PROTECTION OF DATA AND PRIVACY

 

At SB Group d.o.o. we pay a lot of attention to the protection of your personal data. We respect your privacy and we protect data carefully and in accordance with applicable laws. We only collect and process your data if we have a legal basis for doing so, and only to extent strictly necessary to achieve the purpose of the processing of personal data.

Below is our contact information as a controller of personal data, information about what personal data we process, on what legal basis, for what specific purposes, to whom we can transfer it, what cookies we use and for what purposes and what are your rights in connection with processing of your personal data.

I.         Who are we and where you can contact us?

Information about us as a data controller:

Company name:

SB Group podjetje za trgovino in posredništvo d.o.o.

Short company name:

SB Group d.o.o.

Headquarters:

Ljubljana

Business address:

Tržaška cesta 202, 1000 Ljubljana

Registration number:

7078021000

Tax number:

SI 36423912

e-mail address:

[email protected]

 

II.         What data do we process, for what purposes, why are we entitled to it, to whom and where do we transfer it and how long do we keep it?

We process your data or data relating to you in different situations for different purposes. In order to make the processing of your personal data as transparent as possible, below we have separated the different situations in which we process your data. For each situation, we have explained what data we process, for what purposes, why are we entitled to it, to whom we transfer the data, how long we store it and other information that is important so that you can understand the nature of the processing of your data.

II.1)     If you visit our online shop

When you visit our website or online shop (hereinafter: "online shop"), we process your data for the purpose of ensuring the safe and efficient operation of the online shop, for the purpose of analysing the behaviour in our online shop in order to improve website functionality and optimize display of our offers, and for the purpose of displaying personalized offers.

a)    Functioning of the online shop  

Our online shop operates on the Shopify platform. The operation of the online shop is enabled with necessary cookies of the Shopify platform set by our domain. Cookies are small text files that we store on your device (computer, mobile phone or tablet) and consequently read from it. These cookies e.g. enable the safe functioning of the online shop, identification and elimination of errors in the operation of the online shop, identification when switching between individual websites of our domain and revisits, which prevents the deletion of your shopping cart, allow you to save your cookie settings, etc. If you disable cookies on your browser, the online shop may not work properly.

Cookies and technologies:

 

Cookie

Purpose and functioning

Duration

Which domain sets the cookie?

 _ab

Used to access the administrator.

One session

www.sailbrace.com

_secure_session_id

It is used to provide the visitor with navigation through the online shop.

1 day

www.sailbrace.com

Cart

They are used to ensure the operation of the online shopping cart.

14 days

www.sailbrace.com

cart

cart_ver

cart_ts

They are used in connection with the operation of the online cash register.

14 days

www.sailbrace.com

cart_sig

 

checkout_token

1 year

checkout

3 weeks

Secret

One session

tracked_start_checkout

1 year

Secure_customer_sig

It is used in connection with the user's login to the account on the website.

20 years

www.sailbrace.com

cookieconsent_status

It tells us whether you have already agreed to the use of cookies or saves your consent.

1 year

www.sailbrace.com

cookieconsent_preferences_disabled

It tells us if you have refused to consent to the use of cookies and saves your decision.

1 year

www.sailbrace.com

__cfduid

The cookie is used for the CDN (content delivery network) service to identify individual customers by a common IP address and to use security settings for each user. The cookie does not correspond to any user ID in the online store and does not store any data on the basis of which the user could be identified.

1 month

www.sailbrace.com

 

  • Information we acquire and process: information about how you access our websites, your account and the Shopify platform, including information about the device and browser you use, your network connection and your IP address.

 

  • Basis for data acquisition and processing: it is in our legitimate interest that we can provide you with a secure and efficient online sales service.

