Privacy Policy

1. Who is responsible?

The controller under the UK GDPR for all data processing on bollsen-hearingprotection.com is:

ERTG d.o.o.
Dunajska cesta 159, 1000 Ljubljana, Slovenia
Tel.: +38615609740 | Email: support(@)bollsen-hearingprotection.com

2. What rights do you have?

You may exercise the following rights against us at any time:

• Right of access (art. 15) — what we hold about you
• Right to rectification (art. 16) — if data is inaccurate
• Right to erasure (art. 17) — the “right to be forgotten”
• Right to restriction of processing (art. 18)
• Right to data portability (art. 20) — your data in a machine-readable format
• Right to object (art. 21) — to processing based on legitimate interests
• Right to withdraw consent (art. 7(3)) — without affecting prior processing

Contact for requests: support(@)bollsen-hearingprotection.com

You also have the right to lodge a complaint with the supervisory authority. In the UK this is the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, ico.org.uk.

3. Technical operation of the website

What happens when you visit our site?
When you open our website, data is transmitted automatically by your browser and stored in what are known as server log files. The following information is collected:

• Date and time of access
• URL of the page accessed
• Referrer (the page you came from)
• Browser type and version, operating system
• IP address (anonymised)

This data is processed to ensure trouble-free operation and for troubleshooting. Legal basis: art. 6(1)(f) (legitimate interests). Retention: 7 days, then automatic deletion. This data is not combined with other personal data.

SSL encryption
Our website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” prefix and the padlock symbol in your browser bar.

4. Order processing, delivery and fulfilment

Processing when you order:
To process your order we need: name, address, email address, telephone number, payment details. This data is used solely to perform the contract.
Legal basis: art. 6(1)(b) (performance of a contract).

Order management — MetaKocka:
For managing orders, invoices and stock data we use MetaKocka (MetaKocka d.o.o., Lepi pot 6, 1000 Ljubljana, Slovenia). MetaKocka processes order and customer data as a processor on our behalf.
Legal basis: art. 6(1)(b). Data protection: metakocka.si

Order synchronisation — Billbee:
For synchronising and managing orders from different sales channels we use Billbee (Billbee GmbH, Gadderbaumer Str. 30, 33602 Bielefeld, Germany). Billbee receives order and customer data.
Legal basis: art. 6(1)(b). Data protection: billbee.io/datenschutz

Carriers:
To deliver your order we pass your delivery details (name, address, and where necessary telephone number) to the following carriers:

• Royal Mail
• DHL Express

Legal basis: art. 6(1)(b).

Fulfilment partners:
Physical storage and dispatch of goods may be handled by external fulfilment partners:

• ShipBob, Inc. — Coleshill Hams Hall Distribution Park, Birmingham, for UK orders
• FHB Fulfillment, Slovakia — for orders in certain markets
• Fully d.o.o., Slovenia — for orders in and around Slovenia

These partners receive the delivery details necessary to process the order.
Legal basis: art. 6(1)(b).

Disclosure for legal reasons:
We disclose data to third parties where necessary to comply with legal obligations (art. 6(1)(c)) — for example to tax authorities or courts.

Customer account:
If you create an account with us, we store the details you provide for the lifetime of the account.
Legal basis: art. 6(1)(b).

Retention period:
Data arising from purchases is subject to commercial and tax retention periods (up to 10 years). After those periods the data is deleted as a matter of routine.

5. Payment service providers

For payment processing we work with the following providers. Each has its own data protection rules:

PayPal — PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
Data protection: paypal.com/uk/webapps/mpp/ua/privacy-full

Stripe — Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin, Ireland
Data protection: stripe.com/gb/privacy

Credit and debit cards via Stripe — Handled by Stripe Payments Europe Ltd. (see above)

Klarna — Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden
Data protection: klarna.com/uk/

Apple Pay — Handled via Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland. With Apple Pay, payment data is transmitted encrypted through Apple’s systems; BOLLSEN does not receive full card details. Apple’s data protection rules apply.
Data protection: apple.com/uk/privacy/

Legal basis: art. 6(1)(b).

