Privacy Policy
1. Who is responsible?
The business responsible for the personal information collected on mybollsen.com is:
ERTG d.o.o.
Dunajska cesta 159, 1000 Ljubljana, Slovenia
Tel.: +38615609740 | Email: support(@)mybollsen.com
2. Your privacy rights
Depending on where you live, you may have some or all of the following rights regarding the personal information we hold about you:
- Right to know — what categories of personal information we collect, why, and who we share it with
- Right to access — a copy of the personal information we hold about you
- Right to correct — inaccurate personal information
- Right to delete — personal information we hold about you, subject to legal exceptions
- Right to opt out — of the sale or sharing of personal information, and of targeted advertising
- Right to limit — the use of sensitive personal information
- Right to non-discrimination — we will not deny service, charge a different price or provide a lesser quality of service because you exercised a privacy right
To exercise any of these rights, contact us at support(@)mybollsen.com. We will verify your request before responding, and we will respond within the timeframe required by applicable law.
California residents: Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, you have the rights listed above. You may also designate an authorized agent to make a request on your behalf. If you are dissatisfied with our response, you may contact the California Privacy Protection Agency or the California Attorney General.
Other states: Residents of states including Virginia, Colorado, Connecticut, Utah and Texas have comparable rights under their state privacy laws, including the right to appeal a refusal of a request. To appeal, reply to our response or write to support(@)mybollsen.com with “Privacy Appeal” in the subject line.
Do we sell personal information? We do not sell personal information for money. However, our use of advertising and analytics cookies (see section 11) may be considered “sharing” or a “sale” for targeted advertising under some state laws. You can opt out through our cookie banner, or by using a Global Privacy Control signal, which we honor.
3. Technical operation of the website
What happens when you visit our site?
When you open our website, data is transmitted automatically by your browser and stored in server log files. The following information is collected:
- Date and time of access
- URL of the page accessed
- Referrer (the page you came from)
- Browser type and version, operating system
- IP address (anonymized)
This data is processed to ensure trouble-free operation and for troubleshooting. Retention: 7 days, then automatic deletion. This data is not combined with other personal information.
SSL encryption
Our website uses SSL/TLS encryption. You can recognize an encrypted connection by the “https://” prefix and the padlock symbol in your browser bar.
4. Order processing, delivery and fulfillment
Processing when you order:
To process your order we need: name, address, email address, telephone number, payment details. This information is used solely to fulfill your order and perform our contract with you.
Order management — MetaKocka:
For managing orders, invoices and stock data we use MetaKocka (MetaKocka d.o.o., Lepi pot 6, 1000 Ljubljana, Slovenia). MetaKocka processes order and customer data as a service provider on our behalf.
Privacy: metakocka.si
Order synchronization — Billbee:
For synchronizing and managing orders from different sales channels we use Billbee (Billbee GmbH, Gadderbaumer Str. 30, 33602 Bielefeld, Germany).
Privacy: billbee.io/datenschutz
Carriers:
To deliver your order we pass your shipping details (name, address, and where necessary telephone number) to the following carriers:
- USPS
- DHL
Fulfillment partners:
Physical storage and shipping of goods may be handled by external fulfillment partners:
- ShipBob, Inc. — Levittown, Pennsylvania, for US orders
- FHB Fulfillment, Slovakia — for orders in certain markets
- Fully d.o.o., Slovenia — for orders in and around Slovenia
Disclosure for legal reasons:
We disclose information to third parties where necessary to comply with legal obligations — for example to tax authorities, law enforcement or courts, or in response to a valid subpoena.
Customer account:
If you create an account with us, we store the details you provide for the lifetime of the account.
Retention period:
Information arising from purchases is retained for as long as required by commercial and tax record-keeping rules (up to 10 years). After those periods the data is deleted as a matter of routine.
