Sign up for the GOBA® Newsletter
Find out more about medicinal mushroom supplements, cultivation and products for pets.
[mc4wp_form id="268"]
*I declare that I have read and accept the General Terms and Conditions.
No products in the cart.
No products in the cart.
INFORMATION ON PERSONAL DATA PROTECTION
INTRODUCTION
At MycoMedica d.o.o. (hereinafter referred to as the company or controller), we pay great attention to the protection of personal data.
The personal data protection information describes the grounds and purposes for collecting and using personal data, the processing methods, the legal bases for processing it and what your rights are in relation to the data we hold about you and how to exercise them.
By using the https://goba.eu/ website, you acknowledge and agree to be bound by the General Terms and Conditions and the Privacy Notice published on this website, as applicable from time to time.
If we ask you for any information that can be used to identify you in the course of using this website, we assure you that it will be used in accordance with applicable law.
We undertake not to sell, lend or otherwise disclose your personal data to third parties, except as required by law.
The Company may change the content of this Information, so please check it from time to time to ensure that you agree to any changes.
PERSONAL DATA CONTROLLER
Data controller of the data collected through the website https://goba.eu/ is a company:
MycoMedica d.o.o., Podkoren 72, 4280 Kranjska Gora
e-mail address: orders@goba.eu
gsm: 030 666 969
MycoMedica d.o.o. is the owner and provider of the online shop https://goba.eu/.
THE GROUNDS FOR PROCESSING THE DATA
We process your personal data for different purposes and to different extents:
THE BASIS FOR PROCESSING PERSONAL DATA:
PURPOSES OF PROCESSING OF PERSONAL DATA
1. Processing on the basis of legitimate interest
When you visit our website or order/purchase products from our online shop www.goba.eu, we may process data on the basis of legitimate interest for the following purposes:
We work:
2. Processing of data based on the performance of a contract
In the cases described below, the lawful basis for the processing of personal data arises from the purpose of your wishing to enter into a distance contract with us for the purchase of our products. In these cases, we obtain and process the data on the basis of a contractual obligation:
We work:
If you make a purchase as an agent of a legal person, we process the same data for the same purpose on the basis of our legitimate interest based on the conclusion and performance of a contract with the legal person you represent.
If you do not want to provide information based on the contractual relationship, this will not have consequences for you, but may make it difficult or impossible to participate and conclude a contract.
3. Processing of data pursuant to law or regulation
We also process data for the purposes of compliance with legal and regulatory obligations, in particular:
In these cases, we can process:
4. Processing based on unambiguous consent
Unambiguous consent is of a voluntary nature. If you do not wish to give it, or if you subsequently withdraw it, this shall in no way prejudice any other rights arising from the business relationship with the company and shall not constitute an additional cost or aggravating circumstance.
We process data obtained through unambiguous consent for the following purposes:
We process on the basis of unambiguous consent:
We do not condition your participation in or use of our services on your consent to the processing of personal data, unless this is logically connected with or required for the provision of the service.
In the event that you do not consent to the processing of your personal data, or you give your consent partially, or you withdraw your consent (partially), we will, as far as possible, only cooperate with you to the extent of the consent given or in the ways permitted by applicable law.
You can withdraw your unambiguous consent to the processing of your personal data at any time by clicking on the “UNSUBSCRIBE” link in the email or SMS message, deleting the tracking cookies or by sending us an email at orders@goba.eu.
The withdrawal of consent shall not affect the lawfulness of the processing carried out on the basis of the consent up to the moment of withdrawal.
COMMUNICATION WITH CUSTOMERS
Customers may communicate with the company through various channels, in particular telephone calls, emails, chat rooms and social networks. In such cases, we process personal and contact data and records of communications between us on the basis of our legitimate interest (i.e. without your consent) for the purposes of:
MARKETING COMMUNICATION AND ADVERTISING
The company carries out marketing communications about its own products, discounts, novelties, personalised offers and other content of an educational or promotional nature through different channels, with different persons and on different bases (legitimate interest, contract or unambiguous consent).
If you visit the website and consent to cookies being placed on your device (see COOKIES), these cookies will process certain technical and personal data in an automated way (depending on the type of consent, e.g. number of visits, average visit time, pages visited).
Data processing based on unambiguous consent may be automated and may include profiling for the purpose of personalising the content of commercial communications and optimising the display of advertisements.
