Privacy Policy

This Privacy Policy (“Policy”) explains how Ginger UP d.o.o., Dunajska cesta 163, 1000 Ljubljana, Slovenia, Tax ID SI44327331, as the Data Controller (hereinafter referred to as the “Controller”), collects, uses, and manages your personal data obtained through www.gingerupplus.com .

As the service provider of the website www.gingerupplus.com , the Controller is committed to protecting and respecting your privacy. Please read this Policy carefully to understand why and how we collect your personal data and for what purposes it will be used.

If you have any questions regarding this Policy or your personal data, please contact us using the details below:

Address: Dunajska cesta 163, 1000 Ljubljana, Slovenia
Email: info@gingerupplus.com
Founder: Gourmea Group AB
Director: Tjaša Nikolovski Ogrizek

How and when do we collect your personal data?

We collect your personal data only when necessary to meet your needs as a consumer or to conduct our business activities:

  • When you access www.gingerupplus.com , we automatically collect your IP address, which is considered personal data.
  • When you register as a user or subscribe to newsletters or other notifications about our products or services, we will ask you to provide personal information such as your name and email address. The legal basis for this processing is your consent, which you can withdraw at any time.
  • We collect technical information, such as the date and time of your visit, details about your hardware, software, browser, operating system, application version, and language settings. We may also track your click behavior and interaction with content on our website.
  • When you contact our customer support or sales team for assistance, inquiries, or to exercise any of your rights under applicable data protection laws.
  • When you interact with us via social media platforms (Facebook, Instagram), we collect the information you choose to share with us during those interactions.
  • When you submit inquiries about our offerings or send an open job application.

The collection of certain categories of personal data is based either on your consent (e.g., via cookie consent pop-up upon visiting the site) or on our legitimate interest (e.g., necessary cookies for website functionality or sending updates to existing customers).

Cookie consent is renewed via pop-up every 12 months from your last acceptance or rejection.

In cases where we are required to comply with legal obligations under Slovenian law, data processing will not be based on the above legal grounds.

What data do we collect directly from you, and for what purpose?

Typical categories of personal data we collect from you include: name, email address, phone number, or any other information you voluntarily provide when contacting us via phone or email.

We collect and process your personal data to:

  • Enable full use of all services on www.gingerupplus.com ;
  • Respond to and efficiently process your requests;
  • Perform statistical analysis and improve our services;
  • Send you notifications and maintain communication;
  • Enhance the quality and relevance of our content.

What are your rights?

Under the GDPR and Slovenian data protection law, you have the following rights:

  • Right of Access:
    You may request confirmation as to whether we process your personal data and, if so, obtain access to that data.
  • Right to Rectification:
    You may request correction of inaccurate or incomplete personal data.
  • Right to Data Portability:
    You may request a copy of your personal data in a structured, commonly used, and machine-readable format, and ask for it to be transferred to another controller.
  • Right to Erasure (“Right to be Forgotten”):
    You may request deletion of your personal data if one of the conditions listed in Article 17 GDPR applies. Please note that we may be legally required to retain certain data (e.g., for compliance with legal obligations or for the establishment, exercise, or defense of legal claims).
  • Right to Object:
    You have the right to object at any time to the processing of your personal data, particularly when based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent:
    You may withdraw your consent to data processing at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
  • Right to Lodge a Complaint:
    You have the right to file a complaint with the Slovenian supervisory authority — the Information Commissioner of the Republic of Slovenia (www.ip-rs.si ).

To exercise any of your rights, please send a request to info@gingerupplus.com with the subject line “Data Subject Request” or by post to Dunajska cesta 163, 1000 Ljubljana. We will confirm receipt of your request promptly.

Exercising your rights is free of charge. However, if requests are manifestly unfounded, excessive, or repetitive (e.g., submitted less than 6 months after the previous identical request), we may charge a reasonable fee or refuse to act.

Where is your personal data stored?

Your personal data is stored in a secure environment, protected against unauthorized access, use, disclosure, copying, alteration, or destruction. We store data both in physical (paper) and digital formats, within the premises of the Controller, under continuous monitoring and security protocols.

How long will we retain your personal data?

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. For specific retention periods, please contact us at info@gingerupplus.com .

For example:

  • Your cookie preferences are stored for a maximum of 1 year. After this period, you will be prompted again via pop-up upon your next visit.
  • You may change or withdraw your cookie consent at any time.