 

  • Data transfer: data is provided to Shopify International Ltd. incorporated in Ireland (2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4 D04 Xn32 Ireland, Dublin 4, Dublin, D04xn32) acting as our data processor. Shopify International Ltd. may process the data for the purposes of providing online shop operation services. As part of providing services, Shopify International Ltd. May transfer data to its sub-processors (a current list of sub-processors is available at the following link: https://help.shopify.com/en/manual/your-account/privacy/GDPR/subprocessors), and the data may also be transferred to other countries, including Canada, on the basis of a Commission adequacy decision, and the United States on the basis of standard contractual clauses. The processor's privacy policy is available at this link: https://www.shopify.com/legal/privacy/customers. Shopify International Ltd. also provides certain information to MaxMind, Inc. incorporated in the United States (14 Spring St # 3, Waltham, MA 02451, United States), which processes personal data as a stand-alone controller in order to provide risk assessments that can detect fraudulent transactions, such processing it also includes automated decision making. If the data is transferred to the U.S., there is a risk that the U.S. authorities will process your data as a result of control and monitoring measures, for which no legal remedies may be available.

 

  • Retention/processing period: the data is retained and processed for the duration of each cookie.

 

b)    Analytics 

We use cookies and other web beacons to analyse behaviour in our online shop. We use cookies and other technologies and process the data based on your consent, which you can actively provide when you visit our online shop. We use the data that we obtain to create statistics and reviews, especially to track the number of visits to our websites or to our individual content, to measure the effectiveness of ads and in order to improve the user's experience and make the content of the online shop even more friendly and interesting and tailored to your needs.

                      i.       Shopify Analytics

  • Cookies and other technologies:

Cookie

Purpose and functioning

Duration

Which domain sets the cookie?

_orig_referrer

They are used to track landing pages.

14 days

www.sailbrace.com

_landing_page

 

 

 

 

_shopify_fs

Cookies are used to perform Shopify analytics.

1 year

www.sailbrace.com

_shopify_s

30 minutes

_shopify_uniq

Midnight (according to the visitor) the next day.

_shopify_visit

30 minutes

_shopify_y

1 year

_y

1 year

_shopify_sa_t

Cookies are used for marketing and referral analytics.

30 minutes

www.sailbrace.com

_shopify_sa_p

 

  • Information we acquire and process: information and details about how you browse our websites and platform, the number of visitors to the online shop, etc., where data such as information about the device and browser you are using, your network connection and your IP address can be processed.

 

  • Basis for data acquisition and processing for analytics purposes: your consent.

 

  • Data transfer: data is provided to Shopify International Ltd., incorporated in Ireland (2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4 D04 Xn32 Ireland, Dublin 4, Dublin, D04xn32) acting as our data processor. Shopify International Ltd. may process data for the purposes of providing analytics services, e.g. regarding the number of visitors to the online shop, about their behavior, etc. As part of providing services, Shopify International Ltd. May transfer data to its sub-processors (a current list of sub-processors is available at the following link: https://help.shopify.com/en/manual/your-account/privacy/GDPR/subprocessors), and the data may also be transferred to other countries, including Canada, on the basis of a European Commission adequacy decision and the United States on the basis of standard contractual clauses. The processor's privacy policy is available at this link: https://www.shopify.com/legal/privacy/customers. Shopify International Ltd. also provides certain information to MaxMind, Inc. incorporated in the United States (14 Spring St # 3, Waltham, MA 02451, United States), which processes personal data as a stand-alone controller in order to provide risk assessments that can detect fraudulent transactions, such processing also includes automated decision making. If the data is transferred to the U.S., there is a risk that the U.S. authorities will process your data as a result of control and monitoring measures, for which no legal remedies may be available.

 

  • Retention/processing period: the data is retained and processed for the duration of each cookie.

 

Google Analytics

  • Cookies and other technologies:

Cookie

Purpose and functioning

Duration

Which domain sets the cookie?

_ga

It is the main cookie used by Google Analytics. A cookie allows the service to separate one user from another. It is used to calculate data about visitors, sessions, campaigns and to monitor the use of the website for the analytical report of the website. The cookie stores data anonymously and assigns a randomly generated number to identify unique visitors.

2 years

www.sailbrace.com

_gid

The cookie allows the service to separate one user from another. The cookie is used to store information about how visitors use the site and helps to create an analytical report on how the site works. The data collected, including the number of visitors, the source, where they come from, and the pages visited are collected in an anonymous form.