5. Payment service providers
For payment processing we work with the following providers. Each has its own privacy policy:
PayPal — PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
Privacy: paypal.com/us/webapps/mpp/ua/privacy-full
Stripe — Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin, Ireland
Privacy: stripe.com/privacy
Credit and debit cards via Stripe — Handled by Stripe Payments Europe Ltd. (see above)
Klarna — Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden
Privacy: klarna.com/us/privacy/
Apple Pay — Handled via Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland. With Apple Pay, payment data is transmitted encrypted through Apple’s systems; BOLLSEN does not receive full card details. Apple’s privacy policy applies.
Privacy: apple.com/legal/privacy/
6. Analytics and web statistics
Google Analytics
We use Google Analytics (provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043). The tool sets cookies and creates usage profiles using pseudonyms. We have activated IP anonymization: your IP address is truncated before processing.
Privacy: policies.google.com/privacy
Opt-out: Browser add-on: tools.google.com/dlpage/gaoptout
Google Signals
We use Google Signals — an extended function of Google Analytics for cross-device reporting and remarketing (provided Google account users have not opted out of personalized advertising).
Objection: At myaccount.google.com → Data and privacy
Google Tag Manager
To manage our analytics and marketing tags we use Google Tag Manager (Google LLC). The tool sets no cookies and collects no personal information — it only controls other tags.
Privacy: policies.google.com/privacy
7. Marketing and advertising
Google Ads and conversion tracking
We advertise via Google Ads (Google LLC). Google’s conversion tracking cookie lets us see whether a user placed an order with us after clicking an advertisement. Cookies expire after 30 days; the information collected is anonymous and used only for statistical purposes.
Opt-out: adssettings.google.com
Google Ads Remarketing
Remarketing functions let us show advertisements on Google to visitors to our website. Cookies are used to analyze user behavior across different websites.
Opt-out: adssettings.google.com
Google AdSense
We use Google AdSense (Google LLC) to display advertisements on our website. Google AdSense sets cookies and uses web beacons to analyze user behavior and display personalized advertising.
Opt-out: adssettings.google.com
Google Customer Reviews
We use the “Google Customer Reviews” program (Google LLC) to send an automatic review request by email after a purchase. Your email address is passed to Google. Participation is voluntary.
Privacy: policies.google.com/privacy
TikTok Pixel
We use the TikTok Pixel (TikTok Inc., 5800 Bristol Parkway, Culver City, CA 90230). The pixel allows evaluation of advertising campaigns on TikTok and targeted advertising to visitors to our website. Usage data is transmitted to TikTok.
Opt-out: tiktok.com/legal/privacy-policy-us
Trustpilot
We use Trustpilot (Trustpilot A/S, Pilestræde 58, 1112 Copenhagen, Denmark) to collect and display customer reviews. After a purchase an automatic invitation to leave a review may be sent by email.
Privacy: legal.trustpilot.com/for-reviewers/end-user-privacy-terms
WiserReview — review reminders
We use WiserReview to send automated review requests after a purchase. Your email address is passed to the service provider.
Back-in-stock notifications
If you sign up to be notified when a product is back in stock, we store your email address and the product requested. We notify you once when the product is available again and then delete the data.
8. Customer communication: newsletter, email and SMS
Newsletter
If you subscribe to our newsletter, we use your email address solely to send information and offers. You can unsubscribe at any time — via the unsubscribe link in the newsletter or by message to support(@)mybollsen.com.
Email infrastructure — Amazon Web Services (AWS):
For the technical sending of emails and newsletters we use Amazon Web Services (Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109).
Privacy: aws.amazon.com/privacy/
Klarna marketing communications:
If you use Klarna as a payment method and Klarna has obtained your consent, you may also receive advertising from Klarna. You can object directly to Klarna via klarna.com/us/privacy/.
CartBoss — SMS marketing (abandoned carts)
We use CartBoss (Spletnik d.o.o., Dunajska cesta 5, 1000 Ljubljana, Slovenia) for automated SMS messages where a cart is abandoned. If you provided your telephone number during checkout and consented to SMS, CartBoss may send you a reminder message. Message and data rates may apply.
