PRIVACY POLICY

 In front of you is the privacy policy, a document in which you will find all the information about the processing of personal data carried out by the company Promoluks, Robert Šmid, sp. 

For greater transparency, we offer you an interactive table of contents, with which you can more quickly access the data that interests you the most. 

Content

Who processes my personal data?. 1

Why are you using my personal data?. 1

Do you share my data with third parties?. 2

How do you protect my personal data?. 2

What rights are available to me?. 2

Web plugins 3

Do you have a question?. 4

  Who manages and processes my personal data?

 The processing of personal data is carried out by the personal data manager; the company Promoluks, Robert Šmid, sp

 Operator information:

 Promolux, Robert Šmid, sp

Cesta Alojza Travna 20, 4270 Jesenice

Registration number: 3786714000

 For any questions or to exercise your rights, you can contact us at any time at: informace@promoluks.com .

Why are you using my personal information?

This privacy policy is intended to:

  • To our subscribers,
  • To potential clients,
  • To the recipients of our news,
  • To the visitors of our website.

 How do you process my personal data?

 The processing of your personal data is always based on one of the legally defined legal bases and takes place on the basis of predefined purposes.

 We also make sure that we collect the minimum amount of personal data, i.e. only those data that are necessary to fulfill the purpose.

When processing personal data on the website, we use the following legal bases:

  • Law: we process personal data in accordance with legal obligations,
  • Contractual relationship: processing is necessary for the conclusion and fulfillment of contractual obligations,
  • Legitimate interest: when we pursue a specific legitimate interest through processing,
  • Consent: processing is based on your express consent, which you can withdraw at any time.

 We process all personal data collected by the controller for specific purposes defined in the table below. We process all personal data on the relevant legal basis as defined below.

  

Names

Types of personal data

Legal basis

Retention period

Performance of our services

Name and surname, function (job), company information, payment information, telephone number, e-mail address, delivery address

Contractual relationship

5 years from the completion of the transaction (10 years for keeping invoices)

Communicating with you regarding inquiries regardless of the communication channel

Name and surname, function (job), company information, telephone number, e-mail address, inquiry information

Pre-contractual relationship

The entire duration of the communication and 1 year after the end of the communication

Sending e-newsletters

Name and surname, e-mail

Consensus

Until cancelation

Sending e-news to our subscribers

Name and surname, e-mail

Law

Until cancelation

Sending e-news to publicly available e-mail addresses

Name and surname, e-mail

Legitimate interest in acquiring new subscribers

Until cancelation

Registration and use of the user account

First and last name, e-mail, phone number, company information, country

Consensus

Until the user account is deleted

Enforcement of our rights and other legal claims

The amount of data depends on the individual process

Law

The retention period depends on the individual procedure and is determined by law

Carrying out statistical analyzes of the use of our website

Use of aggregated, non-identifying data

Legitimate interest in providing a good user experience

 

Statistical analyzes are performed with cookies - you can read more in the cookie policy

The transmission of personal data is voluntary, except when the transmission of personal data is required by law. In this case, you are obliged to provide personal data. We need certain personal data to provide you with the service. If you decide not to provide us with the data we need to provide a certain service, we cannot provide you with certain services. 

 Do you share my information with third parties?

We share your personal data with third parties:

  • When this is necessary for the performance of accounting services;
  • To send emails where data is shared with a bulk email provider (Brevo),
  • To maintain our site, we share data with the TronShop platform provider that powers our website and with the hosting provider;
  • With our external contractors when we carry out orders (eg printing, embroidery and other types of personalisation);
  • Courier service providers;
  • Digital marketing service provider.

We pass on personal data to third parties only when it is necessary to fulfill the purpose of personal data processing. Third parties may access and process your personal data only to the extent and in the manner determined by the contract we have concluded with them. Third parties may not process personal data that is not necessary for the purpose for which they process personal data. All third parties are obliged to respect the level of personal data protection provided by the controller.

How do you protect my personal data?

We ensure the security of your personal data by adopting various technical and organizational measures, including:

  • Regularly updating our hardware and software;
  • Security of hardware and software with security software;
  • Security of our business premises;
  • Ensuring the restriction of access of unauthorized persons to personal data.

We understand that, despite the security mechanisms we have in place, a security incident may occur. For this purpose, we have created a special protocol with which we will deal with such incidents quickly, efficiently and in accordance with the law.

In the event of a security incident in which there is a possibility that the rights and freedoms of individuals have been threatened, we will notify the competent supervisory authority about such an incident immediately, but no later than within 72 hours. However, in the event of a security incident that may cause a significant risk to the rights and freedoms of individuals, we will immediately notify the individuals concerned.

What rights are available to me?

Regarding the processing of your personal data by us, you have the following rights:

  1. The right to access and print out personal data: this right allows you to obtain information about the processing of personal data, and at the same time you also have the possibility of viewing or obtaining a copy of your personal data that we hold about you.
  2. Right to rectification of personal data: you have the option to request the rectification of inaccurate or incomplete data that we hold about you.
  3. The right to restrict the processing of personal data: this right allows you to keep the data, where deletion is otherwise possible, for later evidence in various official procedures. This right also allows you to temporarily limit the processing for the duration of the decision on correction or objection that is being made with the controller.
  4. The right to erasure of personal data: this right allows you to request the erasure of the data we hold about you in certain cases. When the legal basis for the processing of personal data is a law or a valid contract, we cannot delete your personal data.
  5. The right to withdraw consent: when we process your personal data on the basis of consent (consent), you have the option to withdraw this consent at any time. Revocation of consent does not have negative consequences for you. We remind you that after revoking your consent, we will no longer be able to provide you with certain services.
  6. The right to object to the processing of personal data: this right is available to you when the processing of personal data is based on legitimate interests. It allows you to ask the controller to stop processing. We remind you that in certain cases the controller has the option to reject such an objection. In any case, the controller will stop processing if you object to direct marketing.
  7. The right to portability of personal data: this right allows you to request that we transmit your personal data to another controller in a machine-readable format. This is only possible to the extent that we process your data using automated means and when it concerns data collected on the basis of consent or contractual relationship.
  8. The right to file a complaint with the information commissioner: you exercise this right if you believe that there has been a breach of personal data protection by the controller. You can submit a complaint to the Information Commissioner (Dunajska cesta 22, 1000 Ljubljana, email address: gp-ip@ip-rs.si, website: ip-rs.si ).

The controller does not make automated decisions when processing personal data.

You can exercise your rights by writing to information@promoluks.com with the subject of personal data protection .

We will process your requests as soon as possible and no later than within 30 days of receipt. If a particular request is so extensive that it will take a long time to solve it, we will inform you beforehand and give you an approximate deadline for preparing an answer.

We reserve the right to reliably identify you in the event of a request to exercise any of your rights. If you do not send us personal data with the request, on the basis of which we can reliably identify you, we will ask you for additional personal data. If you do not provide us with additional personal data within the deadline, we will discard your request.

Web plugins

You have the option of using online plugins on the website. Please note that these plugins are operated by third parties; i.e. individual social networks.

The use of plugins online is at the individual's own risk. Each social network operates on the basis of its own privacy rules, which are not related to the operator's rules.

The responsibility for interaction with the social network and any consequences related to or that may arise from such interaction rests solely with the individual.

We may change the privacy policy at any time, and all changes will be clearly marked and their implementation will be published on our website: promoluks.com.

Do you have a question?

You can contact us at any time with additional questions regarding the protection of personal data by writing to us at: informace@promoluks.com .