24 hours

www.sailbrace.com

_gat

It is used to limit the number of requests on a website.

1 minute or one session

www.sailbrace.com

_utma

It is used to separate users and sessions. In addition, this cookie comes with a unique ID that Google Analytics uses to ensure the validity and accessibility of the cookie as an additional security measure. The cookie is created when javascript is executed and there are no existing _utma cookies. The cookie is updated each time the data is sent to Google Analytics.

2 years

www.sailbrace.com

 

  • Information we acquire and process: online identifiers, including cookie identifiers, internet protocol addresses and device identifiers, customer identifiers.

 

  • Purpose of processing: to calculate data about visitors, sessions and campaigns, to monitor the use of the website, to carry out an analytical report of the website, how visitors use the website, where they come from and how the website works.

 

  • Basis for data acquisition and processing for above described purposes of analytics: your consent.

 

  • Data transfer and processing of the data: Google Ireland Limited, incorporated in Ireland (Google Building Gordon House, Barrow St, Dublin 4, Ireland) acts as our data processor for the purposes of performing analytics, as described above. The company may also transfer data to its sub-processors (a current list of sub-processors is available at: privacy.google.com/businesses/subprocessors). In the event that the data is transferred outside the EEA, Switzerland or the United Kingdom to a country where the appropriate level of protection is not established, the data is provided to Google LLC incorporated in the USA (1600 Amphitheater Parkway, Mountain View, California) under standard contractual clauses. For the purposes of providing the services, Google LLC may also transfer the data to its sub-processors, and the data may also be transferred to countries that do not have an adequate level of data protection under standard contractual clauses. You can read more about how Google processes data at the following link: google.com/policies/privacy/partners/. The privacy policy is available at the following link: https://policies.google.com/privacy?hl=en_US. If the data is transferred to the US, there is a risk that the US authorities will process your data as a result of control and monitoring measures, for which no legal remedies may be available.

 

  • Retention/processing period: the data is retained and processed for the duration of each cookie.

c)    Customized offers and marketing

           i.         Web plugins (AddThis)

  • Cookies and other technologies: the __atuvs and __atuvc cookies, which are used with the AddThis tool to share content in the online shop via social networks. The cookie is set by the domain www.sailbrace.com. The duration of cookies is 2 years. AddThis tools also use other non-cookie tracking technologies, such as pixel tags and device identifiers.

 

  • Data: data such as unique IDs can be processed, e.g. the ID of the cookie in your browser; IP addresses and information derived from IP addresses, such as geographical location; information about your device, such as browser, device type, operating system, presence or use of "applications", screen resolution or desired language; the date and time of the visit to the website; reference URL, etc. Personal information about you may be associated with interest segments or profiles as part of providing AddThis services to customers or partners of Oracle America, Inc..

 

  • Data transfer: We collect and transfer data to Oracle America, Inc. incorporated in the USA (500 Oracle Parkway Redwood Shores, CA 94065 United States) based on your consent, which processes them as a stand-alone controller for various purposes, such as e.g. to enable the functionality of AddThis tools, to enable customers and partners to market these products and services, for targeted marketing etc. Data transfer to Oracle America, Inc. is subject to standard contractual clauses of the European Commission. Oracle America, Inc. may also transfer data to other entities in the group (available at the following link https://www.oracle.com/corporate/contact/global.html#americas) as well as to other partners and customers. About data processing and data retention period by Oracle America, Inc. you can read at the following link: https://www.oracle.com/legal/privacy/addthis-privacy-policy.html. If the data is transferred to the U.S., there is a risk that the U.S. authorities will process your data as a result of control and monitoring measures, for which no legal remedies may be available.

                     ii.       Facebook tools:

  • Cookies and other technologies: we use various Facebook tools for the purposes of targeted marketing of our items and analysis and improvement of marketing, which include the use of cookies and other web tracking technologies (web bacons, pixels, etc.), such as e.g. Facebook JavaScript pixel.

