PERSONAL DATA PROTECTION: Declaration by the controller to the data subject on the processing of personal data
At our company, we understand the value of your personal data and we work every day to ensure that we can process your personal data appropriately. The Data Controller's Privacy Notice informs you about all the new developments and important aspects of the protection of your personal data.
Please read the following statement carefully before giving your consent to the processing of your personal data. We assure you that your personal data will be processed in accordance with the latest standards and legislation in the field of personal data protection.
What are personal data
Personal data are any data relating to a specific natural person, i.e. an individual, whatever the form in which they are expressed. They are data from which you can be identified.
Examples of personal data are: ID number, tax number, health insurance number, telephone number, vehicle registration number, personal transaction account number, etc.
Specific types of personal data are data concerning an individual which reveals his or her racial or ethnic origin, political opinions, religious or philosophical beliefs or trade-union membership, and the processing of genetic data, biometric data for the purposes of uniquely identifying an individual, data concerning health or data concerning an individual's sexual orientation, sex life, criminal convictions, etc.
How and for how long will we store your personal data?
The personal data we collect on the basis of your explicit consent will be stored in an electronic or physical personal data file.
The personal data collected may be stored in the personal data file until your consent to the processing of your personal data is withdrawn or for no longer than is necessary to achieve the purpose for which your personal data is being processed or to comply with legal requirements.
We will carefully protect all personal data collections using the latest technical security measures.
Processing and use of your personal data
In accordance with the Regulation, your personal data may only be managed, collected and processed by the company:
on the basis of your explicit written or electronic consentif the collection of your personal data is necessary in order to conclude a contract with youif the collection of personal data is required by an applicable law (e.g. in respect of information contained in an invoice).
For what purposes we process personal data
Your personal data, for which your explicit and written consent is required, is managed, collected and processed by the company only within the scope of the purposes for which the data was provided to us.
We undertake not to lend or sell your personal data to any third party without prior notice to you and obtaining your express written consent and to not process it in any other way incompatible with these purposes.
Withdrawal of consent to the processing of personal data
You have the right to withdraw your consent to the processing of your personal data at any time for one or all of the purposes for which you have consented to the processing of your personal data.
You can withdraw your consent to the processing of personal data by sending a written statement to our address or to the email address available on our website.
In the event of your withdrawal of consent to the processing of personal data, the Company will delete all personal data collected and will immediately cease to process it.
Your rights in the area of personal data protection
The new Regulation brings you a number of rights in the area of personal data protection, including:
The right to erasure/deletion and rectification of inaccurate personal data
You have the right to ask the controller to rectify or complete inaccurate or incomplete personal data concerning you.
You have the right to request from the controller the immediate erasure of personal data processed in relation to you.
In the event of rectification, amendment or erasure of personal data, the controller must inform you without delay of the rectification, amendment or erasure.
Right to restriction of processing of personal data
You have the right to request the controller to restrict the processing of your personal data in the event of inaccuracy, unlawfulness, cessation of the purpose of the processing or objection.
Right to data transmission
You have the right to request the controller to transmit to you the personal data it processes concerning you.
You have the right to request the controller to transfer the personal data it processes concerning you to another controller at your request.
Right to object
In addition to the right to withdraw consent, if your personal data is used for information or direct marketing purposes, you may at any time request in writing that we stop using your data for this purpose. If you object to processing for marketing purposes, the controller will immediately stop processing your personal data for marketing and information purposes.
You can request all your rights by writing to the controller or to the controller. You can send your request by post to our address or to the email address accessible on our website.
Right of access to personal data relating to you
You have the right to obtain confirmation from the controller as to whether personal data relating to you is being processed and access to personal data relating to you and the following information: the purpose of the processing, the type of personal data relating to you, the users of your personal data, the intended retention period of the personal data, the source of the personal data.
Personal data breach
In the event of a breach of your personal data protection and in the event that such a breach of personal data protection would be likely to result in a high risk to your rights and freedoms, we will notify you without delay.
In the event of a personal data breach, we will notify the competent authority without undue delay and at the latest within 72 hours of becoming aware of the personal data breach.
Right to appeal
You have the right to lodge a complaint with the competent supervisory authority in the event of a personal data breach against the controller at the following address: Informacijski pooblaščenec, Zaloška 59, 1000 Ljubljana or: .
Important information regarding the processing of your personal data
We undertake to process all collected data only within the scope of the listed purposes of the management or processing of personal data and in accordance with the Personal Data Protection Act and other relevant sectoral legislation, as well as in accordance with Regulation (EU) 2016/679 on the protection of natural people with regard to the processing of personal data and on the free movement of such data (GDPR).