NOTICE TO INDIVIDUALS PURSUANT TO ARTICLE 13 OF THE GENERAL DATA PROTECTION REGULATION (GDPR) CONCERNING THE PROCESSING OF PERSONAL DATA WHEN DEALING WITH IGK-VAR D.O.O. OR VISITING https://igkvar.si/
INFORMATION ABOUT THE CONTROLLER OF YOUR PERSONAL DATA:
IGK-VAR, Production, Services Ltd.
Pod Bregom 52
3313 Polzela
Registration number: 9353321000
Tax number: SI 30298890
E-mail address: info@igkvar.si
Telephone: +386 51 8888 98
represented by Mr Ivan Groza, Director
(hereinafter referred to as: the Company)
The Company is the provider of the website https://igkvar.si/ (hereinafter collectively referred to as the “Website”)
There is no data protection officer specifically appointed by the company.
Overview of the legal basis and purposes of the processing of personal data, and what data is processed:
1.1. On the basis of negotiating or concluding a contract with you:
We process personal data for the following purposes:
(a) the performance of contracts (e.g. the purchase of our product, its delivery, installation or servicing) to which the company and the purchaser of our product are parties. In these cases, we mainly process:
– the customer’s basic data (name and surname) and contact details (email address and possibly also telephone number), invoicing and delivery data (date and place of purchase, product purchased, price, total amount of purchase, method of payment/delivery, address, city, country, delivery/postal code/invoicing address, order number and date, etc.).
However, a contractual legal basis for the processing of personal data also exists where the processing is necessary, for example, to carry out measures at the request of the customer prior to the conclusion of the contract, or where the processing involves the transmission of information arising out of and in connection with a contractual relationship, such as:
b) negotiating and communicating with you about the product you are interested in (e.g. when you contact us prior to purchase via telephone or email addresses published on the “Contact” subpage or on our business cards, calendars, flyers and other promotional materials), in which case we process in particular:
– the customer’s basic data (name and surname) and contact details (e-mail address and possibly telephone number), insofar as they have provided them to us for this purpose, and for the purposes of
c) sending information related to the contractual relationship (e.g. to communicate with the customer regarding product recalls, additional instructions, etc.), where we process mainly the data listed under point 1.b).
In the cases described above, you provide us with personal data as part of a contractual obligation (e.g. by purchasing our product) and we consequently do not need your explicit consent to process your personal data.
If, in certain cases of processing of personal data based on a contractual relationship with you, you do not provide the data, this will in principle not have consequences for you. However, such a situation may make it difficult or even impossible for us to cooperate with you (e.g. a company may have problems delivering a product), in which case you will be informed in advance.
1.2. By law or regulation:
We also process personal data for the purposes of compliance with laws and regulations, in particular those governing tax and accounting (e.g. records of invoices issued and received, etc.), for example, where the company processes the personal data of a customer to whom it has issued an invoice for the purchase of a product, where the company processes the customer’s data (e.g. personal name, contact details, etc.) on the invoice on the basis of the Law on Value Added Tax (ZDDV-1).
1.3. On the basis of your explicit consent:
We may also process your personal data on the basis of your explicit consent. Express consent is considered to be a voluntary declaration of will by which an individual consents to the processing of certain personal data for a specific purpose, e.g.:
– marketing communications with persons who are not yet our customers / persons who have subscribed to our newsletter (e.g. if we have obtained your explicit consent for this purpose at our event, in our office, on a website form, at a trade fair, via your business card, etc.), where we process in particular the data of the person who has given consent (name and surname) or his/her contact details (email address and possibly also telephone number) for the purpose of sending advertisements and other marketing communications. Such communications can be cancelled at any time by following the link contained in the email or by contacting us at info@igkvar.si or by calling +386 51 8888 98
– Online advertising to persons who have consented to the setting of optional (advertising) cookies by our advertising partners (e.g. the setting of a Google Analytics cookie to make it easier for us to advertise our products to you on other websites, etc.). A detailed description of the optional cookies of our advertising partners, the data we process with them and the retention period of these data is defined on the “Cookies” subpage – https://igkvar.si/piskotki/.