You can stop the SMS messages at any time by replying “STOP”, or reply “HELP” for assistance.
Contact by email
If you send us an email, we process your message and the data it contains in order to answer your inquiry. Retention: until the matter is fully resolved, after which the data is deleted — unless record-keeping obligations apply.
9. Social media and external services
Facebook Pixel and Custom Audiences
We use the Facebook Pixel (Meta Platforms, Inc., 1 Meta Way, Menlo Park, CA 94025). The pixel enables: targeted advertising on Facebook to visitors to our website, creation of lookalike audiences, and evaluation of advertising effectiveness.
When you visit our website the pixel may transmit data to Facebook — even if you do not have a Facebook account or are not logged in.
Opt-out: facebook.com/privacy/explanation | optout.aboutads.info
Facebook Custom Audiences (customer list matching)
To target existing customers on Facebook we may transmit email addresses to Facebook in encrypted form. Encryption uses a hash value; recovering the addresses in plain text is technically impossible.
Facebook Connect (log in with Facebook)
On our website you may optionally log in with your Facebook account (Facebook Connect, Meta Platforms, Inc.). On use, a connection is established with Facebook’s servers and profile data is transmitted. Meta’s privacy policy applies.
Google Sign-In (log in with Google)
We offer the option to log in with a Google account (Google LLC). On use, profile information such as name and email address is transmitted to us by Google.
Privacy: policies.google.com/privacy
Embedded YouTube content
YouTube videos may be embedded on our website (Google LLC). On playback a connection is established with YouTube’s servers and your IP address and usage data are transmitted. Where possible we use extended privacy mode, which sets cookies only once playback begins.
Privacy: policies.google.com/privacy
Facebook social plugins
Social plugins from Facebook (Meta) may be embedded on our website. When you visit the page a connection is established with Facebook’s servers if you are logged in — this tells Facebook which pages you have visited.
Opt-out: Log out of Facebook before visiting our site.
10. Technical support services
Bunny CDN
Our website uses the content delivery network of BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia. To deliver our website content and optimize loading speed, Bunny CDN processes connection data (IP address, time of access, URL).
Privacy: bunny.net/privacy
WooCommerce / WordPress
Our website runs on WordPress with the WooCommerce e-commerce extension (Automattic Inc., 60 29th Street #343, San Francisco, CA 94110). WooCommerce and WordPress process personal information as part of platform operation (order data, customer account, session data).
Privacy: automattic.com/privacy/
Wordfence
To protect our website against attacks and unauthorized access we use Wordfence (Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104). Wordfence analyzes incoming traffic and may process IP addresses and access data.
Privacy: defiant.com/privacy-policy/
11. Cookie policy
Cookies are small text files that your browser stores on your device when you visit our website.
Strictly necessary cookies — required for basic functions (cart, login session, security). These are set automatically.
Analytics cookies — for analyzing user behavior (e.g. Google Analytics). Set only where you have not opted out.
Marketing cookies — for targeted advertising (e.g. Facebook Pixel, Google Ads, TikTok). Set only where you have not opted out. Use of these may constitute “sharing” for targeted advertising under some state privacy laws.
Managing cookies:
You can adjust your cookie preferences at any time via our cookie banner. We also honor Global Privacy Control signals sent by your browser. Alternatively, cookies can be disabled or deleted through your browser settings — note that this may limit functions on our website.
About this cookie policy
This cookie policy explains what cookies are and how we use them. You should read this policy to understand what cookies are, how we use them, the types of cookies we use and how you can control your cookie settings. More information on how we use, store and protect your personal information is in this privacy policy.
You can change your preferences at any time from the cookie declaration on our website. Your preferences apply to the following domain: mybollsen.com
What are cookies?
Cookies are small text files used to store small pieces of information. They are stored on your device when the website loads in your browser. These cookies help us make the website function properly, make it more secure, provide a better user experience, understand how the site performs and analyze what works and where improvement is needed.
