain your email address and marketing preferences until you withdraw your consent or request to unsubscribe from our marketing communications.
  • For website usage and cookie-collected data, we retain this data for a maximum period of 12 months, after which we will anonymize or delete it completely.

Once the retention period for your personal data expires, we will securely erase or anonymize all related data in line with our internal data management policies.

6. Your Rights as a Data Subject

Under GDPR and Slovenian national data protection laws, you hold a comprehensive set of rights over your personal data, which you can exercise at any time free of charge by sending a request to our contact email minty@outclimbshop.com:

  1. ‌Right of Access‌: You have the right to request a copy of all personal data we hold about you, as well as detailed information about how we process that data.
  2. ‌Right to Rectification‌: If you find that any of your personal data stored on our system is inaccurate or incomplete, you have the right to request that we correct or update that data immediately.
  3. ‌Right to Erasure (“Right to be Forgotten”)‌: You have the right to request that we delete all your personal data, under circumstances including when the data is no longer necessary for the original purposes it was collected, when you withdraw your consent to the processing, or when the processing is unlawful. We will fulfill this request without delay, unless we are legally required to retain certain data for regulatory compliance reasons.
  4. ‌Right to Restriction of Processing‌: You have the right to request that we pause the processing of your personal data, for example while we verify the accuracy of your data, or while we assess the legitimacy of our legitimate interest basis for processing.
  5. ‌Right to Data Portability‌: You have the right to receive all the personal data you have provided to us, in a structured, commonly used, machine-readable format, and to request that we transfer this data directly to another data controller where technically feasible.
  6. ‌Right to Object‌: You have the right to object to our processing of your personal data that is based on our legitimate interest, including for direct marketing purposes, at any time. After receiving your objection, we will stop processing your personal data for those relevant purposes immediately, unless we can demonstrate compelling legitimate grounds that override your rights.
  7. ‌Right to Lodge a Complaint‌: If you believe that our processing of your personal data violates applicable data protection regulations, you have the right to lodge a complaint directly with the Slovenian national data protection supervisory authority, in addition to contacting us first to resolve any of your concerns.

We will respond to all your data subject related requests within one month of receipt, in line with GDPR requirements. We will only ask for sufficient information to verify your identity to ensure that we are responding to the genuine data subject, and we will never charge you any fee for submitting or processing these requests unless your request is manifestly excessive or repetitive.

7. Children’s Privacy

Our e-commerce website and outdoor gear products are designed and intended for use by adults aged 16 and above. We do not knowingly collect any personal data from children under the age of 16. If we become aware that we have accidentally collected personal data from a child under the relevant minimum age, we will take immediate steps to delete that data completely from our servers. If you believe we may hold personal data of a child, please contact us immediately via our listed contact information.

8. Security Measures for Your Personal Data

We implement strict, industry-standard technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, destruction, accidental loss, or unlawful processing:

  • All sensitive payment information transmitted through our website is encrypted using TLS 1.3 protocols, to ensure data safety during transmission between your browser and our servers.
  • All our servers storing personal data are protected by multi-factor authentication, firewalls, and regular security patches updates. We conduct quarterly security audits and penetration testing to identify and fix potential vulnerabilities.
  • All our employees who have access to user personal data are required to sign strict non-disclosure and data protection agreements, and receive regular annual data protection compliance training to ensure they handle your personal data in full accordance with legal requirements.

In the unlikely event of a personal data breach that poses a high risk to the rights and freedoms of users, we will notify all affected data subjects and the competent Slovenian supervisory authority within 72 hours after we become aware of the breach, in full compliance with GDPR notification requirements.

9. Updates to This Privacy Policy

We may revise and update this privacy policy from time to time, to reflect changes in our business operations, new legal regulatory requirements, or updates to our website service functions. When we make material changes to this policy, we will update the effective date posted at the top of this page, and publish a prominent notification on the homepage of [www.outclimbshop.com] to inform all users. For changes that will significantly impact your rights to privacy protection, we will also send you a notification via our registered user email address. We encourage you to review this privacy policy periodically to stay informed about how we protect your personal data.

10. Contact Information for Privacy Inquiries

If you have any questions, concerns, or requests related to this privacy policy, or our personal data processing practices, you can contact us at any time:
‌Outclimb, trgovina, posredništvo in storitve, d.o.o.‌

  • Address: Jelovškova ulica 19, 1241 Kamnik, Slovenia
  • Email: minty@outclimbshop.com
  • Phone: +386 1 830 3569

We will respond to all your privacy related inquiries as soon as possible, and work with you to resolve any concerns you may have about your personal data protection.