The Company provides the individual with the right to withdraw the explicit consent (consent) at any time by simply contacting us at info@igkvar.si or by calling +386 51 8888 98 (see section 5.1 of this General Data Protection Information for more information).
Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.
In the event that you do not consent to the processing of your personal data, or you give your consent partially, or you withdraw your consent (partially), we will, as far as possible, only cooperate with you to the extent of the consent given or in the ways permitted by applicable law.
Consent is given voluntarily and if you decide not to give consent or subsequently withdraw consent, this shall in no way prejudice your other rights under the business relationship with the company or constitute any additional costs or aggravating circumstances for you.
Photography and filming at our events and trade fair appearances
If we host public events and performances, we are not required by law and Information Commissioner’s practice to obtain specific personal consents from attendees to take photographs. In all such cases, i.e. where our events are public and we will be filming or photographing at them, all participants will be duly informed in advance and will receive all necessary information in this respect.
Any photographs and recordings of the event will be published on the company’s website, bulletin boards or social networks, or in newsletters, as well as on the portals and channels of media companies that have expressed an interest in publishing such content, and in the company’s publications and other promotional activities. The photographs will always relate to the event in general and not to individual participants. If you wish to remove published photographs in which you are the subject of the image, please let us know as soon as possible at info@igkvar.si.
If photographs or recordings may include images of persons under the age of 15, the photographs and recordings will only ever include images of such persons whose parents or legal guardians have given their explicit consent.
1.4. On the basis of the legitimate interests of the company
We may process certain personal data for the purposes of safeguarding our legitimate interests, e.g.:
– for example, where processing your data would be necessary to protect our business against potential fraud, or necessary in light of inspection procedures or civil or other proceedings, we will only process the data that is strictly necessary to pursue this legitimate aim of the company,
– video surveillance of the entrances to the company’s business premises and the surroundings of the company’s outbuildings,
– The regulations also allow us to process personal data for the purposes of marketing communication with existing customers * (e.g. to send a promotional offer to a person who was once a customer of our product), where we process mainly the contact details of the existing customer (name, surname and email address).
*This communication can be cancelled at any time by following the link contained in the email or by contacting us via email at info@igkvar.si or by calling us on +386 51 8888 98
1.5. For the purposes of protecting the vital interests of individuals
The Company may also process personal data of an individual to the extent that the processing is necessary for the protection of the vital interests of the individual or of another natural person (e.g. to access the address of an individual who is in imminent and serious danger in connection with a product/service purchased from us).
How long do we keep or process your personal data?
The period of retention of personal data depends on the basis and purpose of the processing of each category of personal data. Personal data is kept for as long as it is necessary for the fulfilment of the purpose for which it was collected or as long as a regulation requires us to keep it, e.g.:
– personal data of customers on invoices are kept for 10 years from the date of invoice, as this obligation is imposed on the company by the Value Added Tax Act (VAT Act-1),
– for example, on the basis of a contract concluded for the purchase of a product, the data will be processed at least for the duration of the guarantee, or for six years after the termination of the contractual relationship (for example, if the retention is necessary because there is a dispute between the individual and the company, etc.),
– on the basis of your explicit consent to marketing communications or our legitimate interest to advertise to persons who are not yet our customers, we retain the data until such person withdraws consent,
– in the case of your attendance at our workshops and trade fair events, for example those co-financed by European Union cohesion funds, we may retain your data for 10 years from the date on which the reported cost of the event in question has been certified by the European Commission, for the purposes of proving the performance and attendance of the event,
Personal data will be deleted, destroyed, blocked after the purpose of the processing has been fulfilled.
Who processes your personal data within and outside the company (personal data users)?