How will we use your data?

As outlined above, we may use your personal data to enhance your user experience, for direct marketing (with your consent), analytics, and security purposes.

Does Ginger UP d.o.o. share data with third parties?

Your privacy is our priority. We do not share your personal data with third parties except as described in this Policy or when required by law. We will always inform you in advance if your data is to be shared or transferred.

We collaborate with trusted partners (e.g., web developers, IT service providers) and may share your data with them via secure systems. Any data transfers occur only to servers located within the EU or to countries ensuring an adequate level of data protection under EU law.

Right to object to processing for direct marketing

We may process your personal data for direct marketing purposes. You have the right to object to such processing at any time. If you object, we will cease using your data for marketing purposes immediately. To object, please email us at info@gingerupplus.com .

Processing of personal data via official social media profiles

Ginger UP d.o.o. operates official profiles on the following social media platforms:

We process personal data on these platforms to inform followers about our products, promotions, news, and to engage in communication regarding inquiries, feedback, or comments.

Where possible and within the limits set by the social media platform providers, we ensure that data processing complies with applicable data protection regulations.

Any content you post on our social media pages — such as comments, photos, videos, or likes — is published via the respective platform and will not be used by us for any other purpose. However, we reserve the right to remove any content that violates our community guidelines, including but not limited to: unlawful content, hate speech, vulgar or sexually explicit material, or content infringing on intellectual property rights.

Please note:

  • Content you post remains visible on the platform’s timeline until you delete it or until it is removed by the platform due to policy violations or updates.
  • We have no control over the deletion or retention of your data by the social media platform operators themselves.

Advertising

We use social media advertising services to reach targeted audiences. We define audience parameters (e.g., demographics, interests) to display ads to relevant users. In doing so, we do not have access to your personal data — all targeting and processing is handled exclusively by the social media platform operator.

Other data processing activities via social media

1. Publication of photos and videos for marketing purposes

Purpose: To publish photos and videos featuring you on our social media profiles for promotional and marketing activities.

Legal Basis:
a) Article 6(1)(f) GDPR — Processing is necessary for the legitimate interests of the Controller (promoting our brand and activities).
You have the right to object to this processing at any time.
b) Article 6(1)(a) GDPR — Processing is based on your explicit consent.

Data Scope & Source: Photos and videos from events, promotions, or sponsorships. Data source: You, the data subject.

Retention Period: Published content will generally be retained indefinitely unless removed by you or by us for policy violations.

Recipients: Social media users.

Processing by Processor: Social media platform providers and event photography service providers.

2. Processing for the establishment, exercise, or defense of legal claims

Purpose: To establish, exercise, or defend legal claims in court, administrative, or out-of-court proceedings.

Legal Basis: Article 6(1)(f) GDPR — Legitimate interest of the Controller (protecting our legal rights and interests).

Data Scope: All personal data relevant to the legal matter.

Retention Period: Until the final resolution of the proceedings or settlement.

Cookies

To ensure the functionality and performance of our website, we use technology commonly known as “cookies”.

A cookie is a small text file stored on your computer or mobile device when you visit a website. It allows the site to remember your actions and preferences (e.g., login status, language, font size) over time, so you don’t have to re-enter them on every visit.

We use the following types of cookies:

  1. Session cookies (temporary, deleted when browser is closed) or persistent cookies (stored for a few hours in specific cases);
  2. Third-party cookies for social media plugins (for logged-in users);
  3. Analytical cookies to understand user behavior and improve our services.

We only process cookies with your consent. You can accept, partially accept, or reject cookies via your browser settings or our cookie consent pop-up. Please note that disabling certain cookies may affect the functionality of our website.

For more information, please refer to our Cookie Policy. You can adjust your cookie preferences at any time via the pop-up banner on our website.

Effective Date and Policy Updates

This Policy becomes effective upon publication on www.gingerupplus.com .

The Controller reserves the right to amend this Policy at any time. All updates will be posted on www.gingerupplus.com , and changes take effect immediately upon posting.

Last updated: 2025

For any questions or assistance regarding your privacy or personal data, feel free to contact us:
📧 info@gingerupplus.com
📍 Dunajska cesta 163, 1000 Ljubljana, Slovenia

Thank you for trusting us.