Personal data protection
Protecting your privacy is important to Klin d.o.o. We therefore wish to provide you with this information to help you understand what personal data we collect, why we collect it, how we use it, what processing activities we perform, and what rights you have and how you can exercise them.
1. General information
Klin d.o.o., IOC Zapolje cesta I / 30, SI-1370 Logatec (hereinafter: the controller), is aware of the importance of protecting personal data and has aligned this area with the EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR).
The primary goal of the controller is to provide you with first-class service and ensure your optimal satisfaction. The collection and processing of certain personal data allow the controller to respond more quickly and effectively to your needs and preferences, while also providing you with more efficient communication and an improved user experience.
The controller carefully stores and protects your personal data to prevent any unauthorized disclosure to third parties.
2. Personal data
Under the GDPR, the term “personal data” means any information relating to an identified or identifiable natural person.
The controller collects and processes only the personal data you provide when registering for a specific service (such as subscribing to the newsletter or filling out the form for a non-binding inquiry). This personal data includes: first and last name, company, phone number, email address, and IP address.
If you submit data on behalf of another person, you must ensure that this person has been informed beforehand and is familiar with this privacy policy. If you are under 16 years of age, you may only submit personal data with the permission of a parent or legal guardian.
The controller asks you to inform them of any changes to your contact details to ensure that the data remains up-to-date.
3. Personal data protection
The controller uses and processes personal data in accordance with the applicable Slovenian legislation and European Union law.
As the data controller, the controller respects your privacy and is committed to carefully protecting all collected personal data, neither sharing it with third parties nor using it for purposes other than those for which the personal data was provided, without your consent.
Personal data collected by the controller from you may be shared with third parties, provided that a legal basis for the disclosure exists (your explicit consent or a legal requirement).
All your personal data is stored on secure servers of the controller or on secure servers of the controller’s contractors or business partners (or in secure paper form), with the controller’s security policies and standards applied whenever these data are accessed or used.
Although complete protection against cyberattacks cannot be guaranteed when data is transmitted over the Internet or via the website, the controller, together with its contractors and business partners, makes every effort to implement physical, electronic, and procedural safeguards to protect your data in accordance with applicable data protection requirements.
The controller has restricted access to your data to those individuals who require it for the specific purpose.
4. Personal data storage period
The personal data storage periods depend on the legal basis and the purpose of processing for each category of personal data. Personal data is stored only for as long as required or permitted and as necessary to achieve the purpose for which it was collected or further processed. Once the processing purpose has been fulfilled, personal data is deleted, destroyed, blocked, or anonymised, unless another legal basis exists or storage is necessary for asserting, exercising, or defending legal claims.
5. Your rights
You have the right:
- to request that the controller provide you with further details on how your data is being used;
- to access your personal data and obtain copies of the data you have provided to the controller;
- to receive the personal data you have provided to the controller in a structured, commonly used, and machine-readable format, and the right to transmit these data to another controller without hindrance, insofar as this is technically feasible, when the processing of your data is based on your consent or a contract and is carried out using automated means;
- to request that the controller correct any inaccuracies in the stored data;
- to request that the controller delete all data for which there is no longer a legal basis for processing;
- when the processing is based on your consent and relates to direct marketing, to withdraw your consent with effect for the future, so that the controller ceases this processing;
- to object to any processing based on legitimate interests due to your particular circumstances, unless the controller’s reasons for this processing override your privacy rights;
- to request that the controller restrict the way your data is used, for example, while a complaint is being investigated.
Certain exceptions apply when exercising these rights to protect the public interest (e.g., preventing or detecting crimes), the interests of the controller (e.g., ensuring confidentiality), or the rights and freedoms of others. When you exercise any of these rights, the controller will verify your entitlement and respond without undue delay, and at the latest within one month. In complex cases or when a large number of requests are received, this period may be extended by an additional two months, in which case the controller will inform you.
You have the right at any time to lodge a complaint with the data protection supervisory authority: Information Commissioner, Zaloška 59, SI-1000 Ljubljana. Website: www.ip-rs.si..
6. Controller
The controller of your personal data is Klin d.o.o., IOC Zapolje cesta I / 30, 1370 Logatec.
The contact address for the protection of your personal data is info@klin-dimniki.com.