General

PRIVACY TERMS

 

GENERAL PROVISIONS

The purpose of the privacy conditions is to inform all stakeholders who directly or indirectly cooperate with the company LAGERHOF doo about the purposes, legal bases, security measures and rights of individuals regarding the processing of personal data carried out by the company.

 

a)      Operator data

The administrator is the one who manages your personal data and determines the purposes and means of processing your personal data.

Controller of personal data:

LAGERHOF, trgovina in storitve doo
Podplat 63241 PodplatTax number: SI 11818816 Registry number: 8556644000
e-mail: info@lagerhof.eu
phone: +386 (0)13 200 200

 

b)      Legislation

Slovenian and European legislation is used to assess these privacy conditions.

The privacy conditions are prepared mainly in accordance with the Personal Data Protection Act (ZVOP-2, UL RS, No. 163/22), Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals during processing personal data and on the free flow of such data (General Data Protection Regulation, GDPR), the Electronic Communications Act (ZEKom-2, Official Gazette of the RS, no. 130/22 and 18/23 – ZDU-1O) and other relevant legislation.

The privacy conditions are implemented in accordance with all relevant legal principles, which means that personal data is processed legally, transparently, for precisely defined and known purposes in advance, and that the processing takes place to the smallest possible extent within the framework allowed by the specific legal basis for processing .

 

MEANING OF TERMS

a)      Privacy terms

The privacy conditions are an internal act of the controller and apply to all legal relationships between it, processors and users. The act determines the rights and obligations of the controller and processors in the management and processing of users' personal data.

b)      Personal information

Personal data means any information relating to a specific or identifiable individual. A designated individual is one whose personal data is determined and processed in accordance with the purposes determined by the controller. An identifiable individual is one who can be directly or indirectly identified and whose personal data can be processed in accordance with the purposes determined by the controller.

c)      The user

A user is an individual whose personal data is processed on a legal or contractual basis between the operator and this individual or on the basis of the express consent given by the individual to the operator.

d)      Manager

The controller determines the purposes and means of processing within the framework of its registered activity and/or legal authorizations. The user is aware in advance who is the controller of personal data and who is the processor of his personal data.

e)      Processor

The processor processes the personal data of individuals on behalf of the controller, according to his instructions, within the framework of legal purposes and methods of processing. The operator provides the user with information about the processors of their personal data in these privacy conditions.

f)        Processing

Processing of personal data means any act or set of acts performed in relation to personal data or sets of personal data with or without automated means, such as collection, recording, editing, structuring, storage, adaptation or modification, retrieval, access, use , disclosure by transmission, dissemination or otherwise making accessible, adaptation or combination, restriction, erasure or destruction.

 

PERSONAL DATA

 

a)      Processing of personal data

The administrator can process the personal data of users who directly or indirectly cooperate with the company LAGERHOF doo, i.e. website visitors, individuals who conclude a contract with the company LAGERHOF doo in a physical store or through any means of communication, stakeholders whose personal data is publicly available accessible resources and others.

 

b)      Processing of personal data by third parties

The company can entrust individual processing of personal data to a contractual processor on the basis of a contractual processing agreement. The latter can only process personal data within the strict limits set by the controller and his authorization, which he received by concluding the processing contract. Processing must comply with applicable law and these privacy terms.

Contract processors can be the following:

- providers of accounting services;

- providers of business or legal advice;

- administrators of the information system;

- administrators of video surveillance or security surveillance;

- software providers;

- platforms of social networks and online advertising (Google, Meta, X, Instagram , TikTok , etc.);

The company is committed to never providing personal data to any third parties who are not authorized to process them.

 

c)      Legal bases for the collection and processing of personal data:

 

-          Processing for the fulfillment of legal obligations;

In accordance with the legislation of the Republic of Slovenia, the company is obliged to collect certain data. The obligation to collect data for the fulfillment of legal obligations applicable to the controller is determined in particular by:

1. Value Added Tax Act ZDDV-1;

2. Regulations on the implementation of the law on added value;

3. Tax Procedure Act;

4. The Companies Act;

5. Slovenian accounting standards;

6. Accounting Act;

The operator, to the extent that it processes the user's personal data because the latter has made a purchase or ordered a service from the operator, keeps this account for another 10 years (and also the user/customer data on the account).

 

-          Processing for the performance of contractual obligations;

In cases where an individual enters into a contract with a company, this constitutes the legal basis for the processing of personal data. The company may process personal data in this way for the conclusion and implementation of the contract, such as e.g. sale of goods and services, preparation of offers, participation in various procedures, etc.

If the user does not provide all the personal data that the operator needs to fulfill the contractual relationship, the operator cannot execute the user's order. In doing so, the manager always ensures that he only obtains and further processes as much personal data from the user as is necessary to fulfill the contractual relationship.

When an individual physically makes a purchase in a store, it can be done without the processing of personal data, unless it follows from the nature of the purchase that the processing of personal data is absolutely necessary for its execution.

The legal basis for data processing is the contract. The retention period is until the purpose of the contract is fulfilled, or up to 6 years after the termination of the contract , except in cases where there is a dispute between an individual and a company regarding the contract. In such a case, the company keeps the data for 10 years after the finality of the court decision, arbitration or court settlement or, if there was no court dispute, for 5 years from the date of the peaceful resolution of the dispute.

