Privacy Policy
Last updated: 29 May 2026
1. Data Controller
The data controller for the processing described in this policy is:
IBS TRADE d.o.o.
Na zelenici 4, 3000 Celje
3000 Celje
Slovenia
Email: info@m-sportsolutions.com
2. Data We Collect
When you place an order, we collect the following personal data:
- Name — to identify you as the buyer and for delivery
- Email address — for order confirmation and updates
- Phone number (optional) — for delivery coordination
- Shipping address (for shipping orders) — to deliver your order
- Payment information — processed directly by Stripe; we do not store card details
3. Purpose & Legal Basis
| Purpose | Data | Legal Basis (GDPR) |
|---|---|---|
| Order fulfillment & delivery | Name, email, phone, address | Performance of contract — Art. 6(1)(b) |
| Order confirmation & status emails | Name, email | Performance of contract — Art. 6(1)(b) |
| Payment processing | Payment details (via Stripe) | Performance of contract — Art. 6(1)(b) |
| Fraud prevention | Order data, IP address | Legitimate interest — Art. 6(1)(f) |
| Tax & accounting obligations | Order & invoice data | Legal obligation — Art. 6(1)(c) |
4. Data Recipients
Your personal data may be shared with the following service providers who process data on our behalf:
- Stripe (Stripe, Inc., USA) — payment processing. Stripe's privacy policy: stripe.com/privacy
- Resend (Resend, Inc.) — transactional email delivery (order confirmations, status updates)
- Vercel (Vercel, Inc., USA) — website hosting
- Supabase (Supabase, Inc., USA) — database hosting
5. International Data Transfers
Some of our service providers are based in the United States. Transfers to the US are protected by the EU-US Data Privacy Framework adequacy decision, or where applicable, by Standard Contractual Clauses (SCCs) approved by the European Commission.
6. Data Retention
- Order data — retained for the duration required by applicable tax and accounting law (typically 5–10 years), then deleted or anonymised.
- Cart data — stored in your browser's local storage; you can clear it at any time.
7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15) — obtain a copy of your data
- Right to rectification (Art. 16) — correct inaccurate data
- Right to erasure (Art. 17) — request deletion of your data
- Right to restriction (Art. 18) — restrict processing in certain cases
- Right to data portability (Art. 20) — receive your data in a structured format
- Right to object (Art. 21) — object to processing based on legitimate interest
To exercise any of these rights, contact us at info@m-sportsolutions.com or use our online form:
→ Submit a data rights request
We will respond within 30 days.
You also have the right to lodge a complaint with your local data protection supervisory authority.
8. Automated Decision-Making
We do not use automated decision-making or profiling in relation to your personal data.
9. Cookies & Local Storage
This store uses only essential cookies and local storage required for the shopping cart and payment processing. No analytics or marketing cookies are used. For details, see our Cookie Policy.
10. Contact
General inquiries: info@m-sportsolutions.com
Order questions: orders-si@m-sportsolutions.com
Returns & cancellations: returns@m-sportsolutions.com