3.1. Certain employees of the company
Your personal data is processed by specific employees of the company. Employees of the company process only the personal data they need for their work, and may also share personal data with each other to the extent permitted by their job description and the company’s internal rules. All employees are committed to confidentiality and to respecting the protection of personal data.
3.2.
In certain cases prescribed by applicable law, the company must also provide or report your personal data to the competent state authorities, as well as to the authorities responsible for financial, tax or other control (e.g. the Financial Administration of the Republic of Slovenia, the courts, the Office of the Information Commissioner of the Republic of Slovenia, the Market Inspectorate of the Republic of Slovenia, etc.). It must also be provided to third parties if such provision or disclosure is required by law or by the General Regulation on the Protection of Personal Data.
3.3. Contractual processing of personal data
In addition to the Company’s employees, the users of personal data are also employees of the Company’s contract processors, who may process the entrusted data exclusively on behalf of the Company and within the limits of the contract for external processing of personal data that the Company has concluded with each such processor. The contract processors may only process the personal data within the scope of the instructions of the company as the controller of the personal data and may not use the data for the pursuit of any of their own interests.
The contractual processors with which the company cooperates are:
– persons who work with us as authorised dealers or distributors and repairers of our products
persons who work with us on the basis of other sub-contracts or author’s contracts (e.g. legal and other consultants),
– a hosting provider (see section 3.4.1),
– an accounting service,
– IT system maintainers.
The Company will not pass on your personal data to unauthorised third parties.
3.4. Cooperation with advertising partners, hosting provider and newsletter service provider.
We share certain technical information and other data that we record about visitors in relation to their interaction with our website using cookie technology (see section 4. Cookies) with our advertising partners:
– Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (services: Google Analytics / Remarketing for Google Display Advertising / Google Tag Manager /Google DoubleClick) (https://policies.google.com/technologies/ads?hl=en-US)
– Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (services: visitor action pixel (FB Pixel) (https://www.facebook.com/policies/cookies/)
Setting advertising cookies enables our advertising partners to serve relevant ads to visitors on all the devices or browsers they use.
A detailed description of the data collected for these purposes, the cookies that make this possible, the services involved, as well as the data retention period and the possibility of removing each cookie, can be found at https://igkvar.si/piskotki/.
3.4.1 Hosting provider
The hosting of our website and the storage of the data you provide to us via the website (e.g. in connection with communication via the contact form on the website) is provided by a provider:
– Avant.Si Services and Trade d.o.o., Poslovna zona A 49, 4208 Šenčur, (https://www.neoserv.si/politika-zasebnosti).
3.4.2. Service provider for sending ‘newsletters’.
The provider of the “Amazon SES” e-mail service (“newsletter”), within which the e-mail addresses of those individuals who have expressly consented to such processing may be stored (see point 1.3.), is:
– Amazon.com Services LLC., 410 Terry Ave N, Seattle, WA, 98109-5210, whose servers are located in the United States of America (https://aws.amazon.com/privacy/).
3.5 Transfer of personal data to third countries and international organisations
The Company does not export personal data to third countries (outside the Member States of the European Economic Area – EU Member States plus Iceland, Norway and Liechtenstein) and international organisations, except to the USA (see Section 3.4.), whereby all US contract processors are included in the Privacy Shield programme (https://www.privacyshield.gov/welcome).
Cookies
For a list of cookies and to manage your cookie settings, please visit https://igkvar.si/piskotki/.
Cookies are small text files that most modern websites store on the devices of visitors, i.e. people who use their devices to access a particular website on the Internet.
We also use cookie technology on our website, which is indicated by a cookie pop-up on your first visit.
The pop-up window also alerts you to the fact that the uploading of our cookies, which are not mandatory (e.g. saving settings, adjusting display dimensions to the device, etc.), is in view of the normal functioning of the website:
– subject to the visitor’s explicit consent (click on the “upload optional cookies” button on the first visit to the website); and,
– under the visitor’s full control, since the visitor may restrict or disable the storage of cookies in the browser used and may remove the cookies uploaded at any time, in accordance with the instructions available at the link https://igkvar.si/piskotki/.
