PERSONAL DATA PROTECTION

Statement of the Controller to the Individual regarding the Processing of Personal Data

In our company, we are fully aware of the value of your personal data, which is why we work hard every day to guarantee that the processing of your personal data is carried out appropriately. Statement of the Controller to the Individual regarding the Processing of Personal Data informs you about all the new features and important information concerning personal data protection.

Please, read the Statement carefully before agreeing to the processing of your personal data. We assure you that your personal data will be processed in accordance with the latest data protection standards and data protection legislation.

What is personal data

Personal data is any information, regardless of their form, that relates to a particular individual. This means information, on the basis of which this individual could be identified.

Examples of personal data: social security number, tax identification number, health insurance number, telephone number, vehicle registration number, personal bank account number, etc.

Special categories of personal data are information about an individual that reveal the race, ethnicity, political, religious or philosophical beliefs, including union membership, genetic and biometric data for the purpose of uniquely identification, health, sex life and sexual orientation information, information on convictions....

How and for how long will your personal data be stored?
Personal data, collected under your explicit consent, will be stored in an electronic or physical collection of personal data

The collected personal data may be stored in the collection of personal data until the withdrawal of your consent or for the maximum time needed to fulfil the purpose for which your data is processed or to fulfil legal obligations.

All the collections of personal data will be carefully secured with the latest technical security means.

Processing and use of your personal information

In accordance with the Regulation, the company may only manage, collect and process your personal information:

  • under your explicit written or electronic consent
  • if collection of your personal data is necessary in order to conclude a contract with you
  • if collection of personal data is required under the current legislation (e.g. data on the issued invoice).

Purposes for which we process your personal data

The company manages, collects and processes your personal data, for which an explicit and written consent is required, only for the purposes for which the data was provided.

We undertake not to lend or sell your personal data to any third party without prior notice and without obtaining your explicit written consent, and not to process your data in any way which is not compliant with these purposes.

Withdrawal of consent for the processing of personal data

You have a right to withdraw your consent to the processing of personal data for one or all the purposes of the processing of personal data to which you consented.

The written statement of withdrawal of consent to the processing of personal data can be sent on our address or on our e-mail address which is listed on our website.

In case of your withdrawal of consent to the processing of personal data, the company will immediately erase and cease to process all the collected personal data concerning you.

Your rights regarding personal data protection

The new regulation grants you many rights concerning personal data protection, which are:

Right of erasure/right to be forgotten and right to rectify inaccurate personal data

You have the right to require the controller to rectify or complete inaccurate or incomplete personal data concerning you.

You have the right to require the controller to immediately erase personal data which are being processed concerning you.

In case of rectification, completion or erasure of your personal data, the controller must notify you, without delay, about the rectification, completion or erasure of your personal data.

Right to restriction of personal data processing

You have the right to require the controller to restrict the processing of your personal data in case of their inaccuracy, unlawfulness, cessation of the processing purpose, or a lodged appeal.

Right to portability of your personal data

You have the right to require the controller to provide you with personal data concerning you, which the controller processes.

You have the right to require the controller to transmit the personal data concerning you, which the controller processes, to another controller.

Right to object

In addition to the right to withdrawal of consent, in case of processing of personal data for the notification purposes or direct marketing purposes, you have the right to require, in written form, the controller to cease the use of your personal information for such purposes. In case of an objection to the processing of personal data for marketing purposes, the controller shall immediately cease to process your personal data for such purposes.

You may request all the aforementioned rights in written form or directly to the controller. Send the request by mail on our address or by electronic mail on the e-mail address which is listed on our website.

Right of access to personal data concerning you

You have the right to obtain from the controller confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information: the purposes of the processing; the categories of personal data concerned; the recipients and users of your personal data; the envisaged period for which the personal data will be stored; the source of your personal data.

Personal data breach

In the case of a personal data breach, and in the case that the personal data breach is likely to result in a risk to your rights and freedoms, we shall notify you of the breach immediately.

In case of a personal data breach, we shall, without undue delay, notify the competent authority, not later than 72 hours after having become aware of the personal data breach.

Right to object

You have the right to lodge a complaint against the controller in case of a personal data breach, which you can lodge with the competent supervisory authority on the following address: Information Commissioner, Zaloška 59, 1000 Ljubljana, or: gp.ip@ip-rs.si.

Important information regarding the processing of your personal data

We undertake to process all the collected data only for the aforementioned purposes of processing or controlling personal data, and in compliance with the Personal Data Protection Act and with any other legislation concerning personal data as well as in accordance with with the Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (GDPR).