Privacy policy

About Privacy policy

Purpose of Lipican AER Privacy Policy d.o.o. (hereinafter referred to as the “Privacy Policy”) is an introduction to users of Lipican AER d.o.o. and other persons (hereinafter also referred to as “individuals”) for the purposes and basis of the processing of personal data by Lipican AER doo, Sečovlje 19, 6333 Sečovlje (hereinafter: “Companies”) and the rights of individuals in this field. The company provides particular care for the security of your personal information. All personal information provided is treated confidentially and used only for the purpose for which it was provided. We handle your personal information with the utmost care, complying with applicable law and the highest standards of processing. We ensure, among other things, the security of your personal information through appropriate organizational measures, work processes and advanced technological solutions, as well as external experts in order to protect your personal information as effectively as possible. We use the appropriate level of protection and reasonable physical, electronic and administrative measures to protect the collected information against unintentional or unlawful destruction, loss, alteration, unauthorized disclosure of personal information or against unauthorized access to personal data that has been transferred, stored or otherwise processed.

At the same time, this Privacy Policy further clarifies the consent you have provided for the processing of your personal information.

The Privacy Policy complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (hereinafter: “General Data Protection Regulation”), the following information covered: company contact information, purposes, bases and types of processing of different types of personal data of individuals, retention time of individual types of personal data, rights of individuals with regard to the processing of personal data, right of appeal to regarding the processing of personal data, the validity of the Privacy Policy.

Personal information collected by the company

If you are only a visitor to the website, we only collect information about you using cookies. If you are a user of the services or a subscriber of the services provided by the company, we also collect other personal information about you that we need to perform the services that you have ordered or. that you use. This personal information is: first and last name, contact email address, contact telephone number, IP address, bid information according to your request (your address, tax number).

Personal data manager

Personal data manager, which are processed in accordance with this Privacy Policy, is Lipican AER d.o.o., Sečovlje 19, 6333 Sečovlje.

Categories of individuals whose personal data are processed

This Privacy policy is for anyone who subscribes to use our services or submits an inquiry, as well as those who visit our site.

The purposes of processing and the basis for data processing

5.1. Contract Based Processing:

In the exercise of contractual rights and the fulfillment of contractual obligations, the company processes your personal information for the following purposes: identification of the individual, preparation of the offer, conclusion of the contract, provision of the services ordered, notification of any changes, additional details and instructions for use of the services, to solve any technical problems , objections or complaints, billing for services, and for other purposes necessary to perform or enter into a contractual relationship between a business and an individual.

5.2. Law-based processing:

Based on a legitimate interest, we use your personal information to detect and prevent fraudulent use and misuse of services, further to ensure the stable and secure operation of our system and services, as well as for the purposes of implementing information security measures, meeting quality service requirements, and detecting technical system and service failures.

Based on a legitimate interest, we also use your personal information for the purposes of potential enforcement, judicial and extrajudicial recovery.

In accordance with the General Regulation, in case of suspected abuse, the company can process to a reasonable and proportionate extent the data on individuals for the purpose of identifying and preventing possible fraud or abuse and may, where appropriate, forward this information to other providers of such services, business partners, police , the public prosecutor’s office or other competent authorities. For the purpose of preventing future abuses or frauds, data on the history of identified abuses or frauds in connection with an individual, such as subscriber information and, for example, IP address, may be retained for up to five years after the termination of the business relationship.

5.3. Consent processing for processing personal data:

Data processing may also be based on your consent to the business.

Consent may, for example, relate to informing the offers, benefits and enhancements of the services provided by the business. The purpose of such information is to bring the services as close as possible to your needs and desires and thus increase their useful value for you. Notification is done through the channels you have selected in agreement. You can cancel the notification at any time.

You may withdraw or modify your consent at any time in the same manner as you have given or otherwise, whilst the Company reserves the right to identify the customer. The change of consent can be arranged, inter alia, by e-mail to info@lipicanaer.com or by a written request sent to the headquarters of the company.

Withdrawal or modification of consent only applies to data processed on the basis of your consent. Your last consent we received was valid. The possibility of revoking consent does not constitute a waiver in the individual’s business relationship with the company.

The data for which your consent is given shall be processed in the absence of cancellation up to two years after the termination of the business relationship with the company.

Restrictions on the transmission of personal data

If necessary, we will authorize other companies and individuals to perform certain works that contribute to our services. In such a case, the company may also provide personal data to such carefully selected external processors who will enter into a contract with the company for the processing of personal data or the substantially identical agreement or other binding document (hereinafter referred to as “the processing contract”). We will only transmit or make such information available to external processors to the extent required by a specific purpose. This data may not be used by the external processor for any other purpose, meeting at least all the standards of processing of personal data provided by applicable law. External processors are contractually obligated to respect the confidentiality of your personal information.

Companies, on the basis of a reasoned request, also provide personal information to the competent national authorities that have a legal basis for this. Lipican AER d.o.o. will, for example. responded to requests from courts, law enforcement and other national authorities, which may include the national authorities of another EU Member State.

Period of retention of personal data

The retention period is determined by the category of individual data. We keep the data for as long as is necessary to achieve the purpose for which it was collected or further processed, or until the statute of limitations for the fulfillment of obligations or the statutory retention period expires.

The billing information and associated contact details of individuals may be retained for the purpose of fulfilling their contractual obligations until full payment of the service, or until the expiry of limitation periods in relation to a single claim, which may be from one to five years, by law. Accounts shall be kept for 10 years after the end of the year to which the account relates in accordance with the law governing value added tax.

