Personal data protection policy
Date of publication of the latest version of the policy: April 11, 2019
Personal data controller and contact details
This policy applies to the processing (use) of any personal data by Ekskluzivna darila d.o.o. (operator) or carried out on behalf of the operator.
Operator information:
Ekskluzivna darila d.o.o.
Škofja vas 7, 3211 Škofja vas
Registration number: 6475817000
Telephone: 03 492 40 40
E-mail: info@ekskluzivnadarila.si
Introductory provisions
Exclusive Gifts d.o.o. respects your right to privacy and strives for the highest level of protection of your personal data. Therefore, in providing our services, we are obliged to act in accordance with the laws and regulations defining the protection of personal data, in particular in accordance with the applicable Personal Data Protection Act, the Electronic Communications Act and the EU General Data Protection Regulation (GDPR - General Data Protection Regulation).
Exclusive Gifts d.o.o. undertakes to collect the personal data used in accordance with this Privacy Policy so that we will not sell, lend or in any other way pass on your personal data to third parties, except in cases specified by law.
Procedures for the protection of personal data
In the event that you provide us with any personal information via the website, e-mail, telephone or in any other way, we will respect your privacy in accordance with the GDPR regulation and applicable law. Our data protection policy is as follows:
- inform users exactly how and for what we will use the data,
- this information is not available to third parties;
- we do not rent, sell or allow data about our users to be used by any third party;
- we check and update our databases regularly so that there is as little incorrect data as possible.
Personal data is stored in computer form. Our computer system is protected by technical and organizational measures that prevent accidental or unlawful destruction, loss, alteration, and unauthorized disclosure or access to your personal information.
What personal data we process
- Basic contact information (name, surname, gender - for addressing, telephone number, e-mail);
- Data on the use of our websites (clicks on links, time spent) and data on the response to our e-mails (we only follow the anonymized cumulative percentage of open messages and clicks on links);
- The information we need to fulfill the order and the contract.
Legal basis for the processing of personal data
We process your personal data on the following legal bases:
- when necessary to meet our legal obligations (eg issuing invoices for a purchased service or product);
- when the processing of your personal data is necessary for the conclusion and fulfillment of the contract you have concluded with us or because you have requested an offer from us;
- when you have given your consent to the processing of your personal data for the individual purpose of the processing, and you always have the right to revoke the given consent;
- when we have a legitimate interest in the processing of your personal data.
Purposes of personal data processing
We may use your personal information for one or more of the following purposes:
- communicating with you regarding the provision of our services and responding to your inquiries;
- conclusion of the contract and fulfillment of obligations arising from the concluded contract;
- marketing communication (sending e-mails, regular mail and SMS messages);
- to enforce any legal claims and resolve disputes;
- for statistical analyzes on the sales of our our services and products and on the use of our websites.
All personal information you provide to us will be treated confidentially and will only be used for the purposes for which it was provided. If there is a need for further processing of your data for another purpose, we will ask you in advance for your consent or consent.
Voluntary transmission of data and consequences of non - transmission
The provision of personal data is voluntary. You are not obliged to provide us with personal data, but if you do not provide it, it cannot receive certain services or enter into contracts with us. We will state which data is such that its transmission will have the stated consequences each time we obtain personal data from you.
Who has access to your personal information
We do not provide your personal data or provide information to third parties (outside the company Ekskluzivna darila doo) except those who have a written contract with us, on the basis of which they perform certain tasks related to data processing and are obliged to comply with legislation regarding processing and protection of personal data (so-called contractual processors). The contractual processors to whom we provide personal data are:
- provider of sending e-mails (SqualoMail, Mailchimp);
Contractual processors may only process personal data in accordance with our instructions and may not process personal data for their own purposes. They are committed, together with their employees, to protecting the confidentiality of your personal information. Contractual processors do not export personal data to third countries.
SqualoMail monitors the delivery of sent emails by collecting data on open messages, link clicks, e-mail clients and browsers, approximate location, IP address, logins and logouts, and failed e-mail delivery.
Retention period
Personal data that we process on the basis of your consent are stored permanently or. until you revoke this consent. Data on issued invoices are kept for 10 years from the date of issue. We keep the data necessary for the conclusion and fulfillment of the contract between you and us for 56 years from the fulfillment of the contract. Data on which services or products you bought from us, we keep permanently or. until we receive your request to delete the data. After the retention period, personal data is effectively deleted or anonymised, which means that we process it in such a way that it can no longer be linked to or attributed to you.
Your rights
We will take all reasonable steps to ensure that your information is treated securely, in accordance with this Privacy Policy. You have the right to access the personal information we hold about you and the right to correct or delete your information. You also have the right to restrict the use of your data.
The data subject may at any time request that Exclusive Gifts d.o.o.:
- enable the correction of inaccurate personal data concerning him and enable him to supplement incomplete personal data,
- provide for the right to erasure of personal data (i.e. the right to be forgotten) if the preconditions set out in Article 17 of the General Data Protection Regulation are met,
- give the right to restrict use,
- give the right to object to the processing,
- give the right to data portability and provide it with data in a commonly used and machine-readable form or transmit it directly to another controller,
- provide for the right to withdraw consent where personal data are processed on the basis of consent,
- provide for the right to revoke consent where personal data are processed on the basis of consent, whereby the revocation of consent does not affect the lawfulness of the data processing carried out before its revocation,
- provide additional information on his right of appeal to the competent supervisory authority.
Also, Exclusive Gifts d.o.o. provide the individual, at his request, in accordance with applicable law, with other information relating to his personal data which he processes.
The procedure for exercising rights
You can address your requests regarding the exercise of personal data rights in writing to the contact listed at the top of this document under Personal Data Controller and Contact Data. For the purpose of reliable identification in the case of exercising rights in relation to personal data, we may request additional information from you, and we may refuse to take action only if we prove that we cannot reliably identify you. Exclusive Gifts d.o.o. undertakes to respond to the requests of the data subject without undue delay no later than 15 days from the receipt of the request or at the latest within the legally prescribed deadlines.
Unsubscribe from e-notifications
If you no longer wish to receive notifications of news by e-mail, you can unsubscribe using the automatic unsubscribe link in each e-mail, or send an e-mail with the content "Unsubscribe" to the e-mail address info@ekskluzivnadarila.si.
Changes to the Privacy Policy
We reserve the right to adjust the Privacy Policy in question, if necessary, from time to time to the actual situation and legislation in the field of personal data protection. The applicable Privacy Policy will be published on our website.
This privacy policy was updated on April 11, 2019.
Škofja vas, May 25, 2018
