Processing of personal data
At Grošelj d.o.o., we are aware of the importance of the security of the personal data of individuals, and therefore we carefully respect and enforce the applicable national and European legislation in this area.
We process personal data to provide the best user and consumer experience concerning our products and services and to ensure the highest level of care in terms of security and discretion in storing and processing your personal data.
All our practices related to personal data comply with the applicable legislation on the protection of personal data. We ensure that your personal data is stored appropriately and in accordance with due diligence, that the purposes for which we process your personal data are adequately controlled and that you are able to exercise all the rights you have under applicable law.
As a data subject, you have the right to:
know what personal data we process about you and for what purposes;
request the rectification of your personal data in case of incompleteness in our database;
request the transfer of personal data from our database to another processor or controller;
object if the processing is for direct marketing purposes, including creating user profiles, and we must ensure that these rights are exercised for you.
You can read more about your data protection rights below.
Legal bases for processing
Grošelj d.o.o. only processes your personal data if it has a legal or another basis to do so. We process data on the following bases:Grošelj d.o.o. only processes your personal data if it has a legal or another basis to do so. We process data on the following bases:
Your direct consent in the context of the contact form and the use of web analytics;
For the performance of the contract between us as the service provider and you as the recipient;
To implement pre-contractual measures;
Legitimate interest, which primarily relates to the direct marketing of our services; and
Compliance with legal obligations, in particular in the event of non-compliance with contractual obligations and the corresponding sanctions.
The data we process and our purpose
Data obtained from the contact form and online purchases
Data obtained from the contact form includes your name, surname, telephone number, e-mail address and the service(s) you require. We collect them in a safe way. We use them to respond to your enquiry/fulfil your obligations under the sales contract, and continue our business relationship. We do not use this data for marketing purposes unless you explicitly agree to this.
Data obtained under a contract
Data obtained under a contract includes the company name, address, tax and registration number and the name, surname and e-mail address of the contact person. These are needed for the smooth running of the work, invoicing and, at a later stage, for possible recovery.
Data obtained from public records
Data obtained from public records include the company name, address and tax number. They are needed for invoicing. It is not our business practice to collect data from databases for marketing purposes.
We process the data of natural persons at the request of and under contract with our customers. It is up to the customer to ensure that the data is collected in a lawful manner. We obtain all the information we need to ensure that the data has indeed been obtained in a lawful manner.
For the purpose of marketing our services, we advertise on various platforms (Google Adwords, Facebook Ads Manager) using data obtained through advertising tools. These tools do not give us access to specific personal data but allow us to profile visitors to our website based on such data, which is anonymised. This is to ensure that our marketing is targeted at those who are interested in advertising services and that they are displayed ads that are relevant to them.
Processing of personal data when visiting www.mizarstvogroselj.si
We use Google Analytics, an advanced web analytics programme, to provide you with the best user experience on our website. The aim is to ensure that the website works smoothly for you as a user and that it is optimised for the benefit of all our visitors.
As a user of our website, you have the right to opt out of the processing of such data immediately upon visiting the homepage. You can avoid such processing by setting the appropriate cookie settings when you visit the website or by setting the appropriate cookie settings in the web browser you are using.
If you wish to consent to the use of web analytics, you can do so in the same way you have opted out or opted in. You can change this on the homepage of the website.
If you consent to data processing (accept cookies on the site), we obtain your anonymised IP address. This means that all your personal data is encrypted and not available to us.
Rights of data subjects
Data subjects have the right to request from Grošelj d.o.o. to:
access their personal data;
rectify their personal data;
erase their personal data from the personal data file; and
restrict the processing of their personal data.
As a data subject, you also have the right to object to processing and the right to the portability of your personal data.
You can exercise your rights by emailing a written request to info@mizarstvogroselj.si.
We will decide on your request within one month of receiving it. This time limit may be extended by up to two additional months in the event of complexity and a large number of requests, of which you will be informed.
