If you are only a visitor to the website, we only collect information about you using cookies. If you are a user of the services or a subscriber of the services provided by the company, we also collect other personal information about you that we need to perform the services that you have ordered or. that you use. This personal information is: first and last name, contact email address, contact telephone number, IP address, bid information according to your request (your address, tax number).
5.1. Contract Based Processing:
In the exercise of contractual rights and the fulfillment of contractual obligations, the company processes your personal information for the following purposes: identification of the individual, preparation of the offer, conclusion of the contract, provision of the services ordered, notification of any changes, additional details and instructions for use of the services, to solve any technical problems , objections or complaints, billing for services, and for other purposes necessary to perform or enter into a contractual relationship between a business and an individual.
5.2. Law-based processing:
Based on a legitimate interest, we use your personal information to detect and prevent fraudulent use and misuse of services, further to ensure the stable and secure operation of our system and services, as well as for the purposes of implementing information security measures, meeting quality service requirements, and detecting technical system and service failures.
Based on a legitimate interest, we also use your personal information for the purposes of potential enforcement, judicial and extrajudicial recovery.
In accordance with the General Regulation, in case of suspected abuse, the company can process to a reasonable and proportionate extent the data on individuals for the purpose of identifying and preventing possible fraud or abuse and may, where appropriate, forward this information to other providers of such services, business partners, police , the public prosecutor’s office or other competent authorities. For the purpose of preventing future abuses or frauds, data on the history of identified abuses or frauds in connection with an individual, such as subscriber information and, for example, IP address, may be retained for up to five years after the termination of the business relationship.
5.3. Consent processing for processing personal data:
Data processing may also be based on your consent to the business.
Consent may, for example, relate to informing the offers, benefits and enhancements of the services provided by the business. The purpose of such information is to bring the services as close as possible to your needs and desires and thus increase their useful value for you. Notification is done through the channels you have selected in agreement. You can cancel the notification at any time.
You may withdraw or modify your consent at any time in the same manner as you have given or otherwise, whilst the Company reserves the right to identify the customer. The change of consent can be arranged, inter alia, by e-mail to firstname.lastname@example.org or by a written request sent to the headquarters of the company.
Withdrawal or modification of consent only applies to data processed on the basis of your consent. Your last consent we received was valid. The possibility of revoking consent does not constitute a waiver in the individual’s business relationship with the company.
The data for which your consent is given shall be processed in the absence of cancellation up to two years after the termination of the business relationship with the company.
If necessary, we will authorize other companies and individuals to perform certain works that contribute to our services. In such a case, the company may also provide personal data to such carefully selected external processors who will enter into a contract with the company for the processing of personal data or the substantially identical agreement or other binding document (hereinafter referred to as “the processing contract”). We will only transmit or make such information available to external processors to the extent required by a specific purpose. This data may not be used by the external processor for any other purpose, meeting at least all the standards of processing of personal data provided by applicable law. External processors are contractually obligated to respect the confidentiality of your personal information.
Companies, on the basis of a reasoned request, also provide personal information to the competent national authorities that have a legal basis for this. Lipican AER d.o.o. will, for example. responded to requests from courts, law enforcement and other national authorities, which may include the national authorities of another EU Member State.
The retention period is determined by the category of individual data. We keep the data for as long as is necessary to achieve the purpose for which it was collected or further processed, or until the statute of limitations for the fulfillment of obligations or the statutory retention period expires.
The billing information and associated contact details of individuals may be retained for the purpose of fulfilling their contractual obligations until full payment of the service, or until the expiry of limitation periods in relation to a single claim, which may be from one to five years, by law. Accounts shall be kept for 10 years after the end of the year to which the account relates in accordance with the law governing value added tax.
We retain other information obtained on your consent for the duration of the business relationship and for 2 years after termination, unless the law prescribes a longer retention period. Unless an individual who has consented to the processing of personal data has entered into a business relationship with us, his or her consent shall be valid for 2 years from the date of its submission or until its cancellation.
After the retention period has expired, the data shall be erased, destroyed, blocked or anonymized, unless otherwise provided by law for each type of data.
We guarantee the exercise of your rights in the processing of your personal information without undue delay. We will decide your request within one month of receiving your request. In the case of complexity and multiple requests, the deadline can be extended by up to two additional months. If we extend the deadline, we will notify you of any such extension within one month of receipt of the request, together with the reasons for the delay.
