Privacy Policy

This Privacy Policy describes how REZLIN d.o.o. ("we", "us") processes personal data when you use the Gunsmith Online website, create an account, place an order or contact us. We process data in compliance with the General Data Protection Regulation (GDPR) and applicable Slovenian law.

1. Data controller

REZLIN d.o.o.
Operator of the Gunsmith Online store.
Contact: via the Contact page or the e-mail address published on the website.

2. What data we collect

Depending on your interaction with us, we may process:

Identity and contact data (name, company, address, e-mail, telephone)
Account credentials (username, encrypted password)
Order and billing data (products, amounts, payment method, delivery address, tax/VAT ID where provided)
Communication content (messages, support requests, returns)
Technical data (IP address, browser type, device information, cookies — see below)

We do not intentionally collect special categories of personal data. Please do not send sensitive data unless necessary for a specific request.

3. Purposes and legal bases

Contract performance — processing orders, delivery, invoicing, warranty and customer support.
Legal obligation — accounting, tax records and compliance with applicable regulations.
Legitimate interests — fraud prevention, website security, improvement of our services and limited direct communication with existing customers about similar products, where permitted.
Consent — newsletter and optional marketing where you have opted in; you may withdraw consent at any time.

4. Cookies and analytics

Our website uses essential cookies required for shopping cart, login and checkout. Additional cookies (e.g. analytics or preference cookies) may be used only where enabled and, where required, after your consent via the cookie notice.

You can control cookies through your browser settings; disabling essential cookies may limit store functionality.

5. Sharing of data

We share personal data only when necessary:

Payment and banking partners (to process payments)
Shipping and logistics providers (to deliver orders)
IT hosting and e-mail service providers (under data processing agreements where required)
Professional advisers or authorities when required by law

We do not sell your personal data to third parties.

6. Transfers outside the EEA

Where processors are located outside the European Economic Area, we ensure appropriate safeguards such as EU Standard Contractual Clauses or adequacy decisions, as required by GDPR.

7. Retention

We keep personal data only as long as needed for the purposes above:

Order and accounting data — as required by tax and commercial law (typically up to 10 years)
Account data — until you delete your account or request erasure, subject to legal retention duties
Marketing consents — until withdrawal of consent
Support correspondence — as long as needed to resolve the matter and for reasonable follow-up

8. Your rights

Under GDPR you have the right to:

Access your personal data and obtain a copy
Rectify inaccurate data
Erasure ("right to be forgotten") where applicable
Restrict or object to certain processing
Data portability where processing is based on consent or contract and automated
Withdraw consent at any time for consent-based processing
Lodge a complaint with the Information Commissioner of the Republic of Slovenia (IP)

To exercise your rights, use our GDPR request page or contact us directly.

9. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration. Payment card data, where used, is handled by certified payment providers; we do not store full card details on our servers.

10. Children

Our store is intended for business and adult customers. We do not knowingly collect data from children under 16.

11. Changes

We may update this policy to reflect legal or operational changes. The current version is always published on this page with the date below.

Last updated: July 2026