How do we use cookies?
Like most online services, our website uses first- and third-party cookies for a number of purposes. First-party cookies are mostly necessary for the website to function correctly and do not collect personal information.
The third-party cookies used on our website mainly serve to understand how the website performs, how you interact with it, keep our services secure, deliver advertising relevant to you, and provide a better and improved user experience while speeding up your future interactions with our website.
What types of cookies do we use?
The cookies used on our website fall into the following categories.
Necessary cookies
These cookies are essential to provide you with the services available through our website and to use some of its features. Because they are strictly necessary for us to deliver services securely, you cannot refuse them without changing how you use the website. You can block or delete them via your browser settings.
Analytics and marketing cookies
These cookies collect information that helps us understand how visitors use our website, or how effective our marketing campaigns are. They help us tailor the website and improve your experience.
Personalized marketing
These cookies and pixels are used to make our marketing more relevant and interesting to you. We also use them to exclude you from BOLLSEN® advertising and to define our audiences more accurately.
The following list sets out the cookies used on our website.
NECESSARY COOKIES
| Cookie | Duration | Description |
|---|---|---|
| wffn_flt | 2 days | FunnelKit — no description available. |
| wffn_timezone | 2 days | FunnelKit — no description available. |
| wffn_is_mobile | 2 days | FunnelKit — no description available. |
| wffn_browser | 2 days | FunnelKit — no description available. |
| wffn_referrer | 2 days | FunnelKit — no description available. |
| wffn_fl_url | 2 days | FunnelKit — no description available. |
| wffn_ay_* | Session | FunnelKit — manages user sessions, tracks sales funnel interactions (checkout progress, upsell responses, opt-in choices). |
| wffn_si | Session | FunnelKit — no description available. |
| wfocu_si | 1 day | FunnelKit — no description available. |
| __cflb | 1 hour | Cloudflare — used for load balancing. |
| __cf_bm | 1 hour | Cloudflare — bot management cookie protecting against automated access. |
| wt_consent | 1 year | Cookie consent plugin — stores your cookie preferences for future visits. Collects no personal information. |
| m | 1 year 1 month 4 days | Stripe — fraud prevention; identifies the device used. |
| __stripe_mid | 1 year | Stripe — unique session identifier to recognize users across sessions. |
| __stripe_sid | 1 hour | Stripe — unique session identifier for a single session. |
| woocommerce_items_in_cart | Session | WooCommerce — records whether there are items in the cart. |
| woocommerce_cart_hash | Session | WooCommerce — detects changes to the cart. |
| wp_woocommerce_session_* | 2 days | WooCommerce — unique code for the customer session; points to cart data in the database. |
| woocommerce_recently_viewed | Session | WooCommerce — stores recently viewed products for the corresponding widget. |
| PHPSESSID | Session | PHP — manages the unique user session ID; deleted when the browser closes. |
ANALYTICS COOKIES
| Cookie | Duration | Description |
|---|---|---|
| _ga | 1 year 1 month 4 days | Google Analytics — calculates visit, session and campaign data; stores information anonymously. |
| _ga_* | 1 year 1 month 4 days | Google Analytics — stores and counts page views. |
| _gcl_au | 3 months | Google Tag Manager — measures advertising effectiveness. |
| FPID | 1 year 1 month 4 days | Google Tag Manager — server-side tagging. |
| FPAU | 3 months | Google Tag Manager — analytics and reporting data on user activity. |
| FPLC | 20 hours | Google Tag Manager — cross-domain tracking. |
| FPGSID | 1 hour | Google Tag Manager — no description available. |
| _gtmeec | 3 months | Google Tag Manager — no description available. |
| _sbp | 1 year 1 month 4 days | No description available. |
| _dcid | 1 year 1 month 4 days | No description available. |
| CLID | 1 year | Microsoft Clarity — records how visitors interact with the website; used for analytics reports. |
