GDPR

PRIVACY POLICY

ELEKTROMEHANIKA & BB d.o.o.

In the following privacy policy, you can find detailed information about the processing of your personal data by ELEKTROMEHANIKA & BB d.o.o.

 

Table of Contents

1. Data Controller
2. Data Protection Officer
3. Purposes of Personal Data Processing, Types of Personal Data Processed, and Legal Basis
4. Collection of Your Personal Data
5. Users of Personal data
6. Processing of Children’s Personal Data
7. Transfer of Data to Third Countries or International Organizations
8. Information on Individual Rights Regarding Personal Data Processing
9. Exercise of Rights
10. Right to lodge a Complaint
11. Existence of Automated Decision-Making, Including Profiling
12. Validity of the Policy

 

  1. Data Controller

Basic Information about the Data Controller

Full Name of the Data Controller ELEKTROMEHANIKA & BB d.o.o.
Headquarters Obrtna cona Logatec 50, 1370 Logatec, Slovenia
Tax Number SI 47312335
Registration Number 2193256000
Email Address info@ebb-si.com
Website https://www.ebb-si.com
  1. Data Protection Officer

The data controller does not process personal data in such a quantity and in such a way that it would be required, in accordance with legal provisions, to appoint a data protection officer.

  1. Purposes of Personal Data Processing, Types of Personal Data Processed, and Legal Basis

 

Company ELEKTROMEHANIKA & BB d.o.o. processes your personal data for the following purposes:

PURPOSE TYPES OF DATA, DATA RETENTION PERIOD, AND LEGAL BASIS DESCRIPTION
 

 

 

 

 

 

 

 

 

 

Visiting the website

Types of personal data processed for this purpose:

-         IP address

-         Time and date of website visit

-         Browser settings and information about the operating system of the computer or mobile device

Every time you visit our website, log files of the web server are automatically stored (e.g., IP address – a number that identifies an individual computer or other device on the internet).
How long we retain the data: We will retain the data for a maximum of 30 days from the website visit.
Legal basis:

Legitimate interest

PURPOSE TYPES OF DATA, DATA RETENTION PERIOD, AND LEGAL BASIS DESCRIPTION
 

 

 

 

 

 

 

 

 

Conducting communication with individuals via email or telephone number

Types of personal data processed for this purpose:

-         Email address

-         Phone number

On our website, we offer the option to get in touch with us through electronic communication. Your email address and/or phone number are used for the purpose of communicating with you and preparing responses to your inquiries, sending offers and other information.
How long we retain the data: We will retain data for communication purposes for as long as necessary to achieve the purpose of communication with you or until the revocation of your consent to the processing of personal data for communication purposes.
Legal basis:

Individual’s consent

PURPOSE TYPES OF DATA, DATA RETENTION PERIOD, AND LEGAL BASIS DESCRIPTION
 

 

 

 

 

 

 

 

 

Ordering or purchasing products, performing actions before order fulfillment, order fulfillment and delivery of goods

Types of personal data processed for this purpose:

-         Name and surname

-         Address

-         Email address

-         Phone number

On our website, we provide the option to view products and order items that we offer. We will need your personal data for the purpose of concluding, executing, and fulfilling the sales contract, which involves purchasing, selling, and delivering goods.
How long we retain the data: We retain data until the order is fulfilled or the purchase is completed, and an additional 5 years after the order is fulfilled or the purchase is made by the customer.

Data on the issued invoice will be retained for an additional 10 years from the date of the issued invoice.

Legal basis:

Contractual legal basis

,

PURPOSE TYPES OF DATA, DATA RETENTION PERIOD, AND LEGAL BASIS DESCRIPTION
 

 

 

 

 

 

 

Use of Cookies on Company Websites

Types of personal data processed for this purpose:

-         Necessary cookies

-         Analytical cookies

-         Marketing cookies

Cookies allow us to customize the website to your needs, facilitate your use, and display content that is important to you while avoiding content that is not relevant to you or inappropriate. By using the company’s websites, you agree to the use of mandatory or necessary cookies. Mandatory cookies are essential for the operation of the websites and do not store your personal data, serving for the normal and proper operation of the websites. Non-mandatory cookies necessary for the operation of various interfaces are only loaded with your consent. You can learn more about cookies in the website cookie policy.
How long we retain the data: For the duration of the company’s website usage or until receiving a revocation of consent for cookie usage.

Some cookies are time-limited and are stored for a limited time for the duration of the cookie.