Cookie

Purpose and functioning

Duration

Which domain sets the cookie?

_fbp

The cookie identifies browsers for the purposes of providing advertising and website analytics services. The cookie helps to measure the success of advertising campaigns with Facebook tools.

90 days

www.sailbrace.com

_fr

The cookie is used to display, measure and improve the relevance of ads.

90 days

domain .facebook.com

 

  • Information we acquire and process: information about your device, purchases made, ads viewed, regardless of whether you have a Facebook account and whether you are logged in to Facebook, information about your actions and purchases in the online shop, etc.

 

  • Purpose of processing: the data is processed for the purposes of analytics and measurement (regarding our advertising campaigns, use of services, etc.), conducting targeted marketing on the social network Facebook, creating audiences with similar interests to advertise items, sending personalized marketing and commercial messages and improving ad serving and customization of functions and content.

 

  • Basis for data processing: your consent.

 

  • To whom we provide data: We provide the data to Facebook Ireland Limited incorporated in Ireland (4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland), which processes the data either as our processor (in terms of providing analytics) or with Facebook Ireland Limited operators as joint processors (in relation to the use of advertising tools).

 

  • Data processor: with regard to analytics and measurement services (regarding our advertising campaigns, use of services, etc.), Facebook Ireland Limited acts as our processor. Data may be transferred outside the UK, EU, EEA and Switzerland to sub-processor Facebook Inc. incorporated in the USA. The transfer is based on standard contractual clauses approved by the European Commission. Facebook Inc. may further transfer the data to its sub-processors outside the UK, EU, EEA and Switzerland. If the data is transferred to the U.S., there is a risk that the U.S. authorities will process your data as a result of control and monitoring measures, for which no legal remedies may be available.

 

  • Joint controllership: Joint controllership extends to the collection of personal data through Facebook Business Tools and their further transfer to Facebook Ireland Limited for the purpose of conducting targeted marketing on the social network Facebook, creating audiences with similar interests to which we will advertise items, for the purpose of sending personalized marketing and commercial communications and for the purpose of improving ad serving and customizing features and content.

 

In cases where we act as joint controllers with Facebook Ireland Limited, we have entered into a joint controllership agreement, in which we have defined the respective responsibilities for fulfilling the obligations under the GDPR regarding joint processing. Facebook Ireland Limited is responsible for your rights under Articles 15-20 of the GDPR in relation to personal data that Facebook Ireland Limited stores and processes after joint processing.

 

For more information about how Facebook Ireland Limited processes personal information, including the legal basis on which Facebook Ireland Limited relies and how to enforce your rights against Facebook Ireland Limited, you can find in Facebook Ireland Limited's privacy policy at: https://www.facebook.com/policy.com and in the cookie policy at the link: https://www.facebook.com/policies/cookies/.

 

  • Retention/processing period: data based on cookies is stored and processed for the duration of cookies, and other data for a maximum of 90 days.

II.2)     Processing of personal data when subscribing to E-newsletter

a)    Pop-up window for subscribing to e-newsletter

You can subscribe to our E-newsletter via pop-ups, which are occasionally displayed on our website.

  • Purpose of processing: sending e-newsletter with customized offers, additional discounts, promotions and news; analysis of responses to e-mails (whether the message was open, clicks, etc.) using online tracking technologies for the purposes of managing e-mail campaigns, analysis of their effectiveness and their customization.

 

  • Cookies and technologies:

Cookie

Purpose and functioning

Duration

Who sets the cookie?

_privy_suppress_ID

It tells us if the user has closed the pop-up window.

One session

www.sailbrace.com

_privy_ID

It tells us whether a pop-up window for subscribing to the E-newsletter has been shown to the user.

One session

www.sailbrace.com

 

  • Data: name and surname, telephone number, e-mail address, IP address, device and browser data, etc.

 

  • Basis for processing data: We will process the data on the basis of your consent, which you can actively give when you subscribe to receive E-newsletter. We will also use cookies based on your consent, which allow us to collect data for the purpose of analysis regarding subscribing to E-newsletter through a pop-up window (e.g. IP address, device and browser data).