Requests regarding the exercise of your rights are received by e-mail email@example.com or by post at Lipican AER d.o.o., Sečovlje 19, 6333 Sečovlje.
When you submit your request by electronic means, we will provide you, wherever possible, by electronic means, unless you request otherwise.
Where there is a reasonable doubt as to the identity of the individual making the request in respect of any of his rights, we may require the provision of additional information necessary to confirm the identity of the data subject.
If the requests of the data subject are manifestly unfounded or excessive, especially as they are repeated, the enterprise may:
– charge a reasonable fee, taking into account the administrative costs of providing the information or message or the implementation of the action requested, or
– refuse to act on the request.
We give you the following rights regarding the processing of your personal information:
(i) the right of access to information
(ii) the right to rectification
(iii) the right of erasure (the “right to be forgotten”)
(iv) the right to restrict processing
(v) the right to data portability
(vi) the right to object
(i) the right of access to information
You are always entitled to know whether personal data are processed in relation to you and, if so, access to personal data and the following information:
– processing purposes,
– the types of personal data being processed,
– users or categories of users to whom personal data have been or will be disclosed,
– the estimated period of retention of personal data or, where this is not possible, the criteria to be used to determine that period,
– the existence of the right to require the controller to correct or delete personal data or to restrict the processing of your personal data, or the existence of the right to – object to such processing,
– the right to lodge a complaint with the supervisory authority,
– when personal information is not collected from you, all available information regarding their source.
(ii) the right to rectify
You have the right to correct inaccurate personal information concerning you without undue delay, and having regard to the purposes of the processing, the right to complete incomplete personal information, including the submission of a supplementary statement.
(iii) the right of erasure (the “right to forget”)
You have the right to delete your personal information without undue delay when one of the following reasons applies:
– when personal data are no longer needed for the purposes for which they were collected or otherwise processed,
– when you withdraw the consent on the basis of which the processing takes place, there is no other legal basis for the processing,
– when you object to the processing of data and there are no overriding legitimate reasons for processing it,
– where personal data have been processed unlawfully,
– where personal data need to be deleted in order to fulfill a legal obligation in accordance with EU or Slovenian law.
(iv) the right to restrict processing
You have the right to limit the processing of your personal information when one of the following applies:
– when you dispute the accuracy of the data for a period that allows us to verify the accuracy of the personal data,
– the processing is unlawful and you oppose the erasure of personal data and instead request a restriction on their use,
– we no longer need your personal data for processing purposes, but you need them to enforce, enforce or defend legal claims,
– if you have raised an objection to processing based on the legitimate interests of the business until it is verified that our legitimate reasons outweigh your reasons.
Where the processing of your personal data has been restricted in accordance with the preceding paragraph, such personal data, with the exception of their storage, shall be processed only with your consent, or for the enforcement, enforcement or defense of legal claims or for the protection of the rights of another natural or legal person.
We are obliged to inform you before the restriction on the processing of your personal data is lifted.
(v) the right to data portability
You have the right to receive your personal data which you have provided to us in a structured, commonly used and machine-readable form, and the right to pass this information to another controller without obstructing you when processing is based on your consent and processing is carried out by automated means. At your request, where technically feasible, personal data may be transferred directly to another controller.
(vi) the right to contract
When we process your information for legitimate interest for marketing purposes, you may object to it at any time.
We cease processing your personal information unless we demonstrate compelling reasons for processing that outweigh your interests, rights and freedoms, or to enforce, enforce, or defend legal claims.
Any complaint regarding the processing of your personal information may be sent to firstname.lastname@example.org or by mail to Lipican AER doo, Sečovlje 19, 6333 Sečovlje.
If you do not decide on your request within the legal deadline or reject your request, you have the opportunity to file a complaint with the Information Commissioner.
You also have the right to file a complaint directly with the Information Commissioner if you believe that the processing of your personal data violates Slovenian or EU data protection rules.
If you have exercised your right of access to the data and after the decision is made you consider that the personal data you have received are not the personal data you have requested or that you have not received all the requested personal data, you may file a reasoned complaint before filing a complaint with the Information Commissioner. with the company within 15 days. We must decide on your complaint as a new request within five business days.