6. Analytics and web statistics

Google Analytics

We use Google Analytics (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The tool sets cookies and creates usage profiles using pseudonyms.
Legal basis: art. 6(1)(a) (consent). You may withdraw your consent at any time.

We have activated IP anonymisation: your IP address is truncated before processing. Information on data protection at Google Analytics: policies.google.com/privacy

Opt-out: Browser add-on: tools.google.com/dlpage/gaoptout

Google Signals

We use Google Signals — an extended function of Google Analytics for cross-device reporting and remarketing (provided Google account users have not opted out of personalised advertising).
Legal basis: art. 6(1)(a) (consent).

Objection: At myaccount.google.com → Data and privacy

Google Tag Manager

To manage our analytics and marketing tags we use Google Tag Manager (Google Ireland Limited). The tool sets no cookies and collects no personal data — it only controls other tags.
Data protection: policies.google.com/privacy

7. Marketing and advertising

Google Ads and conversion tracking

We advertise via Google Ads (Google Ireland Limited). Google’s conversion tracking cookie lets us see whether a user placed an order with us after clicking an advertisement. Cookies expire after 30 days; the information collected is anonymous and used only for statistical purposes.
Legal basis: art. 6(1)(a) (consent).

Opt-out: adssettings.google.com

Google Ads Remarketing

Remarketing functions let us show advertisements on Google to visitors to our website. Cookies are used to analyse user behaviour across different websites.
Legal basis: art. 6(1)(a) (consent).

Opt-out: adssettings.google.com

Google AdSense

We use Google AdSense (Google Ireland Limited) to display advertisements on our website. Google AdSense sets cookies and uses web beacons to analyse user behaviour and display personalised advertising.
Legal basis: art. 6(1)(a) (consent).

Opt-out: adssettings.google.com

Google Customer Reviews

We use the “Google Customer Reviews” programme (Google Ireland Limited) to send an automatic review request by email after a purchase. Your email address is passed to Google. Participation is voluntary.
Legal basis: art. 6(1)(a) (consent). Data protection: policies.google.com/privacy

TikTok Pixel

We use the TikTok Pixel (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland). The pixel allows evaluation of advertising campaigns on TikTok and targeted advertising to visitors to our website. Usage data is transmitted to TikTok.
Legal basis: art. 6(1)(a) (consent).

Opt-out: tiktok.com/legal/page/eea/privacy-policy/

Trustpilot

We use Trustpilot (Trustpilot A/S, Pilestræde 58, 1112 Copenhagen, Denmark) to collect and display customer reviews. After a purchase an automatic invitation to leave a review may be sent by email.
Legal basis: art. 6(1)(f) (legitimate interest in transparent customer communication). Data protection: legal.trustpilot.com/for-reviewers/end-user-privacy-terms

WiserReview — review reminders

We use WiserReview to send automated review requests after a purchase. Your email address is passed to the service provider.
Legal basis: art. 6(1)(f) (legitimate interests).

Back-in-stock notifications

If you sign up to be notified when a product is back in stock, we store your email address and the product requested. We notify you once when the product is available again and then delete the data.
Legal basis: art. 6(1)(a) (consent).

8. Customer communication: newsletter, email and SMS

Newsletter

If you subscribe to our newsletter, we use your email address solely to send information and offers. You can unsubscribe at any time — via the unsubscribe link in the newsletter or by message to support(@)bollsen-hearingprotection.com.
Legal basis: art. 6(1)(a) (consent).

Email infrastructure — Amazon Web Services (AWS):
For the technical sending of emails and newsletters we use Amazon Web Services (Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg). Emails are sent via servers in Frankfurt (region eu-central-1).
Legal basis: art. 6(1)(f). Data protection: aws.amazon.com/privacy/

Klarna marketing communications:
If you use Klarna as a payment method and Klarna has obtained your consent, you may also receive advertising from Klarna. You can object directly to Klarna via klarna.com/uk/.