 

  • Data processor: Privy, Inc. incorporated in the USA (32 Bristol St APT 3 Cambridge, MA, 02141-1989, USA) provides e-newsletter services via a pop-up form, which processes your data as our processor. Privy, Inc. may forward the data for processing to its sub-processors (a list of current sub-processors is available here: https://www.privy.com/data-processing-addendum). The data may be transferred in the USA or another country outside the EEA/EU area, such transfer being based on standard contractual clauses adopted by the European Commission. Regarding how Privy, Inc. processes data when acting as a stand-alone controller, read the privacy policy: https://www.privy.com/privacy-policy. If the data is transferred to the U.S., there is a risk that the U.S. authorities will process your data as a result of control and monitoring measures, for which no legal remedies may be available.

 

  • Retention/processing period: until your consent is revoked.

The data we obtain, we import and manage in the Mailchimp system, so all the information under the next item is also relevant to you.

b)    Other subscriptions to E-newsletter

You can also subscribe to E-news via other channels on the website (form in the footer of the website, as part of the purchase process, etc.).

  • Purpose of processing: to send E-newsletters with customized offers, additional discounts, promotions and news and for carrying analysis of responses to e-mails (whether the message was open, clicks, etc.) using online tracking technologies for the purposes of managing e-mail campaigns, analysis of their effectiveness and their customization.

 

  • Processed data: first and last name, phone number, email address, information about your device such as IP address, operating system, browser ID and other information about your system and connection, your interactions with campaigns (and/or emails) , which may include dates and times for accessing campaigns (and/or emails) and browsing activities (such as which pages you view and which emails you open).

 

  • Technologies: web tracking technologies are used for the purpose of obtaining data regarding your interaction with e-mails, e.g. web bacons technologies.

 

  • Basis for processing data: your consent, which you give when you subscribe to E-newsletter.

 

  • Data processor: The Rocket Science Group LLC d/b/a Mailchimp incorporated in the USA (675 Ponce de Leon Ave. NE, Atlanta, Georgia 30308 USA) processes the data as our processor for the above mentioned purposes. The Rocket Science Group LLC d/b/a Mailchimp may provide the data for processing to its sub-processors (a list of current sub-processors is available here: https://mailchimp.com/legal/subprocessors/). The data may be transferred and processed in the USA or another country outside the EEA/EU area, such transfer being based on standard contractual clauses adopted by the European Commission. If the data is transferred to the U.S., there is a risk that the U.S. authorities will process your data as a result of control and monitoring measures, for which no legal remedies may be available.

 

  • Retention/processing period: until your consent is revoked.

c)    Unsubscribing from E-newsletter

You can unsubscribe from receiving E-newsletter at any time by clicking on the "unsubscribe" link in any e-mail you receive.

II.3)     Processing of personal data during the purchase process

In the event that you wish to make or you make a purchase in our online shop, the processing of your data will be extended in addition to the above described processing, also in the ways listed below.  

As part of the purchase process and after the purchase process, we will process data for the following purposes:

a)    Placing an order, creating a user account for easier submission of further orders, conclusion of a contract and payment realization:

  • Data: contact details such as name, surname, billing address, delivery address, e-mail address, telephone number and payment details (number cards, debit cards, etc.).

 

  • Basis for processing: the conclusion and performance of the contract and our legitimate interest in ensuring the efficient purchase of items.

 

  • Retention/processing period: until the above-mentioned purposes are fulfilled (conclusion of a contract, payment, etc.).

 

  • Data transfer:

 

  • for the purposes of placing an order, creating a user account and concluding a contract, we provide the data to Shopify International Ltd. incorporated in Ireland (2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4 D04 Xn32 Ireland, Dublin 4, Dublin, D04xn32) acting as our data processor. Shopify International Ltd. may process the data for the purposes of providing online shop operation services. As part of providing services, Shopify International Ltd. May transfer the data to its sub-processors (a current list of sub-processors is available at the following link: https://help.shopify.com/en/manual/your-account/privacy/GDPR/subprocessors), and the data may also be transferred to other countries, including Canada, on the basis of a Commission decision on adequacy and with the United States on the basis of standard contractual clauses. The processor's privacy policy is available at the following link: https://www.shopify.com/legal/privacy/customers. If the data is transferred to the U.S., there is a risk that the U.S. authorities will process your data as a result of control and monitoring measures, for which no legal remedies may be available.