 

-          Processing to fulfill the controller's legitimate interests;

The company can also process personal data based on the pursuit of a legitimate interest. The latter is limited by interests or the fundamental rights of individuals to whom personal data refer, which are protected. In the case of using a legitimate interest, the company performs an assessment in accordance with the law. The processing of personal data of individuals for the purposes of direct marketing is considered to be carried out in a legitimate interest.

The company may process the personal data of individuals that it has collected from publicly available sources or within the framework of the legal performance of activities, also for the purposes of direct or indirect marketing, surveys, and other information acquisition within the framework of fulfilling the company's legitimate interests. To achieve these purposes, the company can use all available means of telecommunications, especially e-mail, telephone calls and regular mail.

For direct marketing purposes, the company may process the following personal data of individuals: first and last name, residential address, telephone number and email address. The stated personal data may be processed by the company for direct marketing purposes without the express consent of the individual. An individual can request the termination of this type of communication and processing of personal data at any time by submitting a request by e-mail or by regular mail to the company's address.

The legal basis for data processing is legitimate interest. The data will be processed until the cancellation of receiving messages, or until the purpose of the processing is fulfilled. Revocation does not affect the lawfulness of processing based on consent prior to its revocation.

 

-          Processing with the consent of the individual;

The express consent of the individual is the basis for the processing of those personal data for which the controller has no other legal basis for the collection and processing of personal data. Express consent is required for:

o   Photographs, videos or other forms of visual or audio material that relate to an individual and are published publicly, and in accordance with applicable legislation and practice, it is considered necessary to obtain the individual's consent for them;

o   Other purposes for which the individual agrees with consent.

If an individual gives his consent to the processing of personal data and at some point no longer wishes to do so, he can request the termination of the processing of personal data by e-mail or by regular mail to the company's address. Revocation of consent does not affect the lawfulness of processing based on consent prior to its revocation. After receiving the cancellation or request for deletion, the data will be deleted within 15 days at the latest. Exceptionally, the company may refuse the request for deletion if, in accordance with the applicable legislation, there is another right that prevails over the right of the individual, e.g. the right to freedom of expression and information, compliance with the legal obligation of processing, reasons of public interest in the field of public health, etc.

The legal basis for data processing is consent. The data will be processed until cancellation or withdrawal of consent or until the purpose of processing is fulfilled. Revocation of consent does not affect the lawfulness of processing based on consent prior to its revocation.

 

-          Processing for the protection of the vital interests of the individual

The controller may process the user's personal data, insofar as the processing is necessary to protect the user's vital interests.

 

d)      Types of personal data

Types of user personal data that we process for predetermined purposes:

 

o   name and surname

o   address of permanent or temporary residence

o   post office name and place

o   country

o   email address

o   telephone number

 

e)      Public posts by users

The administrator can enable public announcements by users on the website. Public posts include all those posts where the user himself publicly publishes his personal data for the purpose of commenting on posts, publishing opinions, participating in prize games and in other cases.
The manager is not responsible for the misuse of publicly published personal data of users by third parties, because he cannot have any influence on this.

The administrator does not process publicly published user data for any other purpose than to enable the user to publicly publish comments, opinions and other options that are available on the administrator's website.

 

f)        Cookies

The operator provides users with information about the use of cookies in a visible place on the website when the user visits the operator's website. In the notification, the controller provides up-to-date information about cookies, in particular:

1.      types and names of cookies,

2.      the purpose of their use and

3.      duration of each cookie.

 

The operator provides notification without consent for cookies that are absolutely necessary for the website to function.

The operator provides notification with the user's consent in all other cases and informs the user accordingly about the options for setting cookies. The operator does not use cookies that require the user's consent for installation without express consent. The operator ensures the possibility of subsequent changes to the user's consent by keeping the notification in a visible place on the website.

 

RIGHTS OF USERS

 

a)      General rights

 

The user can request from the operator:

1.      access to personal data,

2.      correction of personal data,

3.      deletion of personal data (right to be forgotten),

4.      limitation of personal data processing,

5.      objection to the processing of personal data,

6.      transfer of personal data.

 

An individual can claim this with a request sent to the company's address. The administrator responds to the user's request no later than within 30 days of receiving the request, unless it is extended due to the scope and difficulty, but for a maximum of an additional 2 months, which the administrator will also inform the individual about. Individuals can exercise their rights free of charge, as long as they are exercised in accordance with the principle of proportionality. If the request from the individual is excessive, unfounded or if it is repeated, the company may issue an invoice to the individual for the payment of a reasonable amount consistent with the scope of the request. The company can also reject such claims with reason.

 

If the user believes that his rights from these privacy conditions have been violated, he has the right to file a complaint with the competent supervisory authority - the Office of the Information Commissioner.

 

COPYRIGHT

Texts, photographs and audiovisual works on the website

The contents, texts, images, videos and other audiovisual works on the operator's website are owned or owned by the operator, which is why it is prohibited to copy them or use them in any other way outside the needs of cooperation between the operator and the user, unless otherwise stated on the website. Any infringement of copyright is considered a violation of intellectual property rights and may be subject to initiation of appropriate legal proceedings by the operator.

 

FINAL PROVISIONS

1. The privacy terms apply to all users who provide the controller with personal data for management and further processing. They are also binding for the controller and processors when processing personal data.

2. Any disagreements between the operator and the user shall be resolved amicably. If an amicable settlement is not possible, the court in the Republic of Slovenia based on the seat of the controller is competent to resolve the dispute.

3. Contact person and contact for providing information regarding personal data: Leon Lah, leon@lagerhof.eu

 

The privacy conditions apply from: 03.12.2024