Privacy Policy
Last updated: 11th August, 2026
This Privacy Policy explains how Nord Drinks d.o.o. collects, uses, stores, and protects your personal data in accordance with:
-
EU General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679
-
Slovenian Personal Data Protection Act (ZVOP-2, in force since 2023)
-
Electronic Communications Act (ZEKom-2)
-
Electronic Commerce Market Act (ZEPT)
Data Controller
Nord Drinks d.o.o., Žabče 24, 5220 Tolmin, Slovenia
Email: info@nordhardseltzer.si
Age Restriction
Our website and products are intended for adults of legal drinking age only. We do not knowingly collect personal data from anyone under 18. If we become aware that we have inadvertently collected data from a minor, we will delete it without undue delay. If you believe a minor has provided us with personal data, please contact us at info@nordhardseltzer.si.
What Personal Data We Collect
We collect the following categories of personal data:
-
Identity data: first name, last name
-
Contact data: email address, phone number (if provided), delivery address
-
Order data: products ordered, purchase history, payment reference
-
Email marketing data: email address and consent record (if subscribed to newsletter)
-
Technical data: IP address, browser type, pages visited (via cookies — see Cookie Policy)
-
Profile data: inferred interests and purchasing behaviour used for segmentation
Legal Basis for Processing
We process your data on the following legal bases:
-
Contract performance (Art. 6(1)(b) GDPR): fulfilling orders, sending order confirmations, delivery updates, managing returns
-
Your consent (Art. 6(1)(a) GDPR): sending newsletter and marketing emails, analytics and marketing cookies, targeted advertising, and any profiling or segmentation carried out for marketing purposes.
-
Legal obligation (Art. 6(1)(c) GDPR): issuing invoices, tax and accounting records
-
Legitimate interests (Art. 6(1)(f) GDPR): improving our website, fraud prevention, security
How Long We Keep Your Data
-
Order and invoice data: 10 years (Slovenian accounting law)
-
Account data: until account deletion is requested
-
Newsletter subscription: until you unsubscribe; upon confirmed unsubscription, all related contact data is permanently deleted from our mailing list
-
Cookie/analytics data: see Cookie Policy
Who We Share Your Data With
We do not sell your personal data. We may share it with trusted processors:
-
Delivery partner(s) — for order fulfilment
-
Payment processors (card payment provider) — for payment processing
-
Email platform — for newsletter delivery
-
Web hosting provider — for website operation
-
External accounting service — for bookkeeping obligations
-
Advertising platforms (Meta/Facebook, Google) — where you have consented to marketing cookies
- We may also disclose your personal data to competent public authorities, courts, or law enforcement bodies where required to do so by law.
All processors are bound by data processing agreements and must handle your data in compliance with GDPR.
International Data Transfers
Some processors (e.g. Google Analytics, Meta Pixel, email platforms) may transfer data outside the European Economic Area (EEA), in particular to the United States. Where this occurs, we ensure appropriate safeguards are in place, such as the EU Standard Contractual Clauses and/or the provider's certification under the EU-US Data Privacy Framework, where applicable. Please refer to each provider's privacy policy for details. As the legal status of these transfer mechanisms may change over time, we monitor developments and will update our arrangements as needed.
Newsletter — Specific Terms
By subscribing to our newsletter, you agree to receive occasional communications about new products, promotions, and news from Nord Drinks d.o.o. Specifically:
-
All marketing emails are clearly identified as promotional
-
The sender is always clearly identified
-
Every email contains a clear and easy unsubscribe link
-
Your email address will never be sold or shared with third parties for their own marketing purposes
-
You may unsubscribe at any time by clicking the unsubscribe link in any email, or by emailing info@nordhardseltzer.si
-
Upon confirmed unsubscription, all your contact data is permanently removed from our mailing list
We may use newsletter engagement data (open rates, click-throughs) for general segmentation and improving our communications.
Automated Decision-Making and Profiling
We may use purchase data, including inferred interests and purchasing behaviour, to place you into general customer segments (e.g. purchase frequency or product preference) for the purpose of offering relevant discounts and marketing communications, based on your consent as described above. This does not involve fully automated decision-making that produces legal or similarly significant effects on you.
Your Rights Under GDPR
You have the following rights, which you can exercise by emailing info@nordhardseltzer.si:
-
Right of access — request a copy of the data we hold about you
-
Right to rectification — request correction of inaccurate data
-
Right to erasure — request deletion of your data
-
Right to restrict processing
-
Right to data portability
-
Right to object to processing based on legitimate interests
-
Right to withdraw consent at any time (does not affect lawfulness of prior processing)
We will respond to all requests within one month of receipt. Where a request is particularly complex or we have received a large number of requests, this period may be extended by a further two months; if so, we will inform you of the extension and the reasons for it within the first month.
