Personal data protection

The purpose of the privacy policy and, in this context, the protection of the personal data of users of the seller's website, is to inform the seller of how he collects their personal data, for what purposes he uses them, how he keeps them and what their rights are.

The seller respects their privacy and undertakes to carefully protect the personal data obtained through his online information system and not to pass it on to a third party or use it for other purposes without their consent. Because there are certain links in the company's online information system to other, external websites that are not directly linked to it, the company does not assume any responsibility for the protection of their personal data on these websites.

In order to prevent unauthorised access to or disclosure of personal data obtained, to maintain their accuracy and to ensure proper use, the company uses appropriate technical and organisational procedures to secure the data it collects. Nevertheless, the company cannot rule out the possible misuse of their personal data, as the Internet is still a rather unpredictable medium, despite security measures and security communication protocols.

Owner, controller and administrator of personal data

Definition of “owner of the Website” and “controller or administrator of personal data (administrator)” within the meaning of the General Data Protection Regulation (GDPR) is:

Consent

The personal data you provide by submitting any of our web forms is processed with your explicit and unequivocal consent based on article 6 (1), (a) of the European Union General Data Protection Regulation (GDPR).

You consent to personal data processing by the Direct4me when using the Website and clicking “Submit” on the web form pages. The administrator will provide an option for your consent whenever necessary without the confirmation window. User's personal consent is the exercise of their free will that their personal data can be processed for a certain purpose, based on information provided and guaranteed by the administrator in this privacy policy.

In addition, the user specifically agrees, without limitations, with his personal data being processed for the purpose of pre-contractual processes and contract signing and fulfilment, as well as, without limitations, for post-contract processes.

You can withdraw your consent at any time by sending a written notice to us by regular mail or to our email address at [email protected]. In such a case, we will not use your personal data for purposes described in the above paragraph anymore. Such withdrawal of consent does not affect the legality of the processing of your personal data prior to your withdrawal.

Data retention periods

Data collected by the Website administrator is retained for the use of the administrator in accordance with the terms and purposes specified in this Privacy Policy. Personal data is stored on the Website (as enquiries or contact forms) and in cases of additional processing and communication with the user, on related other databases of the company (such as CRM, software for merchandise management etc.).

Data retention periods may be subject to regulation in sector legislation (e.g. accounting, tax). Different sector legislation provides for mandatory retention periods which require the Direct4me to delete personal data after the expiry of the data retention period.

Your rights

In accordance with the current law and the EU's General Data Protection Regulation (GDPR), you have the right to access, amend, delete (the right to be forgotten), and port your data and restrict the processing of your data and have the right to object at any moment.

If you would like to exercise any of your rights or to make a formal complaint regarding how the Direct4me have processed your personal data, you can contact us by sending as a written notice to Ob železnici 22, 1000 Ljubljana, Slovenia or to our email  [email protected]. Your request will be analysed and answered in accordance with the GDPR legislation.

If the user believes that his rights or regulations on personal data protection have been violated, he can complain to the competent state authority: Information Commissioner of the Republic of Slovenia, Zaloška 59, 1000 Ljubljana, or by phone: 01 230 97 30, fax: 01 230 97 78, or by e-mail: [email protected].
You may also file a complaint with the data protection supervisory authority of the EU member country, where you have a permanent residence.  Click here   for the contact information of your local authority.