This Privacy Policy explains how VII MIRACULA arhitekturno oblikovanje d.o.o., trading as 7Miracula, collects and uses personal data when you visit the website, purchase a workshop, request access or contact us.
1. Controller
- Data controller
- VII MIRACULA arhitekturno oblikovanje d.o.o.
- Registered office
- Štefanova ulica 5, 1000 Ljubljana, Slovenia
- Registration / tax numbers
- 9151869000 / 98118552
- Privacy contact
- art@7miracula.com
- Telephone
- +386 1 777 43 47
2. Data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email/Gmail, billing address, phone where supplied, order details | Accept orders, provide confirmations, grant workshop access, customer support and contract administration | Performance of a contract and steps requested before a contract |
| Payment status, amount, transaction and fraud-prevention identifiers | Process and reconcile payments, prevent fraud, respond to payment disputes | Contract; legitimate interests in secure payments and fraud prevention; legal obligations |
| Invoices, accounting and transaction records | Accounting, tax, audit and statutory record keeping | Legal obligation |
| Messages, support requests, complaints and withdrawal records | Respond to enquiries, solve access problems, establish or defend legal claims | Contract; legitimate interests; legal obligation where applicable |
| IP address, device/browser data, timestamps, logs and necessary cookies | Operate, secure and troubleshoot the website, cart, checkout and workshop access | Legitimate interests and performance of the requested service |
| Preferences and non-essential cookies, if introduced | Analytics, personalisation or marketing described in a consent interface | Consent |
We do not sell personal data. We do not use solely automated decision-making that produces legal or similarly significant effects for customers. Payment providers may apply their own automated fraud-prevention tools under their policies.
3. Payment data
Payments are processed by Stripe. Card details and supported wallet credentials are entered into interfaces controlled by Stripe and are not stored by 7Miracula. We receive limited information such as payment status, amount, payment method type, transaction identifiers, risk indicators and limited card metadata. Stripe acts under its own privacy terms for parts of this processing. See Stripe’s Privacy Policy.
4. Google and YouTube access
To deliver a private YouTube workshop, we use the Gmail address supplied with the order to grant access through Google/YouTube. Google receives and processes that account identifier and video-use data as an independent service provider/controller under its own terms. The customer must use the designated Google account to view the video. We do not receive the customer’s Google password.
5. Other recipients
Data is shared only where necessary with service providers and recipients such as:
- website hosting, infrastructure, email and technical-support providers;
- WooCommerce and related ecommerce infrastructure used to operate the shop;
- Stripe and payment networks used to process and secure payments;
- Google/YouTube used to deliver private video access;
- accountants, auditors, lawyers and insurers where necessary; and
- courts, regulators, tax bodies, law-enforcement or other authorities where required by law.
Processors are required to protect data and act only on documented instructions where the GDPR requires it.
6. International transfers
Some providers, including Stripe and Google, may process data outside the European Economic Area. Where GDPR transfer restrictions apply, the relevant provider and/or 7Miracula relies on an adequacy decision, approved standard contractual clauses or another lawful safeguard. Further details may be requested at art@7miracula.com.
7. Retention
- Invoices and accounting records are generally retained for 10 years after the end of the relevant accounting period, or longer where law requires.
- Order and payment records are retained for the contract, statutory warranty, tax and limitation periods.
- Workshop access records are retained while access is active and normally for up to 3 years afterwards to resolve claims and prevent misuse.
- Support and enquiry correspondence is normally retained for up to 3 years after closure, unless an ongoing claim requires longer.
- Security logs are normally retained for up to 12 months unless an incident requires longer.
- Consent-based marketing data, if collected, is retained until consent is withdrawn or after a reasonable period of inactivity, normally no more than 3 years.
Data is deleted or anonymised when no longer required, subject to backups and legal holds.
8. Your rights
Subject to the GDPR and applicable exceptions, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing. You may also object at any time to direct marketing.
Send requests to art@7miracula.com. We may ask for information needed to verify identity and will normally respond within one month. You also have the right to complain to the Slovenian supervisory authority:
Information Commissioner of the Republic of Slovenia
Dunajska cesta 22, 1000 Ljubljana, Slovenia
gp.ip@ip-rs.si
www.ip-rs.si
9. Cookies and security
Cookie use is described in the Cookie Policy. We apply appropriate organisational and technical safeguards, but no internet service can guarantee absolute security. Customers should protect their email and Google accounts and notify us promptly of suspected unauthorised use.
10. Children and external links
The shop is not directed to children who cannot lawfully enter the purchase contract in their country. External services and links have their own privacy policies, and 7Miracula is not responsible for their independent processing.
11. Updates
We may update this policy to reflect legal, technical or business changes. The effective date above identifies the current version. Material changes will be highlighted or communicated where required.