Privacy Policy

Privacy Policy

In this Privacy Policy (hereinafter: the Policy), you will find all information regarding the processing of personal data collected when using the services provided to users of the website nutrisslim.uk, accessible via devices enabling internet and browser access, and whenever you contact us.

We reserve the right to amend the information contained in this Policy without prior notice. The currently valid version is published on this page.

1. Identity And Contact Details Of The Controller

• Name: Nutrisslim d.o.o. (hereinafter: NUTRISSLIM)

• Address: Obrtniška ulica 4, 1292 Ig

• Free phone number: 080 35 31

• Email: info@nutrisslim.uk

2. Personal Data Protection Notice

This personal data protection notice applies to all users of the website nutrisslim.uk, whereby only adult and legally competent natural persons may register.

Registered users can access, manage, or refuse the processing of their personal data within their profiles using user settings.

To access and manage your data, visit https://www.nutrisslim.uk/my-account/. For corrections or other questions, contact us via email at info@nutrisslim.uk.

3. Purposes Of Personal Data Processing And Legal Basis For Processing

Personal data refers to any information relating to an identified or identifiable individual and, for the purposes of this Policy, includes information identifying you as a user. Anonymised data is no longer treated as personal data.

All personal data is collected, processed, and used in accordance with this Policy, particularly to provide the services you have ordered and handle your requests, based on one of the legal grounds defined by the GDPR.

3.1 Processing based on user consent

For processing based on consent of the individual to whom the personal data relates (hereinafter: the individual), the legal basis is point (a) of Article 6(1) GDPR. Examples include opening a user account, consenting to cookies, receiving personalised newsletters, or SMS messages.

3.1.1 User Account

Without providing mandatory data, a user account cannot be created or opened. Your account remains open until you request deletion or delete it yourself via the “Dashboard”. Deletion is carried out within a maximum of 3 days. NUTRISSLIM may unilaterally terminate and delete accounts if Terms of Use are violated.

3.1.2 Newsletters or SMS messages

By subscribing to newsletters or SMS messages, we will be pleased to inform you regularly about our current offers by email or phone. We will provide information about our various products, current and upcoming promotions, and other essentials for your daily life. Your email address is used for newsletters, and your phone number for occasional SMS messages with offers.

You can withdraw your consent at any time by clicking the unsubscribe link at the end of each communication. Due to technical reasons, unsubscription may take a few hours to process, during which you may still receive messages.

3.1.3 Cookies

Cookies are small text files stored on your computer or mobile device by websites you visit. When visiting nutrisslim.uk, only cookies essential for the operation of the website are installed. Cookies that are not strictly necessary for the functioning of the website or services are not used and are activated only after obtaining your explicit consent by selecting the desired type of consent and clicking “Save settings” or “Accept all”. In the latter case, cookies are installed on your browser only after your explicit consent.

Cookies can also store selected settings from your previous visit, based on your consent, so that you do not have to set them again upon returning to the site. Such cookies include marketing tools that collect and evaluate data to analyse user behaviour, aiming to provide a better user experience. They usually investigate where users come from and which areas of the website they access. This is a form of personalised marketing strategy, as it involves user-targeted advertising. By integrating analytical tools, we aim to improve and continually optimise the website. Such cookies are installed and used only based on your explicit consent.

The cookies used on nutrisslim.uk are described below in the table “Overview of cookies on nutrisslim.uk”:

*EU Commission Implementing Decision (EU) C(2023) 4747 of 10.07.2023
**UK EU Commission Implementing Decision C(2021)4800 of 28.07.2021

Most web browsers automatically accept cookies. If you wish to withdraw consent you have already given, deactivate the tools for which you previously gave consent by appropriately adjusting your browser or mobile device settings. You can change your browser settings to refuse cookies entirely or to receive a warning before a cookie is stored. You can also completely prevent the installation of cookies for all websites visited. Cookies already stored on your computer or mobile device can be deleted.

3.2 When processing personal data is necessary for the performance of a contract to which the individual or user is a party, the legal basis is point (b) of Article 6(1) GDPR. This applies to the conclusion and performance of a sales contract (when you use website and call centre services to purchase or make a complaint about products), an employment contract (when you apply for an advertised job position), or a cooperation contract (when you propose or apply for a collaboration invitation).

3.2.1 Sales contract

Forms for support, presentations, purchases, and other enquiries are also published for users. All mandatory personal data on these forms is collected, processed, and used to handle such user requests. This also applies to processing actions necessary to carry out measures required prior to concluding a contract. Without providing the mandatory data, your request cannot be processed.