Access to your personal data and information about the processing
You always have the right to know whether personal data concerning you is being processed. Where this is the case, we provide you with access to your personal data and the following information:
the purpose(s) of the processing;
the categories of personal data;
the recipients to whom the personal data has been or will be disclosed;
the envisaged period for which the personal data will be stored or, if this is not possible, the criteria to be used to determine that period;
where the personal data is not collected from you, any available information regarding their source.
The information on the processing of personal data shall be free of charge, except where the data subject’s requests are manifestly unfounded or excessive, in particular because they are repetitive. In such a case, the Controller may either charge a reasonable fee, taking into account the administrative costs of providing the information or communication, carrying out the requested action, or refuse to act on the request.
Right to rectification
As a data subject, you have the right under the law to have inaccurate personal data relating to you rectified and, taking into account the purposes of the processing, to have incomplete personal data completed.
Right to erasure
You have the right to have your personal data erased where one of the following applies:
the personal data is no longer necessary for the purposes for which they were collected or otherwise processed;
when you withdraw the consent on the basis of which the processing is carried out and when there is no other legal basis for the processing;
when you object to the processing and there are no overriding legitimate grounds for the processing;
the personal data has been unlawfully processed.
Right to the restriction of processing
You have the right to have us restrict the processing of your personal data where one of the following applies:
when you contest the accuracy of the data, for a period which allows us to verify the accuracy of the personal data;
the processing is unlawful and you object to the erasure of your personal data and instead request a restriction on its use;
we no longer need your personal data for the purposes of the processing, but you need it to assert, exercise or defend legal claims;
if you have objected to processing based on our legitimate interests, until it is verified that our legitimate interests override yours.
If the processing of personal data has been restricted, the data shall only be processed with your consent, with the exception of their storage, or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person.
We are obliged to inform you before revoking the restriction on the processing of your personal data.
Right to data portability
You have the right to receive the personal data you provided to us in a structured, commonly used and machine-readable format and to have that data transmitted to another controller where the processing is based on your consent or is carried out by automated means. At your request, when technically feasible, personal data may be transferred directly to another controller.
Right to object
Where we process your data based on legitimate interest for marketing purposes, including profiling, you may object to such processing at any time.
Right to lodge a complaint with the Information Commissioner.
If we do not decide on your request within the statutory time limit or refuse your request, you have the right to lodge a complaint with the Information Commissioner.
THE PERIOD FOR WHICH THE PERSONAL DATA WILL BE STORED
We keep data for no longer than is necessary to fulfil the purpose for which the data was collected or further processed or until the expiry of the limitation periods for compliance with the obligation or the statutory storage period.
We keep data on clients or customers, the processing of which is based on a legislative act, after the termination of the service relationship until the payment for the services has been made in full, but at the latest until the expiry of the limitation period for our claims for the provision of the services or the performance of the contract, except where a longer storage period is provided for by law.
Other data obtained based on your consent is kept for the duration of the cooperation and for two years after its termination unless a longer storage period is provided for by law. If the customer who has given consent to the processing of personal data has not entered into a business relationship with us, his or her consent shall be valid for two years from the date on which it was given. As a taxable person under the law governing value-added tax, we must ensure that invoices are kept for ten years after the end of the year to which they relate.
After the storage period has expired, the data will be erased, destroyed, blocked or anonymised unless otherwise provided by law for a specific category of data.
Information about the Controller
Your personal data is collected and processed by Grošelj d.o.o.. You may contact the Data Protection Officer designated by the Controller at info@mizarstvogroselj.si
Final provisions
If certain matters are not regulated by these Data Processing Terms and Conditions, the applicable law shall apply.
We reserve the right to amend these Data Processing Terms and Conditions. We will inform you of the amendment by posting it on the official website or by other appropriate means. The amendment will be published on the official website one month before it enters into force.
These Data Processing Terms and Conditions are valid and applicable from 1 January 2021.