We retain other information obtained on your consent for the duration of the business relationship and for 2 years after termination, unless the law prescribes a longer retention period. Unless an individual who has consented to the processing of personal data has entered into a business relationship with us, his or her consent shall be valid for 2 years from the date of its submission or until its cancellation.

After the retention period has expired, the data shall be erased, destroyed, blocked or anonymized, unless otherwise provided by law for each type of data.

Individuals' rights in relation to the processing of personal data

We guarantee the exercise of your rights in the processing of your personal information without undue delay. We will decide your request within one month of receiving your request. In the case of complexity and multiple requests, the deadline can be extended by up to two additional months. If we extend the deadline, we will notify you of any such extension within one month of receipt of the request, together with the reasons for the delay.

Requests regarding the exercise of your rights are received by e-mail info@lipicanaer.com or by post at Lipican AER d.o.o., Sečovlje 19, 6333 Sečovlje.

When you submit your request by electronic means, we will provide you, wherever possible, by electronic means, unless you request otherwise.

Where there is a reasonable doubt as to the identity of the individual making the request in respect of any of his rights, we may require the provision of additional information necessary to confirm the identity of the data subject.

If the requests of the data subject are manifestly unfounded or excessive, especially as they are repeated, the enterprise may:

– charge a reasonable fee, taking into account the administrative costs of providing the information or message or the implementation of the action requested, or

– refuse to act on the request.

We give you the following rights regarding the processing of your personal information:

(i) the right of access to information

(ii) the right to rectification

(iii) the right of erasure (the “right to be forgotten”)

(iv) the right to restrict processing

(v) the right to data portability

(vi) the right to object

(i) the right of access to information

You are always entitled to know whether personal data are processed in relation to you and, if so, access to personal data and the following information:

– processing purposes,

– the types of personal data being processed,

– users or categories of users to whom personal data have been or will be disclosed,

– the estimated period of retention of personal data or, where this is not possible, the criteria to be used to determine that period,

– the existence of the right to require the controller to correct or delete personal data or to restrict the processing of your personal data, or the existence of the right to – object to such processing,

– the right to lodge a complaint with the supervisory authority,

– when personal information is not collected from you, all available information regarding their source.

(ii) the right to rectify

You have the right to correct inaccurate personal information concerning you without undue delay, and having regard to the purposes of the processing, the right to complete incomplete personal information, including the submission of a supplementary statement.

(iii) the right of erasure (the “right to forget”)

You have the right to delete your personal information without undue delay when one of the following reasons applies:

– when personal data are no longer needed for the purposes for which they were collected or otherwise processed,

– when you withdraw the consent on the basis of which the processing takes place, there is no other legal basis for the processing,

– when you object to the processing of data and there are no overriding legitimate reasons for processing it,

– where personal data have been processed unlawfully,

– where personal data need to be deleted in order to fulfill a legal obligation in accordance with EU or Slovenian law.

(iv) the right to restrict processing

You have the right to limit the processing of your personal information when one of the following applies:

– when you dispute the accuracy of the data for a period that allows us to verify the accuracy of the personal data,

– the processing is unlawful and you oppose the erasure of personal data and instead request a restriction on their use,

– we no longer need your personal data for processing purposes, but you need them to enforce, enforce or defend legal claims,

– if you have raised an objection to processing based on the legitimate interests of the business until it is verified that our legitimate reasons outweigh your reasons.

Where the processing of your personal data has been restricted in accordance with the preceding paragraph, such personal data, with the exception of their storage, shall be processed only with your consent, or for the enforcement, enforcement or defense of legal claims or for the protection of the rights of another natural or legal person.

We are obliged to inform you before the restriction on the processing of your personal data is lifted.

(v) the right to data portability

You have the right to receive your personal data which you have provided to us in a structured, commonly used and machine-readable form, and the right to pass this information to another controller without obstructing you when processing is based on your consent and processing is carried out by automated means. At your request, where technically feasible, personal data may be transferred directly to another controller.

(vi) the right to contract

When we process your information for legitimate interest for marketing purposes, you may object to it at any time.

We cease processing your personal information unless we demonstrate compelling reasons for processing that outweigh your interests, rights and freedoms, or to enforce, enforce, or defend legal claims.

Right to lodge a complaint concerning the processing of personal data

Any complaint regarding the processing of your personal information may be sent to info@lipicanaer.com or by mail to Lipican AER doo, Sečovlje 19, 6333 Sečovlje.

If you do not decide on your request within the legal deadline or reject your request, you have the opportunity to file a complaint with the Information Commissioner.

You also have the right to file a complaint directly with the Information Commissioner if you believe that the processing of your personal data violates Slovenian or EU data protection rules.

If you have exercised your right of access to the data and after the decision is made you consider that the personal data you have received are not the personal data you have requested or that you have not received all the requested personal data, you may file a reasoned complaint before filing a complaint with the Information Commissioner. with the company within 15 days. We must decide on your complaint as a new request within five business days.

Final provisions

Anything that is not covered by this Privacy Policy is subject to applicable law.

The Company reserves the right to change this Privacy Policy. We will inform you about the change by posting it on the official website of Lipican AER d.o.o. 30 days before its entry into force.

If you have any questions about our Privacy Policy or the information we hold about you, please email us at info@lipicanaer.com.

Privacy policy validity

This Privacy Policy is posted on the Lipican AER d.o.o. and shall enter into force 29/01/2020.