When data processing is required to fulfil your order, we store the data until the expiry of warranty, guarantee, or limitation periods. In this case, your data is stored for seven years for warranty or material defect claims. For other enquiries, your data is stored for three months.

3.2.2 Employment contract

We process personal data obtained when you apply for an advertised job position via the website, only to the extent, in the manner, and under the conditions necessary for selecting a suitable candidate for the specific vacancy you applied for (to take steps at your request prior to entering into a contract).

You are not obliged to provide the requested personal data when applying. However, if you choose not to disclose your personal data, we may not be able to consider you during the candidate selection process.

Such collected data is retained only until the purpose is fulfilled or until any appeal procedures of unsuccessful candidates have been completed.

3.2.3 Cooperation contract

We also process personal data obtained when you apply via the website to cooperate in product promotion or for wholesale purposes, only to the extent necessary for the cooperation proposed by you (to take steps at your request prior to entering into a contract).

You are not obliged to provide the requested data. However, if you choose not to disclose your personal data, cooperation may not be possible where disclosure of the required data is a condition for cooperation.

Such collected data is retained only until the purpose is fulfilled or until any appeal procedures have been completed.

3.3 When processing personal data is required to fulfil a legal obligation applicable to NUTRISSLIM, the legal basis is point (c) of Article 6(1) GDPR. For example, providing data to competent authorities to ensure product vigilance.

3.4 When processing personal data is necessary for the legitimate interests pursued by NUTRISSLIM or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the individual, the legal basis is point (f) of Article 6(1) GDPR. Examples include collecting log files during visits to the website, conducting video surveillance of access to NUTRISSLIM’s premises, and communicating with customers under the Electronic Communications Act.

3.4.1 Video surveillance of access to NUTRISSLIM’s premises

To prevent property damage and to ensure the safety of people, video surveillance of access to NUTRISSLIM’s premises is also conducted.

Footage from surveillance cameras is stored for 3 months from recording or until legal proceedings are concluded.

3.4.2 Customer communication under the Electronic Communications Act

Unless you objected at the time of purchase, based on a completed purchase on the website naturesfinest.uk or contact details published on the website, we are pleased to inform you about our current offers via email. This is to provide you with all information about our various products, current and upcoming promotions, and offers. In such cases, we use your email address to send these notifications.

You can unsubscribe from receiving such notifications at any time by clicking the unsubscribe link at the end of each communication we send you. Due to technical reasons, unsubscription may take a few hours to process, so you may still receive notifications in the meantime.

3.5 Processing of personal data for questionnaires and personalised recommendations

On the website, we offer a questionnaire to collect data about gender, age, height, weight, dietary habits, health status, physical activity, sleep, stress, and other habits and desired goals, for the purpose of preparing personalised nutritional supplements.

This data is processed on the basis of point (a) of Article 6(1) GDPR – the individual’s consent – and is used exclusively for preparing personalised products and providing advice.

Personal data is stored for a maximum of 5 years or until the individual withdraws their consent.

3.6 Processing of genetic data (DNA tests)

To perform DNA Nutrigenetic tests, we collect and process the following data: biological sample (saliva), first and last name, date of birth, weight, height, analysis results, and contact details for communication.

Processing of this data is based on point (b) of Article 6(1) GDPR (contract) and point (a) of Article 9(2) GDPR (explicit consent).

Data is stored for 5 years after the end of the calendar year in which the analysis was performed, or until consent is withdrawn where applicable.

4. Is the provision of personal data a statutory or contractual obligation, or an obligation necessary for the conclusion of a contract, and is the data subject required to provide personal data, and what are the potential consequences if such data is not provided?

Provision is:

• a contractual requirement for contract performance (point (b) of Article 6(1) GDPR);

• a statutory requirement to comply with legal obligations (point (c) of Article 6(1) GDPR).

Without providing data, we cannot enter into a contract with you or fulfil certain contractual rights and obligations.

5. Recipients Of Personal Data

(a) NUTRISSLIM Employees
Your personal data is processed by employees of NUTRISSLIM within the scope of their work responsibilities and authorisations, and in accordance with internal organisation and job classification rules, to fulfil obligations under applicable regulations.

(b) External Recipients
Your personal data may also be shared with certain external recipients, specifically:

• To process your requests or provide support, your personal data may be shared with contractual partners or delivery services in the country where the order must be completed or delivered.