The implementation of advertising activities using the tools and services of our advertising partners is carried out in an automated manner and may result in the creation of user profiles by our advertising partners, which collect, analyse and link certain indicators of the economic situation, interests and behaviour of our customers on our website and elsewhere on the web for the purposes of better displaying advertisements and tailoring marketing communications (e.g. linking your visit to our website, the demographic data from your Facebook profile and the interests you disclose on this social network for the purposes of displaying our advertisements, linking your visit to our website to your visits to other websites and the products you have purchased for the purposes of displaying advertisements, linking the fact that you have opened a marketing message you have received and clicked on a link and made a purchase for the purposes of tailoring the offer in the next marketing communication).
You can withdraw your unambiguous consent to the processing of your personal data at any time by clicking on the “UNSUBSCRIBE” link in the email or SMS message, deleting the tracking cookies or by sending us an email at orders@goba.eu.
RETENTION PERIOD OF PERSONAL DATA
Individual categories of personal data will be kept until the purpose for which they were collected has been fulfilled or in accordance with the legal provisions:
Personal data shall be erased, destroyed, blocked or anonymised after the purpose of the processing has been fulfilled.
WHO PROCESSES YOUR PERSONAL DATA
As the controller, we process the data for our own purposes. However, in certain cases, we pass on your data to regulatory authorities and to our contractual data processors.
Employees of MycoMedica d.o.o.
Employees process the personal data they need to do their job. All employees are committed to confidentiality and respect for the protection of personal data.
National authorities
Under applicable law, the company is also required to disclose or report your personal data to the competent national supervisory authorities (e.g. the Financial Administration of the Republic of Slovenia, the Courts, the Office of the Information Commissioner of the Republic of Slovenia, the Market Inspectorate of the Republic of Slovenia, etc. ). V določenih primerih mora podjetje podatke posredovati tudi tretjim osebam, če takšno obveznost posredovanja oziroma razkritja podjetju nalaga zakon oziroma pravno upravičenje tretje osebe.
Contract processors of personal data
Users of personal data are also contractual data processors who may process confidential personal data solely on behalf of and under the authority of the company and within the limits of the external processing contract that the company has with each such processor. They may not use the data to pursue any of their own interests. The processors are:
The company will not disclose your personal data to unauthorised third parties without your consent, unless this information is requested by a competent government authority on the basis of a legal basis or in the event of suspected business abuse by the website user.
More detailed information on categories of users, contractual processors and data exports can be obtained by sending a request to orders@goba.eu.
TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES AND INTERNATIONAL ORGANISATIONS
As a general rule, the company does not transfer personal data to third countries and international organisations. An exception to this is the occasional transfer of certain technical and personal data to the servers of contractual processors whose headquarters or servers are located in third countries (e.g. the automatic transfer of certain data collected by Google Inc.’s cookies and tracking pixels, entering email addresses in commercial messaging tools, etc.), provided that the contractual processors concerned are former members of the Privacy Shield programme (https://www.privacyshield.gov ) and, after 12 July 2020, have complied with and adopted all the security measures with regard to the receipt or transmission of data deemed appropriate at the time of drafting this document.
SHOWCARDS
We use cookie technology on our website, which is indicated by a notification window when you visit our online shop. Cookies are small files that are downloaded to your computer or mobile device when you visit a website. Cookies are not software and are not harmful to your devices.
The legal basis for cookies is the Electronic Communications Act (ZEKom-1), which describes the rules regarding the use of cookies and similar technologies to store and access information stored on a user’s computer or mobile device.
The cookie notification window alerts you to the fact that cookies are being downloaded which are not mandatory for the normal functioning of the website:
The use of cookies makes it faster and easier to use the website. By using cookies, your preferences and experience are saved, making your browsing experience more efficient and enjoyable.
We use cookies to store information about the state of the website, to help us provide online commerce services, to collect statistics about the use and traffic of the website, about the habits of online users, etc.
Why and which cookies do we use on our website?