CartBoss — SMS marketing (abandoned baskets)

We use CartBoss (Spletnik d.o.o., Dunajska cesta 5, 1000 Ljubljana, Slovenia) for automated SMS messages where a basket is abandoned. If you provided your telephone number during checkout and consented to SMS, CartBoss may send you a reminder message.
Legal basis: art. 6(1)(a) (consent). You can stop the SMS messages at any time by replying “STOP”.

Contact by email

If you send us an email, we process your message and the data it contains in order to answer your enquiry.
Legal basis: art. 6(1)(f) (legitimate interests). Retention: until the matter is fully resolved, after which the data is deleted — unless statutory retention obligations apply.

9. Social media and external services

Facebook Pixel and Custom Audiences

We use the Facebook Pixel (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland). The pixel enables: targeted advertising on Facebook to visitors to our website, creation of lookalike audiences, and evaluation of advertising effectiveness.
Legal basis: art. 6(1)(a) (consent).

When you visit our website the pixel may transmit data to Facebook — even if you do not have a Facebook account or are not logged in. We have entered into a joint controllership agreement with Meta under art. 26.

Opt-out: facebook.com/privacy/explanation | youronlinechoices.co.uk

Facebook Custom Audiences (customer list matching)

To target existing customers on Facebook we may transmit email addresses to Facebook in encrypted form. Encryption uses a hash value; recovering the addresses in plain text is technically impossible.
Legal basis: art. 6(1)(a) (consent) or legitimate interests (art. 6(1)(f)) in respect of existing customers.

Facebook Connect (log in with Facebook)

On our website you may optionally log in with your Facebook account (Facebook Connect, Meta Platforms Ireland Ltd.). On use, a connection is established with Facebook’s servers and profile data is transmitted. Meta’s privacy policy applies.
Legal basis: art. 6(1)(a) (consent).

Google Sign-In (log in with Google)

We offer the option to log in with a Google account (Google Ireland Limited). On use, profile information such as name and email address is transmitted to us by Google.
Legal basis: art. 6(1)(a) (consent). Data protection: policies.google.com/privacy

Embedded YouTube content

YouTube videos may be embedded on our website (Google Ireland Limited). On playback a connection is established with YouTube’s servers and your IP address and usage data are transmitted. Where possible we use extended privacy mode, which sets cookies only once playback begins.
Legal basis: art. 6(1)(a) (consent). Data protection: policies.google.com/privacy

Facebook social plugins

Social plugins from Facebook (Meta) may be embedded on our website. When you visit the page a connection is established with Facebook’s servers if you are logged in — this tells Facebook which pages you have visited.

Opt-out: Log out of Facebook before visiting our site.

10. Technical support services

Bunny CDN

Our website uses the content delivery network of BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia. Bunny CDN is a European service with servers in the EU. To deliver our website content and optimise loading speed, Bunny CDN processes connection data (IP address, time of access, URL).
Legal basis: art. 6(1)(f) (legitimate interest in fast and secure operation).
Data protection: bunny.net/privacy

WooCommerce / WordPress

Our website runs on WordPress with the WooCommerce e-commerce extension (Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA). WooCommerce and WordPress process personal data as part of platform operation (order data, customer account, session data).
Legal basis: art. 6(1)(b) and (f). For transfers to the USA we rely on the UK International Data Transfer Addendum to the EU standard contractual clauses.
Data protection: automattic.com/privacy/

Wordfence

To protect our website against attacks and unauthorised access we use Wordfence (Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA). Wordfence analyses incoming traffic and may process IP addresses and access data.
Legal basis: art. 6(1)(f) (legitimate interest in IT security). For transfers to the USA we rely on the UK International Data Transfer Addendum to the EU standard contractual clauses.
Data protection: defiant.com/privacy-policy/

11. Cookie policy

Cookies are small text files that your browser stores on your device when you visit our website.

Technically necessary cookies — required for basic functions (basket, login session, security). These are set without your consent.
Legal basis: art. 6(1)(f).

Analytics cookies — for analysing user behaviour (e.g. Google Analytics). Only with your consent.
Legal basis: art. 6(1)(a).