 

  • for the purpose of enabling you to use the PayPal payment service, certain data may be provided to PayPal (Europe) S.a.r.l. et CIE, S.C.A. and it's subsidiaries or branches that process the data as independent controllers who determine the purposes of the processing themselves. The privacy policy is available at the following link: https://www.paypal.com/si/webapps/mpp/ua/privacy-full?locale.x=sl_SI#Services.

 

  • for the purposes of enabling you to pay by credit card, we use the services of Braintree and we provide the data to the company PayPal (Europe) S.a.r.l. et CIE, S.C.A. and its related companies and branches, which process the data as independent controllers and themselves determine the purposes of processing. The privacy policy is available at the following link: https://www.paypal.com/si/webapps/mpp/ua/privacy-full?locale.x=sl_SI#Services.

b)    Delivery of goods and execution of the contract

  • Data: contact details such as name, surname, delivery address, e-mail address, telephone number, purchase or order information.

 

  • Basis for processing: performance of the contract, a legitimate interest in enabling the effective execution of orders and the execution of the contract.

 

  • Data transfer:

 

  • we provide data to partners for the supply and delivery of items, namely:

 

 

  • to the company GENERAL LOGISTICS SYSTEMS, logistične storitve d.o.o., Cesta v Prod 84, 1000 Ljubljana, which itself determines the purposes of data processing and is therefore considered a data controller. The data controller's privacy policy is available at https://gls-group.eu/EN/sl/politika-zasebnosti. The data is provided to GENERAL LOGISTICS SYSTEMS, logistične storitve d.o.o. via the XConnector platform operated by Infoquest SRL, Calea Calarasilor Nr 319, Braila, Romania. Infoquest SRL acts as our data processor for the purpose of providing data for delivery to GENERAL LOGISTICS SYSTEMS, logistične storitve d.o.o.
  • for the purposes of issuing and sending invoices to you, MetaKocka d.o.o., Tehnološki park 24, 1000 Ljubljana, as a provider of an online solution for managing and sending accounting and business data, may gain access to some of your data to a limited extent as our processor.

 

  • Retention/processing period: until the above purposes are met (delivery of goods, etc.).

c)    Resolving complaints and answering your questions and requests, keeping accounting and business records, performing internal control and improving support services, and protecting legal claims

  • Data: contact details (name, surname, telephone, e-mail), order data, content of conversations through various channels (e-mail, facebook messenger, etc.).

 

  • Basis for processing: the basis for processing complaints and other claims relating to purchased items is our legitimate interest in dealing with your complaints and other claims in accordance with the law and answering questions and providing proof of their receipt and resolution. We also process data based on a legitimate interest to exercise internal control over the timely and regular fulfilment of your requirements and to improve the order processing system and customer claims and relationships, thereby improving our customer support services.

 

  • Data transfer: we process the data using Gorgias Inc.'s customer relationship management system, which is incorporated in the USA (34 Harriet St, San Francisco, CA 94103, United States), and acts as our processor. If the data is transferred to the U.S., there is a risk that the U.S. authorities will process your data as a result of control and monitoring measures, for which no legal remedies may be available. For the purposes of issuing and sending invoices and keeping accounting and business records, the company MetaKocka d.o.o., Tehnološki park 24, 1000 Ljubljana, as a provider of an online solution for managing accounting and business data, may gain access to some of your data to a limited extent as our processor. We also transfer your data to external accounting services that provide accounting services for us, which act as independent controllers of personal data.