Mandatory cookies: enable basic functions of this website, such as ensuring a secure login or customising your consent settings. These cookies do not collect any personal data.
| The Pistachio | Duration | Description |
| wpEmojiSettingsSupports | session | The WordPress cookie helps to determine whether a user’s browser is displaying emojis correctly. |
| Cookieyes-consent | 1 year | The CookieYes cookie saves users’ consent choices so that their preferences are taken into account on subsequent visits to the website. It does not collect or store personal data from visitors. |
| Rc::a | permanent | Google recaptcha sets a bot-recognition cookie to protect your website from malicious spam attacks |
| Rc::c | session | Google recaptcha sets a bot-recognition cookie to protect your website from malicious spam attacks |
| Rc::b | session | Google recaptcha sets a bot-recognition cookie to protect your website from malicious spam attacks |
| _GRECAPTCHA | 6 months | Google recaptcha sets a bot-recognition cookie to protect your website from malicious spam attacks |
Optimisation cookies: used to understand and analyse key performance indicators of a website to help provide a better user experience for visitors
| Cookie | Duration | Description |
| SRM_B | 1 year, 24 days | It is used by MS Advertising as a unique visitor ID. |
Analytical cookies: used to collect and analyse information about how visitors use the website. They help to collect information about the number of visitors, the level of visits to each page, the source of traffic… and to improve the user experience. Analytical cookies collect information in an anonymous form.
| Cookie | Duration | Description |
| CLID | 1 year | MS Clarity uses a cookie to store information about a user’s activity on the website and to help provide an analytics report. The information includes the number of visitors, where they visit the website and which pages they visit. |
| sbjs_migrations | session | Sourcebuster uses a cookie to identify the source of the visit and stores the user’s activities in cookies. This analytics and behavioural cookie is used to improve the user experience on the website. |
| sbjs_current_add | session | Sourcebuster uses a cookie to identify the source of the visit and stores the user’s activities in cookies. This analytics and behavioural cookie is used to improve the user experience on the website. |
| sbjs_first_add | session | Sourcebuster uses a cookie to identify the source of the visit and stores the user’s activities in cookies. This analytics and behavioural cookie is used to improve the user experience on the website. |
| sbjs_current | session | Sourcebuster uses a cookie to identify the source of the visit and stores the user’s activities in cookies. This analytics and behavioural cookie is used to improve the user experience on the website. |
| sbjs_first | session | Sourcebuster uses a cookie to identify the source of the visit and stores the user’s activities in cookies. This analytics and behavioural cookie is used to improve the user experience on the website. |
| sbjs_data | session | Sourcebuster uses a cookie to identify the source of the visit and stores the user’s activities in cookies. This analytics and behavioural cookie is used to improve the user experience on the website. |
| sbjs_session | 1 hour | Sourcebuster uses a cookie to identify the source of the visit and stores the user’s activities in cookies. This analytics and behavioural cookie is used to improve the user experience on the website. |
| _click | 1 year | MS Clarity sets the cookie to retain the Clarity browser user ID and settings that are exclusive to this website. This ensures that actions performed during subsequent visits to the same website will be associated with the same user ID. |
| _press | 1 day | MS Clarity sets this cookie to store and aggregate the user’s page views into a single snapshot of the session. |
| Pys_session_limit | 1 hour | The PixelYourSite plugin sets a cookie to manage analytics services. |
| pys_start_session | session | The PixelYourSite plugin sets a cookie to manage analytics services. |
| pys_first_visit | 7 days | The PixelYourSite plugin sets a cookie to manage analytics services. |
| pysTrafficSource | 7 days | The PixelYourSite plugin sets a cookie to manage analytics services. |
| pys_landing_page | 7 days | The PixelYourSite plugin sets a cookie to manage analytics services. |
| last_pysTrafficSource | 7 days | The PixelYourSite plugin sets a cookie to manage analytics services. |
| last_pys_landing_page | 7 days | The PixelYourSite plugin sets a cookie to manage analytics services. |
| SM | session | MS Clarity sets this cookie to synchronise MUIDs between Microsoft domains. |
| MR | 7 days | Bing sets a cookie to collect data about users for analytics purposes. |
| _ga_* | 1 year 1 month 4 days | Google Analytics sets this cookie to store and count page views. |
| _ga | 1 year 1 month 4 days | Google Analytics sets this cookie to calculate visitor, session and campaign data and to monitor website usage for an analytics report. It anonymises the data obtained and assigns it a randomly generated number to identify unique visitors. |
Advertising cookies: used to serve personalised ads to visitors based on the pages they have previously visited and to measure the performance of advertising campaigns.
| Cookie | Duration | Description |
| MUID | 1 year 24 days | Bing sets a cookie to identify unique web browsers that visit MS websites. It is used for advertising, site analytics and other operations. |
| ANONCHK | 10 min | Bing sets a cookie to store the user’s session ID and check clicks in Bing search. The cookie also helps with reporting and personalisation. |
Uncategorized cookies: are cookies that are being analysed and have not yet been classified in any category
| Cookie | Duration | Description |
| Woocommerce_recently_viewed | session | WooCommerce uses this cookie to save the activities performed on the website |
Cookies linked to social media plug-ins of social networks and services (Facebook, Instagram, etc.): plug-ins use cookies so that social networks can identify their members when they come to a website with a plug-in.