Legal basis:

Legitimate interest

Individual’s consent

  1. Collection of Your Personal Data

We collect personal data in the following ways:

-         Data you provide to us directly: You may provide us with your personal data when you contact us via email or phone or contact form.

  1. Users of Personal data

We may share your personal data with the following categories of recipients:

-         A processor who provides IT, hosting and server services for us,

-         A processor who provides accounting services for us,

-         A processors who take care of the delivery of our services

-         Government authorities to whom we are required to send data based on legal requirements.

-         Law firms

Contract processors may process personal data only within the framework of the controller’s instructions and may not use personal data for pursuing any of their own interests.

  1. Processing of Children’s Personal Data

We can only collaborate with individuals who are older than 18 years, therefore we donot process children personal data.

  1. Transfer of Data to Third Countries or International Organizations

Company ELEKTROMEHANIKA & BB d.o.o. does not transfer your collected data to third countries or international organizations, nor do we share them with users from third countries.

  1. Information on Individual Rights Regarding Personal Data Processing

As an individual whose personal data is processed by ELEKTROMEHANIKA & BB d.o.o. you have the following rights:

 

  1. Right to Withdraw Consent

If you, as an individual, have consented to the processing of personal data for one or more purposes, you have the right to withdraw your consent at any time.

Upon receiving your withdrawal of consent for one or more purposes of processing, the controller will immediately cease processing your personal data for that purpose.

The withdrawal of consent for the processing of personal data does not affect the lawfulness of the processing of personal data concerning you prior to your withdrawal or the use of this personal data for legal or contractual purposes.

You can withdraw your consent at any time and without any cost through the following methods:

  1. By sending an email requesting the withdrawal of consent for the processing of personal data.
  1. Right to Access Personal Data Processed

You have the right to obtain confirmation from the controller as to whether or not personal data concerning you is being processed and to access personal data concerning you, along with the following information: the purpose of processing, the type of personal data concerning you, the recipients of your personal data, the expected period of storage of personal data, the source of personal data.

  1. Right to Correct Inaccurate Personal Data

At any time, you have the right to request that the controller correct or supplement inaccurate or incomplete personal data concerning you.

The controller will inform you of the correction of your personal data without delay, no later than 30 days after the correction is made.

 

  1. Right to Restrict Processing of Personal Data

From the controller, you have the right to request that the controller restrict the processing of your personal data when:

  1. You contest their accuracy, for a period enabling the controller to verify the accuracy of the data.
  2. The processing is unlawful, and you oppose the erasure of personal data and request the restriction of their processing.
  3. The controller no longer needs the personal data for processing purposes, but you require them for the establishment, exercise, or defense of legal claims.
  4. You have objected to processing pending the verification of the legitimate grounds of the controller.
  1. Right to Erasure of Personal Data (“Right to be Forgotten”)

In the event that your personal data is no longer necessary for the purposes for which it was processed, you have withdrawn consent to the processing of personal data for specific purposes, or there is no other legal basis for their processing, or the personal data have been processed unlawfully, you have the right to request the erasure of personal data concerning you without undue delay from the controller.

In the event of the erasure of personal data upon your request, the controller will inform you of the erasure.

The right to erasure is not absolute, and you should be aware that data required by law or for the conclusion or performance of a contract cannot be deleted. We will inform you about this.

  1. Right to Object

In addition to the right to withdraw consent, you can, at any time, in the case of the use of your personal data for informational or direct marketing purposes, request in writing the cessation of the use of your data for this purpose. In the case of objection to processing for marketing purposes, the controller will immediately cease processing personal data for marketing and informational purposes.

  1. Right to Data Portability

You have the right to have personal data that you provided to the controller transferred directly to another controller, where technically feasible.

  1. Exercise of Rights

You can exercise all the rights mentioned in the above section of this statement by submitting a request to exercise each individual right. You may submit a request to exercise your rights in physical or electronic form. You can send a request to exercise your rights by mail to the following address: ELEKTROMEHANIKA & BB d.o.o., Obrtna cona Logatec 50, 1370 Logatec, or by email to: info@ebb-si.com.

  1. Right to lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority in case of a breach of personal data protection by the controller. You can send your complaint to the following address: Information Commissioner, Dunajska cesta 22, 1000 Ljubljana, or by email to: gp.ip@ip-rs.si.

 

  1. Existence of Automated Decision-Making, Including Profiling

The controller does not make automated decisions or create profiles of individuals.

  1. Validity of the Policy

We reserve the right to modify or update this data protection statement without prior notice. The currently applicable version is the one published here.

Any changes to this data protection statement will be published on this website.

Version: 1.0, dated may 12, 2024