Marketing cookies — for targeted advertising (e.g. Facebook Pixel, Google Ads, TikTok). Only with your consent.
Legal basis: art. 6(1)(a).

Managing cookies:
You can adjust or withdraw your consent for non-necessary cookies at any time via our cookie banner. Alternatively, cookies can be disabled or deleted through your browser settings — note that this may limit functions on our website.

About this cookie policy

This cookie policy explains what cookies are and how we use them. You should read this policy to understand what cookies are, how we use them, the types of cookies we use and how you can control your cookie settings. More information on how we use, store and protect your personal data is in our privacy policy.

You can change or withdraw your consent at any time from the cookie declaration on our website.

Further information about who we are, how to contact us and how we process personal data is in our privacy policy. Your consent applies to the following domain: bollsen-hearingprotection.com

What are cookies?

Cookies are small text files used to store small pieces of information. They are stored on your device when the website loads in your browser. These cookies help us make the website function properly, make it more secure, provide a better user experience, understand how the site performs and analyse what works and where improvement is needed.

How do we use cookies?

Like most online services, our website uses first- and third-party cookies for a number of purposes. First-party cookies are mostly necessary for the website to function correctly and do not collect personal data.

The third-party cookies used on our website mainly serve to understand how the website performs, how you interact with it, keep our services secure, deliver advertising relevant to you, and provide a better and improved user experience while speeding up your future interactions with our website.

What types of cookies do we use?

The cookies used on our website fall into the following categories.

Necessary cookies
These cookies are essential to provide you with the services available through our website and to use some of its features. Because they are strictly necessary for us to deliver services securely, you cannot refuse them without changing how you use the website. You can block or delete them via your browser settings.

Analytics and marketing cookies
These cookies collect information that helps us understand how visitors use our website, or how effective our marketing campaigns are. They help us tailor the website and improve your experience.

Personalised marketing
These cookies and pixels are used to make our marketing more relevant and interesting to you. We also use them to exclude you from BOLLSEN® advertising and to define our audiences more accurately.

The following list sets out the cookies used on our website.

NECESSARY COOKIES

ANALYTICS COOKIES

MARKETING COOKIES

How can I manage cookie settings?

You can manage your cookie settings by clicking “Settings” and enabling or disabling the cookie categories in the pop-up window according to your preferences.

If you want to change your preferences later, you can click the “Privacy & Cookie Policy” tab on screen. The consent box will appear again so that you can change your settings or withdraw your consent entirely.

In addition, different browsers offer different methods for blocking and deleting cookies from websites. You can change your browser settings to block or delete cookies. More information on managing and deleting cookies is available at wikipedia.org and allaboutcookies.org.

12. Data transfers to third countries

Some of the services we use are based in the United States or other countries outside the UK. For such transfers we rely on appropriate safeguards:

• The UK International Data Transfer Addendum to the EU standard contractual clauses, or the UK International Data Transfer Agreement
• UK adequacy regulations — for countries the UK Government has assessed as providing an adequate level of protection

Services affected (US-based): Automattic/WooCommerce, Defiant/Wordfence, Amazon Web Services, ShipBob. Other services based in the EU: Google Ireland Ltd., Meta Platforms Ireland Ltd., Klarna Bank AB, Stripe Payments Europe Ltd.

13. Changes to this policy

We reserve the right to update this privacy policy to reflect changes in our business, applicable law, or the introduction of new services. The current version is always published at bollsen-hearingprotection.com. We recommend reviewing it regularly.

Ljubljana, Slovenia — 25 August 2026

BOLLSEN® | ERTG d.o.o. | Dunajska cesta 159, 1000 Ljubljana, Slovenia | bollsen-hearingprotection.com

© 2026 ERTG d.o.o., Dunajska cesta 159, 1000 Ljubljana, Slovenia. All rights reserved. Prepared by ERTG d.o.o. Legal representation: FMMS, Slovenska cesta 56, 1000 Ljubljana, Slovenia. Unauthorised reproduction is prohibited by copyright.