A detailed description of the data collected for these purposes, the cookies that make this possible, the services involved, as well as the duration of the data retention and who is the provider of each cookie or service, can be found at https://igkvar.si/piskotki/.
- What are your rights regarding your personal data and how can you exercise them?In relation to this general information about the processing of personal data or the processing of your personal data by our company and our contractual processors, you can contact us without any reservation by email at info@igkvar.si or by phone at (+386) 031880188.
You may also use the above address to send your requests and exercise other rights related to personal data and the General Data Protection Regulation.You may submit your requests in a way that allows you to be identified, by filling in the form provided for the exercise of each individual right, which is published on the website https://www.ip-rs.com/obrazci/varstvo-osebnih-podatkov/, or by other documented means (e.g. oral request on the record over the telephone, written request by electronic or physical mail).
5.1. Right to withdraw or partially withdraw consent
If you, as an individual, have consented to the processing of your personal data for one or more specific purposes (see section 1.3 of this General Information on the Processing of Personal Data), you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing of the data carried out on the basis of the consent until its withdrawal.
Your consent to the processing of your personal data for the purposes we have described in this information is voluntary. You may restrict or withdraw your consent to data processing at any time by contacting us at info@igkvar.si or by calling +386 51 8888 98.
Even after withdrawal of your consent, the Company will only process the data that it is required to process in order to comply with its legal obligations, to perform a contract with you (e.g. without which we cannot fulfil your order), or to pursue its legitimate interests.
Right of access to personal data
As an individual, you have the right to obtain confirmation from the company as to whether personal data is being processed in relation to you and, where this is the case, to obtain access to personal data and certain information: the purposes of the processing, the types of personal data, the users, the retention periods or the criteria for determining the periods, the existence of the right to rectification or erasure, the right to restrict and object to processing and the right to lodge a complaint with a supervisory authority, the source of the data, if the data was not collected from you, the existence of automated decision-making, including profiling, the reasons for it and the meaning and consequences of such processing for you, and other information in accordance with Article 15. Article 15 of the General Data Protection Regulation.
Right to rectification of personal data
As an individual, you have the right to have inaccurate personal data concerning you rectified by the Company without undue delay. As an individual, you have the right, taking into account the purposes of the processing, to have incomplete data completed, including by submitting a supplementary declaration.
5.4. Right to erasure of personal data (“right to be forgotten”)
As an individual, you have the right to have personal data relating to you erased by the company without undue delay, and the company will erase the data without undue delay, regardless of your request, where one of the following reasons applies:
(a) the data are no longer necessary for the purposes for which they were collected or otherwise processed,
(b) where you withdraw your consent and there is no other legal basis for the processing,
(c) you object to processing and there are no overriding legitimate grounds for processing,
(d) the data have been unlawfully processed,
(e) the data must be erased in order to comply with a legal obligation under EU law or the law of a Member State to which the provider is subject,
(f) the data have been collected in connection with the provision of information society services.
However, as an individual, you do not have the right to erasure in certain cases described in Article 17(3) of the GDPR.
5.5. Right to restriction of processing
As an individual, you have the right to have a company restrict its processing of your personal data where one of the following applies:
(a) if you contest the accuracy of the data for a period that allows the company to verify the accuracy of the data,
(b) the processing is unlawful and you object to the erasure of the data and instead request the restriction of its use,
(c) the company no longer needs the data for the purposes of the processing, but you need the data to assert, exercise and defend legal claims,
(d) you have raised an objection to processing pending verification that the legitimate grounds of the company outweigh your grounds.
Right to data portability
As an individual, you have the right to receive personal data relating to you that you have provided to the company in a structured, commonly used and machine-readable format, and you have the right to have that data transferred to another controller without hindrance from the company to which the personal data have been provided, where:
(a) the processing is based on consent or on a contract; and
(b) the processing is carried out by automated means.
