Last updated: 17.08.2026

Introduction
Welcome to Altura Medica. Your privacy is important to us, and we are
committed to protecting your personal data. This Privacy Policy explains how
we collect, use, disclose, and safeguard your personal information when you
visit our website https://altura-medica.si or interact with us.

Who We Are
Altura Medica is a wholesale distributor of medical cannabis products serving
pharmacies in Slovenia. We are based in Slovenia and act as the data
controller for all personal data collected through our website.

Contact Information
For questions or concerns regarding your privacy, please contact us:
Email: info@altura-medica.si
Address: Vojkova cesta 91, 1000 Ljubljana, Slovenia

Data We Collect
We may collect and process the following types of personal data:
Contact Information: Name and email address.
Business Information: Company name and country, and any information you
choose to include in your message to us.
Technical Data: IP address, browser type, device type, operating system, and
website usage statistics.
Preferences: Your communication preferences and subscription status.
Cookies and Online Data: Information collected through cookies, such as
website navigation behaviour.

How We Collect Your Data
We collect personal data in two ways:
Directly from you when you complete the contact form on our website or
communicate with us by email.
Automatically when you visit our website.

How We Use Your Data
We process your personal data for the following purposes:
Responding to Enquiries: Answering your questions and providing the
information you have requested.
Business Relationship Management: Assessing and progressing potential
supply, distribution, and partnership relationships.
Marketing Communications: Sending updates about our products and the
Slovenian medical cannabis market, where you have subscribed to them.
Website Improvement: Analysing website traffic and user behaviour to improve
our offering.
Legal Compliance: Fulfilling legal obligations, including record-keeping and
responding to regulatory requests.

Legal Basis for Processing
We process your personal data based on the following legal grounds:
Consent: For sending marketing communications.
Contract Performance: Where processing is necessary to take steps at your
request prior to entering into a contract, or to perform one.
Legitimate Interest: For responding to enquiries, developing business
relationships, improving our services, and maintaining security.
Legal Obligation: To comply with applicable laws and regulations.

Data Sharing
We may share your personal data with:
Service Providers: Third parties that provide IT, hosting, email, analytics,
or operational support.
Regulatory Authorities: If required by law, including the Slovenian Agency
for Medicinal Products and Medical Devices (JAZMP).
Business Partners: Where necessary for collaborations or delivering services.
We ensure all third-party recipients adhere to data protection standards. We
do not sell your data or share it for third-party advertising.

International Transfers
Your personal data may be transferred outside the European Economic Area
(EEA) for processing. When doing so, we ensure appropriate safeguards are in
place, such as Standard Contractual Clauses approved by the European
Commission.

Data Retention
We will retain your personal data only for as long as necessary to fulfil the
purposes outlined in this policy, or as required by law. Enquiry records are
generally retained for 24 months from your last contact with us, unless a
business relationship begins, in which case we retain them for the duration
of that relationship and for any period required by law.

Your Rights
As an EU-based user, you have the following rights under GDPR:
Access: Request access to the personal data we hold about you.
Correction: Correct inaccurate or incomplete data.
Erasure: Request deletion of your data where appropriate.
Restriction: Limit the processing of your data.
Portability: Request a copy of your data in a machine-readable format.
Objection: Object to data processing for certain purposes, such as direct
marketing.
Withdraw Consent: Where we rely on consent, you can withdraw it at any time.
To exercise these rights, please contact us at gasper@altura-medica.si. We
will respond within one month.

Security Measures
We implement appropriate technical and organizational measures to protect
your personal data. However, no system is entirely secure, and we cannot
guarantee absolute security.

Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or
regulatory requirements. Significant changes will be communicated via our
website or other appropriate channels.

Third-Party Websites
Our website may contain links to third-party websites. We are not responsible
for their privacy practices, and we encourage you to review their policies.

Children
Our services are not directed at individuals under the age of 16, and we do
not knowingly collect personal data from them.

Complaints
If you believe your data rights have been violated, you have the right to
file a complaint with your local data protection authority or the Slovenian
Information Commissioner.