PERSONAL DATA PROTECTION: Statement from the Controller to the Individual regarding the Processing of Personal Data
In our company, we are aware of the value of your personal data, and therefore, we strive every day to ensure appropriate processing of your personal data. The statement from the controller to the individual regarding the processing of personal data informs you about all the latest developments and the importance in the field of protecting your personal data.
Please carefully read the following statement before giving your consent to the processing of personal data. We assure you that your personal data will be processed in accordance with the latest standards and legislation in the field of personal data protection.
What are personal data
Personal data are any data relating to a specific individual, meaning a person, depending on the form in which they are expressed. These are data based on which you can be identified.
Examples of personal data include: ID number, tax number, health insurance number, phone number, vehicle registration number, personal bank account number…
Special categories of personal data are data about an individual that reveal their racial or ethnic origin, political opinions, religious or philosophical beliefs, or membership in a trade union, as well as the processing of genetic data, biometric data for the purpose of unique identification of an individual, data concerning health, or data concerning an individual’s sexual orientation, sex life, data about convictions…
How and for how long will we retain your personal data?
Personal data collected based on your explicit consent will be stored in an electronic or physical collection of personal data.
Collected personal data may be kept in the collection of personal data until the withdrawal of your consent to the processing of personal data or for as long as necessary to achieve the purpose for which your personal data are processed or to meet legal requirements.
All collections of personal data will be carefully protected with the latest technical security measures.
Processing and use of your personal data
In accordance with the Regulation, the company may manage, collect, and process your personal data only:
based on your explicit written or electronic consent
if the collection of your personal data is necessary to conclude a contract with you
if the collection of personal data is required by applicable law (e.g., regarding data on an issued invoice).
For what purposes do we process personal data
The company manages, collects, and processes your personal data for which your explicit and written consent is required only within the framework of the purposes for which the data were provided to us.
We undertake not to lend or sell your personal data to a third party without prior notice and obtaining your explicit written consent, and we will not process them in any other way that is incompatible with these purposes.
Withdrawal of consent for the processing of personal data
You have the right to withdraw your consent to the processing of personal data for one or all purposes of personal data processing with which you have agreed at any time.
Send a written statement to withdraw your consent to the processing of personal data to our address or to the email address available on our website.
In the event of your withdrawal of consent to the processing of personal data, the company will delete all collected personal data and immediately cease processing them.
Your rights in the field of personal data protection
The new regulation grants you numerous rights in the field of personal data protection, including:
The right to erasure/forgetting and correction of inaccurate personal data
You have the right to request that the controller correct or supplement inaccurate or incomplete personal data concerning you.
You have the right to request immediate erasure of personal data concerning you that are being processed.
In case of correction, supplementation, or deletion of personal data, the controller must notify you of the correction, supplementation, or deletion without delay.
Right to restriction of processing of personal data
You have the right to request that the controller restrict the processing of your personal data in case of their inaccuracy, unlawfulness, cessation of the purpose of processing, or filing an objection.
Right to data portability
You have the right to request the controller to provide you with personal data processed concerning you.
You have the right to request the controller to provide another controller with personal data processed concerning you upon your request.
Right to object
In addition to the right to withdraw consent, in case of using your personal data for the purposes of informing or direct marketing, you can at any time request in writing the cessation of the use of your data for this purpose. In case of objection to processing for marketing purposes, the controller will immediately cease processing your personal data for marketing and information purposes.
All rights can be requested with a written request or to the controller. Send your request by mail to our address or to the email address available on our website.
Right to access personal data concerning you
You have the right to obtain confirmation from the controller whether personal data concerning you are being processed and access to personal data concerning you and the following information: the purpose of processing, the type of personal data concerning you, the users of your personal data, the intended period of personal data retention, the source of personal data.
Personal data protection breach
In the event of a breach of the protection of your personal data and if it is found that such a breach could pose a significant risk to your rights and freedoms, we will immediately notify you of this.
In case of a breach of the protection of personal data, we will notify the competent authority of the breach of the protection of your personal data without undue delay, but no later than 72 hours after becoming aware of the breach of the protection of your personal data.
Right to lodge a complaint
You have the right to lodge a complaint against the controller in case of a breach of the protection of personal data with the competent supervisory authority at the following address: Information Commissioner, Zaloška 59, 1000 Ljubljana or at: gp.ip@ip-rs.si.
Important information regarding the processing of your personal data
We undertake to process all collected data only within the listed purposes of management or processing of personal data and in accordance with the Personal Data Protection Act and other relevant sectoral legislation as well as in accordance with Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data (GDPR).