| _clck | 1 year | Microsoft Clarity — stores the Clarity user ID and settings; links actions on repeat visits to the same user. |
| _clsk | 1 day | Microsoft Clarity — combines a user’s page views into a single session recording. |
| MR | 7 days | Bing (Microsoft) — collects user data for analytics purposes. |
| SM | Session | Microsoft Clarity — synchronizes the MUID across Microsoft domains. |
| _fbp | 3 months | Facebook — displays advertisements on Facebook and digital platforms using Facebook advertising after a site visit. |
| sbjs_migrations | Session | Sourcebuster — identifies the visit source and stores user action data; analytical and behavioral cookie. |
| sbjs_current_add | Session | Sourcebuster — as sbjs_migrations. |
| sbjs_first_add | Session | Sourcebuster — as sbjs_migrations. |
| sbjs_current | Session | Sourcebuster — as sbjs_migrations. |
| sbjs_first | Session | Sourcebuster — as sbjs_migrations. |
| sbjs_udata | Session | Sourcebuster — as sbjs_migrations. |
| sbjs_session | 1 hour | Sourcebuster — as sbjs_migrations. |
| redcmps | 1 day | No description available. |
| redhash | 1 year | No description available. |
| rtkclickid-store | 3 months | No description available. |
| rtkclickid-session | 1 month | No description available. |
MARKETING COOKIES
| Cookie | Duration | Description |
|---|---|---|
| MUID | 1 year 24 days | Bing (Microsoft) — recognizes unique browsers on Microsoft sites; for advertising, site analytics and other operations. |
| IDE | 1 year 24 days | Google DoubleClick — stores how the user uses the website in order to display relevant advertisements based on their profile. |
| NID | 6 months | Google — limits ad frequency, hides unwanted advertisements and measures advertising effectiveness. |
| test_cookie | 15 minutes | DoubleClick (Google) — checks whether the user’s browser supports cookies. |
| ANONCHK | 10 minutes | Bing (Microsoft) — stores the session ID and verifies ad clicks on Bing. |
| wp_cartboss_session | 1 year | CartBoss — no description available. |
| bollsen_uid | 1 year | Own declaration — persistent anonymous identifier to improve Meta advertising event matching. |
How can I manage cookie settings?
You can manage your cookie settings by clicking “Settings” and enabling or disabling the cookie categories in the pop-up window according to your preferences.
If you want to change your preferences later, you can click the “Privacy & Cookie Policy” tab on screen. The preferences box will appear again so that you can change your settings.
In addition, different browsers offer different methods for blocking and deleting cookies from websites. You can change your browser settings to block or delete cookies. More information on managing and deleting cookies is available at wikipedia.org and allaboutcookies.org.
12. International data transfers
We are based in Slovenia and some of the service providers we use are located in the European Union. This means your personal information may be transferred to, stored and processed outside the United States. Where we transfer information internationally, we take steps to ensure it remains protected, including through contractual safeguards with our service providers.
Service providers based in the EU include: ERTG d.o.o. (Slovenia), MetaKocka (Slovenia), Bunny CDN (Slovenia), CartBoss (Slovenia), Billbee (Germany), Klarna Bank AB (Sweden), Stripe Payments Europe Ltd. (Ireland), Trustpilot A/S (Denmark).
13. Children’s privacy
Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at support(@)mybollsen.com and we will delete it.
14. Changes to this policy
We reserve the right to update this privacy policy to reflect changes in our business, applicable law, or the introduction of new services. The current version is always published at mybollsen.com. We recommend reviewing it regularly.
Ljubljana, Slovenia — 25 August 2026
BOLLSEN® | ERTG d.o.o. | Dunajska cesta 159, 1000 Ljubljana, Slovenia | mybollsen.com
© 2026 ERTG d.o.o., Dunajska cesta 159, 1000 Ljubljana, Slovenia. All rights reserved. Prepared by ERTG d.o.o. Legal representation: FMMS, Slovenska cesta 56, 1000 Ljubljana, Slovenia. Unauthorized reproduction is prohibited by copyright.