You can also contact us via our social media channels via the commenting, messaging and chat functions. The information collected in this way will be processed solely for the purpose of dealing with your comment, question or request.
We treat our social media accounts, shared content and interactions with visitors on the basis of legitimate interests.
Our website uses Facebook and Instagram plugins. When you visit our website, the plugin establishes a direct connection between your browser and the Facebook and Instagram server. When using our website, data from your device can be directly transferred to the social network operator (Facebook, Instagram) via the plugin. We have no influence on the data collected by the plugin.
If you are logged in to these social networks, your use of the Service can be linked to your account on the social networks. If you have interactions with the plugins, for example by liking, following or sharing, or by entering a comment, the information may be automatically displayed in your social network profile. Even if you are not logged into your social network account, it is possible that plug-ins send your IP address to social network operators. Please keep this in mind when using our services.
We have no influence on the nature, scope and purpose of the processing of your data by the social network service provider.
You can find out more about the collection and processing of your data in the privacy policies of social network service providers, which are available at:
Facebook: https://www.facebook.com/about/privacy/
Instagram: https://help.instagram.com/519522125107875/
Managing and deleting cookies
If you wish to change the way cookies are used in your browser, including blocking or deleting them, you can do so by changing your browser settings accordingly. Most browsers allow you to accept or (partially) reject cookies, or warn you that the site wants to store a cookie. You can easily delete stored cookies.
We reserve the right to direct users of our websites to other sites on the World Wide Web, but we do not accept any responsibility for the content of those sites.
THE RIGHTS OF THE INDIVIDUAL WITH REGARD TO THE PROCESSING OF PERSONAL DATA
As a data subject, the GDPR gives you the following rights:
You have the right to obtain confirmation from the data controller as to whether personal data concerning you are being processed and, where this is the case, to request access to the personal data concerned, together with the information referred to in Article 15(1) of the GDPR:
Where personal data is transferred to a third country or an international organisation, you, as the data subject, have the right to be informed of the appropriate safeguards in accordance with Article 46 of the GDPR in respect of such transfer.
The data controller must provide you with a copy of the personal data being processed. It may charge you a reasonable fee, taking into account administrative costs, for additional copies you request.
Where the data subject makes the request by electronic means and unless the data subject requests otherwise, the information shall be provided in an electronic format which is commonly used.
As a data subject, you have the right to request the data controller to rectify your inaccurate personal data without undue delay.
Subject to the purposes of the processing, you have the right to have incomplete data completed, including by submitting a supplementary declaration to orders@goba.eu.
As a data subject, you have the right to have your personal data erased by the controller without undue delay.
The controller will also erase personal data without undue delay where one of the following grounds applies:
(a) the personal data will no longer be necessary for the purposes for which they were collected or otherwise processed;
(b) withdrawal of consent to the processing of personal data and there is no other basis for the processing;
(c) where the data subject objects to the processing of personal data and there are no overriding legitimate grounds for the processing,
(d) where the personal data have been unlawfully processed;
(e) if the personal data must be erased in order to comply with a legal obligation under EU or RS law,
(f) where the personal data have been collected in connection with an offer of the undertaking’s services made to a person under the age of 15 years without the consent of that person’s guardian.
However, in accordance with Article 17(3) of the GDPR, you do not have the right to erasure of personal data processed by the company in certain cases (e.g. where the company processes the data for the establishment, exercise or defence of legal claims).
As an individual, you have the right to request that the controller restrict the processing of personal data where one of the following applies:
(a) where you contest the accuracy of the data, for a period which allows the company to verify the accuracy of the personal data;
(b) where the processing is unlawful and you request a restriction on the use of the data instead of erasure;
(c) where the controller no longer needs the personal data for the purposes of the processing, but you need them for the establishment, exercise or defence of legal claims;
(d) where you raise an objection to processing and until it has been verified whether the legitimate grounds of the controller override your own.
