Find clothing made from real materials. Filter by fiber, not marketing. Learn how we score →
materialfilter

Privacy Policy

Last updated: 5 June 2026

This Privacy Policy explains how Mikoshi d.o.o. ("we," "us," "our") collects, uses, and protects personal data when you visit https://materialfilter.com (the "Site"). We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and the Slovenian Personal Data Protection Act (Zakon o varstvu osebnih podatkov, "ZVOP-2").

If you have any questions about this Policy or how we handle your data, contact us at [email protected].

1. Who is responsible for your data (Data Controller)

The data controller responsible for your personal data is:

Mikoshi d.o.o. (družba z omejeno odgovornostjo / d.o.o.) Registered office: Bogišićeva ulica 2, 1000 Ljubljana, Slovenia Company registration number (matična številka): 9606742000 VAT ID: SI35674393 Email: [email protected]

We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 GDPR. For any data protection matter, please use the contact email above.

We collect only the data needed to operate the Site, understand how it is used, and link you to the clothing merchants we feature. The table below summarises each category of processing.

Data we process Why we process it Legal basis Retention
Server log data (IP address, browser and device type, operating system, timestamp, pages requested, referrer) To operate, secure, and troubleshoot the Site and prevent abuse Legitimate interests (Art. 6(1)(f)) — running a secure website Up to 30 days
Analytics data via Google Analytics 4 (GA4) To understand aggregate traffic trends and improve the Site Consent (Art. 6(1)(a)) Up to 14 months
Affiliate referral data (a click identifier and technical identifiers generated when you click a link to a merchant) To attribute purchases you make on a merchant's site so we may earn a commission Consent for any storage or reading of information on your device (ePrivacy); affiliate networks process the click data on their own legal basis as independent or joint controllers Set by the relevant affiliate network
Information you submit through our contact form or by email (e.g. name, email address, message) To respond to your enquiry Consent and/or steps taken at your request prior to entering into a contract (Art. 6(1)(a)/(b)) Up to 24 months
An email address you give us to receive updates (for example, a launch or newsletter sign-up) To send you the updates you have asked for Consent (Art. 6(1)(a)), which you may withdraw at any time Until you unsubscribe or ask us to delete it

We do not sell your personal data, and we do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

3. Cookies and similar technologies

The Site uses cookies and similar technologies. Strictly necessary cookies (for example, the cookie that remembers your consent choices) are used without consent because the Site cannot function without them. Analytics cookies are only set after you give consent through our cookie banner. Affiliate cookies are set by third parties on their own sites when you click out to a merchant — they are governed by those parties' policies and you can manage them through your browser.

For full details of every cookie, its purpose, duration, and provider, and to learn how to change or withdraw your consent at any time, see our Cookie Policy.

4. Who we share data with (Recipients)

We share personal data only with the following categories of recipients:

  • Our hosting provider, Hetzner Online GmbH (Germany), which stores and serves the Site on our behalf as a processor.
  • Our analytics provider, Google LLC, which provides Google Analytics 4. We have IP-address anonymisation enabled.
  • Our email provider, Proton AG (Switzerland), which processes emails you send to, or receive from, our contact address.
  • Our newsletter provider, MailerLite, which stores your email address and delivers our email updates on our behalf as a processor when you sign up. We use double opt-in confirmation, and you can unsubscribe at any time using the link in every email.
  • Affiliate networks and merchants we work with, which receive and process click and referral data when you click an affiliate link. These parties act as independent or joint controllers and process your data under their own privacy policies.
  • Public authorities or professional advisers, where we are legally required to disclose data or need to establish, exercise, or defend legal claims.

We do not sell or rent your personal data to third parties for their own marketing.

5. International data transfers

Some of our recipients are located outside the European Economic Area (EEA).

  • Switzerland (our email provider, Proton AG) is recognised by the European Commission as providing an adequate level of data protection, so transfers there are covered by that adequacy decision.
  • Where a recipient is in the United States and certified under the EU–U.S. Data Privacy Framework (DPF), the transfer is covered by the European Commission's adequacy decision of 10 July 2023. Google LLC is certified under the DPF.
  • Where no adequacy decision applies, we rely on the European Commission's Standard Contractual Clauses (SCCs), which the relevant providers incorporate into their terms, together with any additional safeguards required.

You may request a copy of the relevant safeguards by emailing [email protected].

6. How we protect your data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. In particular:

  • All data transmitted between your device and the Site is encrypted in transit using TLS (HTTPS).
  • Our infrastructure is hosted within the European Union (Hetzner, Germany), and our email is handled by an end-to-end encrypted provider (Proton, Switzerland).
  • Access to personal data is restricted to those who need it to operate the Site, and is protected by access controls.
  • We do not collect or store any payment card details — all purchases take place on third-party merchant websites.

No method of transmission or storage is completely secure, so while we work to protect your data, we cannot guarantee absolute security.

7. Your rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you;
  • Rectify inaccurate or incomplete data;
  • Erase your data ("right to be forgotten");
  • Restrict processing in certain circumstances;
  • Object to processing based on our legitimate interests;
  • Data portability — receive your data in a structured, commonly used, machine-readable format;
  • Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, email us at [email protected]. We will respond within the timeframes required by law.

You also have the right to lodge a complaint with the Slovenian supervisory authority:

Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec) Dunajska cesta 22, SI-1000 Ljubljana, Slovenia Web: www.ip-rs.si

8. Is providing data mandatory?

Providing personal data is not a statutory or contractual requirement. You are not obliged to provide it, although some features of the Site (for example, the contact form or analytics-dependent improvements) may not work as intended without certain data.

9. Children

The Site is not directed to children. We do not knowingly collect or process the personal data of children under the age of 15. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version. Where changes are material, we will take reasonable steps to bring them to your attention.

11. Additional Disclosures for U.S. Residents

This section supplements the Policy above for residents of U.S. states that have comprehensive consumer privacy laws, including California (CCPA/CPRA), Virginia, Colorado, Connecticut, and others.

Categories of personal information we collect. Identifiers (such as IP address and device or cookie identifiers); internet or other electronic network activity (such as pages viewed and interactions with the Site); and any information you choose to submit to us (such as your name and email address).

Purposes. We use this information to operate and secure the Site, to measure aggregate traffic, and to track affiliate referrals so we may earn commissions.

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law.

Your rights. Subject to your state's law, you have the right to know about and access the personal information we collect, to request deletion, to request correction, and — where applicable — to opt out of the sale or sharing of your personal information. To exercise any of these rights, email us at [email protected]. We will not discriminate against you for exercising your rights.