In exercising that right to data portability, you as an individual have the right to have your personal data directly transferred from one controller (e.g. company) to another, where technically feasible.
Right to object to processing
As an individual, you have the right, on grounds relating to your particular situation, to object at any time to processing of personal data which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the company (point (e) of paragraph 1 of Article 6(1) of the GDPR). Article 5(1) of the GDPR) or is necessary for the pursuit of legitimate interests pursued by the company or by a third party, including profiling based on that processing; the company shall cease processing the personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where personal data are processed for marketing purposes, the data subject shall have the right to object at any time to processing of data concerning him or her for marketing purposes, including profiling insofar as it is related to such direct marketing, provided that where the data subject objects to processing for direct marketing purposes, the data shall no longer be processed for those purposes.
Where data are processed for scientific or historical research purposes, or for statistical purposes, the data subject shall have the right to object, on grounds relating to his or her particular situation, to processing concerning him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
5.8. Right to lodge a complaint with the supervisory authority
Without prejudice to any other (administrative or other) legal remedy, you have the right as an individual to lodge a complaint with a supervisory authority, in particular in the country where you are habitually resident, where you work or where the alleged infringement took place (in Slovenia, the Information Commissioner), if you consider that the processing of personal data relating to you infringes data protection rules:
– Information Commissioner, Dunajska 22, 1000 Ljubljana, e-mail: gp.ip@ip-rs.com, telephone: 012309730, website: www.ip-rs.com.
Protection of your personal data
We carefully store and protect personal data by means of organisational, technical and logical measures.
technical procedures and measures to protect against accidental or intentional unauthorised access, destruction, alteration or loss, as well as unauthorised disclosure or other processing to which you have not explicitly consented.
To this end, the company has also adopted appropriate internal processes and put in place various measures (e.g. assigning, using and changing passwords, locking premises, offices, and the locations of servers and workstations, regularly updating support software and upgrading security-protected components, physically securing material containing personal data in designated areas, training employees, etc.). The company also requires the same security commitments from its contractual processors.
Automated processing and consent-based profiling
The company does not process personal data by automated means and does not use automated profiling.
Processing of personal data of persons under 15 years of age and persons with reduced or deprived legal capacity
In the development of the company’s website, we have respected the principle of minimisation of personal data, which means that the company does not collect the year of birth of visitors to the website (e.g. when a visitor interacts with the website, fills in a contact form, etc.). As a result, the company does not have a way of economically and efficiently verifying in this case whether a visitor to the website is a person under 15 years of age or a person who has limited or deprived legal capacity to act.
Consequently, the company does not knowingly offer its content and products to persons under the age of 15 or whose legal capacity is limited or suspended and does not knowingly process any personal data relating to them, and does not knowingly offer free access to events, workshops and products that may be harmful to children.
If the parents or legal guardians of a person under the age of 15 or of a person with limited or no legal capacity become aware that their child or ward has provided personal data to the Company, they may notify the Company and request the deletion of such personal data at info@igkvar.si.
In the case described above, or if the company itself subsequently discovers that it is processing the personal data of a person under the age of 15 or a person with limited or deprived legal capacity without the consent of the parent or legal guardian, the company will take all necessary steps to delete all personal data of such persons that it has provided to the company.
Who can you contact for further clarification on the processing of personal data by the company and on your rights?
You can contact us:
– via email: info@igkvar.si
– by regular mail to:
IGK-VAR, Production, Services Ltd.
Pod Bregom 52
3313 Polzela
Final provisions
We may update this General Information on the processing of personal data from time to time to ensure that its content better reflects changes in data protection or for other operational and legal reasons.
Should we make any material changes to the content of this General Information on the Processing of Personal Data, we will post a notice on our website.
This General Information on the Processing of Personal Data is valid and applicable as of June 2024.
IGK-VAR Ltd.