Where the processing of personal data has been restricted, such personal data shall, with the exception of their storage, be processed only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for important public interest reasons relating to the EU or the RS.
As an individual, you have the right to receive personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format, and you have the right to have that data transmitted to another controller without hindrance from the controller, where:
(a) the processing is based on consent or on a contract; and
(b) the processing is carried out by automated means.
In exercising that right to data portability, you as an individual have the right to have personal data directly transferred from one controller to another, where technically feasible.
As a data subject, you have the right, on grounds relating to your particular situation, to object at any time to processing of personal data concerning you where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the company, or where the processing is necessary for the legitimate interests pursued by the undertaking or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child. The above also applies to profiling in such cases of processing.
In the event of an objection, the controller shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, including profiling, insofar as it is related to such direct marketing.
Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for those purposes.
In the context of the use of the Enterprise Services, and notwithstanding Directive 2002/58/EC, you, as the data subject, may exercise the right to object by automated means using technical specifications.
Where data are processed for scientific or historical research purposes, or for statistical purposes, the data subject shall have the right to object, on grounds relating to his or her particular situation, to processing concerning him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
WITHDRAWAL OF CONSENT
If you, as an individual, have voluntarily consented to the processing of your personal data for certain purposes, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing of the data carried out on the basis of your consent up to the time of withdrawal.
You may restrict or withdraw your consent to data processing at any time by contacting us at orders@goba.eu.
In the event of withdrawal of consent or partial consent, the controller reserves the right, as far as possible, to cooperate with you only to the extent of the consent given or in the ways permitted by applicable law.
Withdrawal of consent shall not have any negative consequences or sanctions and shall not affect any other rights of the individual arising from the business relationship with the company or from the GDPR.
After withdrawing consent to the processing of personal data, the controller may no longer be able to provide certain services to the data subject where these are linked to personal data.
DATA PROTECTION
At MycoMedica d.o.o., we carefully store and protect personal data against accidental or intentional unauthorised access, destruction, alteration or loss, as well as against unauthorised disclosure or any other form of processing to which you have not explicitly consented.
To this end, the controller has adopted appropriate internal processes and put in place various measures (e.g. assigning, using and changing passwords, locking premises, offices, and the locations of servers and workstations, regular updating of supporting software and upgrading of security-protected components, physical protection of material containing personal data in designated areas, training of employees, etc.). The controller also requires the same security commitments from its contractual processors.
PROCESSING OF PERSONAL DATA OF PERSONS UNDER THE AGE OF 16 AND PERSONS WITH LIMITED OR NO LEGAL CAPACITY
Children under the age of 16 or persons with limited or no legal capacity may provide us with personal data through our websites only with the permission (consent) of their parents or guardians.
The company does not knowingly offer the products offered in the online shop of the website to persons under the age of 16 or to persons with limited or no legal capacity and does not knowingly process any personal data relating to them.
If the company subsequently becomes aware that it is processing the personal data of a minor or a person with reduced or deprived legal capacity without the consent of the minor’s parent or guardian, it shall immediately take all necessary measures to delete the personal data provided.
If the parents or guardians of a minor or a person with reduced/deprived legal capacity become aware that their child/guardian is using the online shop or has voluntarily provided the company with personal data, they may notify the company and request the deletion of the personal data via orders@goba.eu.
APPEAL TO A SUPERVISORY AUTHORITY
If you suspect that the processing of your data is in breach of data protection law, you can lodge a complaint with:
Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, e-mail: gp.ip@ip-rs.si telephone: 00 386 (0)1 230 97 30, website: www.ip-rs.com .
FINAL PROVISIONS
We may update this General Data Protection Information from time to time to better reflect changes in data protection or for other operational and legal reasons.
The data protection information is valid and applicable from 01.11.2024.
Find out more about medicinal mushroom supplements, cultivation and products for pets.
*I declare that I have read and accept the General Terms and Conditions.
For those who want not just quick fixes, but a lasting balance. For those who understand that health is not a goal, but a way of life. Those who are not just looking for a dietary supplement, but a companion on the road to wellness. Because sometimes the smallest things make the biggest changes. A 5% discount awaits you on your first purchase – as a small thank you for your trust.