 

  • Retention/processing period: we store and process the data for the above mentioned purposes for as long as the statutory and contractual deadlines for asserting claims stipulate. In any case, we process and store the data in order to protect legal claims and maintain our internal records and controls for another year after the expiry of the statute of limitations, should the claim be enforced at the end of the statute of limitations. In the case of legal, administrative or other proceedings, we process your personal data for the period necessary for the duration of such proceedings and for the remaining period of limitation after its completion. Our legitimate interest in this case is to protect legal claims and control the regular performance of our services.

II.4)     Processing of personal data for fulfilment of legal obligations

We can also process your contact and identification data and order data when this is necessary to fulfill legal obligations, e.g. from the following regulations: Obligations Code (OZ), Consumer Protection Act (ZVPot), Value Added Tax Act (ZDDV-1), Accounting Act (ZR), Fiscal Validation of Receipts (ZDavPR), Electronic Communications Act (ZEKom-1), Companies Act (ZGD-1), etc. In these cases, we may transfer the data to external partners, such as accounting services.

For this purpose, we use personal data for a maximum of 10 years after the last issued document regarding your order.

III.         Cookie setting management

You can change your cookie settings at any time by clicking on the "Manage cookie settings" icon. You may need to refresh the page for the settings to take effect. Most web browsers also provide some control over most cookies through browser settings. You can find out how to manage cookies in browsers on the browser provider's website.

IV.         What rights do you have in relation to the processing of your data?

You may exercise the following rights with respect to your information:

  • right to access to your personal data: we hope that in this document we have provided you with all the necessary information you need regarding the processing of your data. However, if you still have any questions, please contact us and we will be happy to give you all the necessary explanations and make all the information available.

 

  • right to rectification: we strive to keep accurate and complete information at all times. In the event that we unintentionally keep inaccurate or incomplete information, you have the right to request that we correct and/or supplement it.

 

  • right to erasure: in some cases you have the right to request the deletion of your personal data. We will delete your personal information as soon as possible if any of the following reasons are met:

 

  • we no longer need your personal data for the purposes for which we processed them;
  • you have withdrawn your consent to the processing of personal data, in relation to the processed data, for which your consent is necessary, and at the same time we have no other reason to further process this data;
  • you have exercised your right to object to the processing of personal data that we process on the basis of our legitimate interest, and we recognize that we no longer have legitimate interests that would justify the further processing of this data, or
  • you assume that the processing of personal data that we carry out is no longer in accordance with generally binding legal regulations.

 

  • right to restriction of processing: In some cases, in addition to the right to erasure, you may also exercise the right to restrict the processing of personal data. We must limit the processing of personal data:

 

  • if you challenge the accuracy of personal data, until we reach an agreement on which data is correct;
  • if we process your personal data without an appropriate legal basis (e.g. above the intended scope), instead of deleting such data, you will give priority to their limitation (e.g. if you assume that you will still want to provide this data to us in the future);
  • if we no longer need your personal information for the purposes described above, but you need it to determine, execute or defend your legal claims, or
  • if you object to the processing of data.

 

  • right to data portability: you can request from us all your personal data that you have provided to us and that we process on the basis of your consent and on the basis of the implementation of the contract. We will provide you with personal data in a structured, stable and machine-readable form. You have the right to request that personal data be transferred directly from us to another controller when technically feasible.

 

  • right to object to the processing of data: based on the reasons related to your special situation, you have the right to object to the processing of personal data that is based on our legitimate interests. In any case, you always have the right to object to the processing of data for the purposes of direct marketing. We will immediately stop processing your data for marketing activities; in other cases, we will do the same if we do not have legitimate reasons for processing that outweigh your rights or to enforce legal claims.

 

  • right to withdraw consent: you also have the right to withdraw consent for processing in cases where we process data on the basis of your consent.

 

In any case, you have the right to file a complaint with the Information Commissioner, the Slovenian supervisory body responsible for data protection (Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si). However, we would appreciate it if you could contact us before filing a complaint, as we are confident that together we will be able to address your concerns or concerns regarding the processing of your personal information.

V.         How can you exercise your rights with us?

If you have a question or would like to exercise your rights, simply email us at [email protected]. We will try to respond to your request as soon as possible, and within one month at the latest.