• Cookie or hosting providers, where you have opted in for such services.

• Banks or other payment processing organisations, where you have chosen to use these services.

• Courts, state authorities, or other public bodies that are legally entitled to obtain personal data within specific proceedings (e.g. police, inspection or supervisory bodies, the Slovenian Financial Administration), and other entities (e.g. auditors) where they have a legal basis for processing personal data or a valid court order, or where you have explicitly consented.

All recipients are bound by applicable personal data protection regulations in their relationship with NUTRISSLIM. For more information about our external service providers, please contact us at: info@nutrisslim.uk.

6. Transfer of Personal Data to Third Countries or International Organisations

Personal data is not transferred to international organisations. Transfers to third countries (USA and UK) occur only if you consent to the use of marketing cookies (advertising and analytics).
Transfers to the UK are conducted in accordance with the EU Commission Implementing Decision (EU) C(2021) 4800, and to the USA in accordance with the EU Commission Implementing Decision (EU) C(2023) 4747, establishing adequate data protection levels.

For DNA testing purposes, data may be transferred to laboratories outside the EEA (e.g. Denmark, UK), in compliance with EU Commission decisions and protective measures.

7. Automated Decision-Making, Including Profiling

No automated decision-making is conducted.

If you have explicitly consented to receiving newsletters, profiling may be used based on your interests (e.g. health, beauty, detox/weight loss) for marketing purposes. Consent to personalised advertising or campaigns is not a requirement for using the website or its services.

If you have given explicit consent to receive personalised newsletters, you have the right to object to such processing at any time, or to unsubscribe without affecting the lawfulness of data processing based on consent prior to its withdrawal.

Personal data processed for sending personalised newsletters under Article 6(1)(a) GDPR is retained until your consent is withdrawn. In the event of a dispute, data is kept until a final legal decision is issued.

8. Personal Data Retention Periods

The retention period depends on the legal basis and purpose for which personal data is processed. Your personal data will be kept only for as long as necessary to fulfil the purpose for which it was collected.

If you have given us your consent, we retain your personal data until your consent is withdrawn.

Where processing is required to fulfil your order, we retain the data until the expiry of warranty, guarantee, or statutory limitation periods.

Exceptionally, we may retain your personal data for longer if required by applicable regulations in the Republic of Slovenia and/or the European Union (e.g. medical devices, accounting, tax laws).

Specific retention periods are listed in Section 3 of this policy under each processing purpose.

9. Rights of the Data Subject

Individuals whose personal data is collected and processed by NUTRISSLIM have the right to:

• Access their personal data

• Rectify inaccurate or incomplete personal data

• Erase their personal data

• Restrict processing of their personal data

• Data portability

• the right to object to processing based on point (f) of Article 6(1) of the General Data Protection Regulation, including profiling.

An individual whose personal data is collected and processed by NUTRISSLIM has the right to request from NUTRISSLIM access to their personal data, as well as the rectification or erasure of personal data, or restriction of processing concerning them, and the right to object to processing and the right to data portability. The individual’s request is handled in accordance with the provisions of the General Data Protection Regulation and the Personal Data Protection Act.

For DNA analyses, the individual also has the right to request that the test results are not disclosed to anyone (including relatives or doctors) or that certain results are not used.

Our services are not intended for minors. In the case of processing a child’s data (e.g. for a DNA test), the explicit consent of the legal guardian is required. If such data is collected accidentally, it will be deleted immediately.

You can also contact us directly at any time with questions or complaints. To ensure a prompt response, please contact us at the following email address: info@nutrisslim.uk.

10. Consent and the Right to Withdraw Consent

Where processing is based solely on your consent (point (a) of Article 6(1) of the General Data Protection Regulation), the existence of the right to withdraw consent at any time does not affect the lawfulness of data processing carried out based on that consent before its withdrawal.

11. Right to Lodge a Complaint with a Supervisory Authority

In the event of a breach of data protection legislation, the individual may file a complaint with the supervisory authority, which in the Republic of Slovenia is the Information Commissioner.

By giving your consent, you confirm that you are an adult and legally competent individual.

12. General Terms And Conditions

When using nutrisslim.uk, copyright, trademark, and other third-party rights must be respected. All website content is protected, including images, videos, fonts, and brands. You agree not to misuse any content for private or commercial purposes.

See the General Terms and Business Terms available and published on the website.

Ig, 10.07.2025