1. What cookies are
A cookie is a small file a website stores in your browser and can read on your next visit, which lets it recognise your device. We treat related technologies the same way — local storage and session storage — because they also store data on your device.
We use cookies in line with Article 225 of the Slovenian Electronic Communications Act (ZEKom-2) and the GDPR.
2. When we need your consent
Strictly necessary cookies may be set without consent, because without them the service you explicitly asked for — the basket, or signing in — does not work at all. Everything else needs your consent, which we obtain before those cookies are set.
- Consent is free: refusing is as easy as accepting and both buttons are equally prominent.
- Nothing is pre-ticked; silence, scrolling and continued browsing are not consent.
- Consent is split by category — accept only what you want.
- Access to the site is not conditional on consent; it works fine if you refuse everything.
- You can withdraw consent at any time, as easily as you gave it.
We keep your choice for 12 months and then ask again.
3. Strictly necessary cookies and storage
These are always set and cannot be switched off. The shop does not function without them.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| avto-orodje-cart | avto-orodje.si | The contents of your basket between visits. | Until deleted | localStorage |
| avto-orodje-subscription | avto-orodje.si | Products marked for subscription before you place the order. | Until deleted | localStorage |
| ao-consent | avto-orodje.si | Your cookie choice, so we do not ask again. | 12 months | localStorage |
| payload-token | avto-orodje.si | Keeps you signed in. | Session (2 hours by default) | Cookie (HttpOnly) |
| __stripe_mid | Stripe | Card fraud prevention at checkout. | 1 year | Cookie |
| __stripe_sid | Stripe | Card fraud prevention within a payment session. | 30 minutes | Cookie |
4. Analytics cookies
Set only if you accept them. They help us see which pages are visited and where visitors get stuck, so we can improve the shop. We do not use the data to identify individuals.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| _ga | Google Analytics | Distinguishes visitors. | 2 years | Cookie |
| _ga_<ID> | Google Analytics | Persists measurement session state. | 2 years | Cookie |
| _gid | Google Analytics | Distinguishes visitors. | 24 hours | Cookie |
5. Advertising cookies
Set only if you accept them. They measure how ads perform and let us show you more relevant ads, including on other sites. These are set by third parties who process the data under their own privacy policies.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| _gcl_au | Google Ads | Measures conversions from ads. | 90 days | Cookie |
| IDE | Google DoubleClick | Serving and measuring ads. | 13 months | Cookie |
| test_cookie | Google DoubleClick | Checks whether the browser supports cookies. | 15 minutes | Cookie |
| _fbp | Meta (Facebook) | Conversion measurement and remarketing. | 3 months | Cookie |
We extend this list whenever we add an advertising tool. If the purposes change materially we ask for your consent again.
6. Changing or withdrawing consent
Click "Cookie settings" in the footer at any time. The same panel you saw on your first visit opens, and you can switch each category on or off. Withdrawal takes effect immediately going forward; we stop reading cookies set earlier.
You can also delete or block cookies in your browser settings. Blocking strictly necessary cookies will break the basket, signing in and payment.
7. Your rights
Where cookies process personal data you have the GDPR rights of access, rectification, erasure, restriction, portability and objection. Send a request to info@avto-orodje.si.
If you believe the processing is unlawful you may complain to the Slovenian Information Commissioner, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si.