You also have the right to lodge a complaint with a data protection supervisory authority. You may contact the Slovenian data protection authority (Informacijski pooblaščenec — IP RS) at www.ip-rs.si, or the supervisory authority of the EU member state where you live, work, or where the alleged infringement occurred.
Security
We implement appropriate technical and organisational security measures including HTTPS encryption, encrypted password storage, and access controls. Payment data is processed exclusively by our payment providers and is not stored on our servers.
Third-Party Websites
Links on our website may lead to third-party websites. These have their own privacy policies, which we are not responsible for. We encourage you to review them before sharing any personal data.
Changes to This Policy
We may update this Privacy Policy at any time. The current version will always be published on this page. Continued use of the website after changes constitutes acceptance of the updated policy.
Cookie Policy
This Cookie Policy explains what cookies are, which specific cookies are used on www.nordhardseltzer.com, and how you can control them. It applies alongside our Privacy Policy.
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They allow the site to recognise your device on future visits, remember your preferences, and collect statistical information. Cookies do not by themselves identify you personally.
Why Are Cookies Necessary?
Some cookies are essential for the website to function — without them, features like your shopping cart or account login would not work. Other cookies are optional and improve your experience or help us understand how the site is used.
Cookies We Use
Strictly Necessary Cookies — always active, no consent required
These cookies are essential for the website to function. They cannot be switched off. They do not track you for advertising purposes. Some of these cookies are set by Shopify, our e-commerce platform provider, acting as our processor.
|
Cookie Name
|
Domain / Type
|
Purpose
|
Expiry
|
|
_shopify_essential
|
nordhardseltzer.com — Shopify
|
Essential for secure checkout and payment on the website. Provided by Shopify.
|
1 year
|
|
cart_currency
|
nordhardseltzer.com — Shopify
|
Recognises the user's country of origin and populates the correct transaction currency.
|
2 weeks
|
Functionality Cookies — require your consent
These cookies enable additional, non-essential functionality on the website, such as embedded content widgets.
|
Cookie Name
|
Domain / Type
|
Purpose
|
Expiry
|
|
localization
|
nordhardseltzer.com
|
Set on pages with the Flickr widget.
|
1 year
|
Analytics Cookies — require your consent
These cookies help us understand how visitors use the site (pages visited, time on site, referral source). All data is anonymous and aggregated — no individual visitor is identified. Google may process data on servers outside the EEA; IP anonymisation is enabled on our installation. See: policies.google.com/privacy
|
Cookie Name
|
Domain / Type
|
Purpose
|
Expiry
|
|
_ga
|
nordhardseltzer.com — Google Analytics
|
Distinguishes unique visitors. All data is anonymous and aggregated. IP anonymisation is enabled.
|
2 years
|
|
_ga_*
|
nordhardseltzer.com — Google Analytics
|
Persists session state for Google Analytics 4.
|
2 years
|
Marketing / Tracking Cookies — require your consent
These cookies are placed by Meta Platforms (Facebook). The Facebook Pixel tracks actions on our website (e.g. purchases, page views) to measure advertising effectiveness and to enable retargeted ads on Facebook and Instagram for people who have previously visited our site. Meta may process data on servers outside the EEA. See: www.facebook.com/privacy/policy
|
Cookie Name
|
Domain / Type
|
Purpose
|
Expiry
|
|
_fbp
|
nordhardseltzer.com — Meta / Facebook
|
Facebook Pixel — tracks conversions and user actions on the site to measure ad effectiveness and enable retargeted advertising on Facebook and Instagram.
|
3 months
|
Consent Management
When you first visit our website, a cookie consent banner asks for your permission for non-essential cookies. You can:
You can change your preferences at any time via the cookie settings link in our website footer. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
Controlling Cookies via Your Browser
You can also manage cookies through your browser settings. Note that disabling cookies may affect website functionality:
Strictly necessary cookies will continue to be set in accordance with the Electronic Communications Act (ZEKom-2) even if other cookies are disabled.
Sharing Cookie Data
We do not share our own cookie data with third parties. Third-party cookies (Google, Meta, Shopify) are governed by the respective companies' privacy policies.
Changes to This Cookie Policy
We may update this Cookie Policy. The current version will always be available on this page.