Agitavit Solutions d.o.o. company is aware of the responsibility related to the processing of personal data of its customers, potential customers, site visitors of Agitavit Solutions d.o.o. and all individuals who disclose their personal information when contacting us. We have therefore brought our operations into line with the Personal Data Protection Act (PDPA-1, Official Gazette of the RS, no. 94/2007) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “General Data Protection Regulation”).
Expressions such as “controller”, “processing”, “restriction of processing”, “processor”, “profiling”, “pseudonymisation”, “third person” and “company” shall have the meaning as defined by the General Data Protection Regulation.
The data controller is company Agitavit Solutions d.o.o., Letališka cesta 33F, 1000 Ljubljana.
Contact addresses for personal data protection:
Personal data protection
Agitavit Solutions d.o.o.
Letališka cesta 33F, 1000 Ljubljana
gdpr@agitavit.si
Personal data is information that identifies you as an identified or identifiable individual. A user is identifiable when it can be directly or indirectly determined, in particular by specifying identifiers such as name, identification number, location data, online identifier or an indication of one or more factors that are specific to the user’s physical, physiological, genetic, mental, economic, cultural or social identity.
In accordance with the purposes defined below, the controller collects the following personal information:
The controller does not collect or process user’s personal information, except where the latter allows it or consents to it, i.e. when ordering products or services, when subscribing to a newsletter, participating in a lottery, etc., where there is a legal basis for the collection of personal data, the processing is necessary for the enforcement of contractual obligations, or where the processing is necessary for legitimate interests pursued by the controller (hereinafter “legitimate interest”).
Agitavit Solutions d.o.o. will process your personal data for one of the purposes listed below based on the following legal bases:
Agitavit Solutions d.o.o. will process your personal information only for the purposes for which it has acquired it and will not process it for purposes incompatible with the purposes for which it was collected. Agitavit Solutions d.o.o. collects only those personal data from the user that are necessary to achieve a particular purpose.
3.1 Processing to fulfil contractual obligations
In certain cases, the processing of personal data is necessary for the fulfilment of contractual obligations of the controller. In the event that a user does not provide the necessary information, the controller cannot enter into contracts with the user or perform services.
The controller will process your personal data for the fulfilment of contractual obligations for the following purposes:
In all cases where you give consent for the processing of your personal data, you can cancel this consent at any time via the contact addresses for personal data protection.
The user can manage or cancel the consent given for specific purposes or give consent for other purposes of processing of their personal data via the contact addresses for personal data protection.
3.3 The processing is necessary to meet the legal obligations of Agitavit Solutions
Your personal information is also processed where required by law. For example, the purpose of such processing is the processing of your personal data for the purposes of judicial or administrative procedures.
3.4 Processing on the basis of a legitimate interest pursued by Agitavit Solutions
The controller may process data on the basis of a legitimate interest, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. In the event of a legitimate interest, the controller always carries out an assessment in accordance with the General Data Protection Regulation.
In certain cases, in order to further process your personal data collected on the basis of one of the abovementioned legal bases (consent, contract) due to a legitimate interest, Agitavit Solutions d.o.o. may adopt certain safeguards to protect your personal information, such as pseudonymisation, encryption, processing in aggregated form and/or deletion of certain types of personal data.
Based on the legitimate interest, Agitavit Solutions d.o.o. will process your personal information for the following purposes:
Your personal data may be accessed only by employees of Agitavit Solutions d.o.o. and by processors of personal data which are directly authorized. Agitavit Solutions d.o.o. will never forward your personal data to unauthorized third parties.
By using Agitavit Solutions d.o.o. web sites and other services, you agree that Agitavit Solutions d.o.o. trusts individual tasks associated with your personal data to processors listed below. These processors may process your personal information solely on behalf of and in accordance with written instructions of Agitavit Solutions d.o.o., within the limits of its powers, as set out in the contract between Agitavit Solutions d.o.o. and processors, and in accordance with the purposes for which it was collected. Processors of your personal data may not in any event use them to pursue any personal interests.
Agitavit Solutions d.o.o. cooperates with the following processors:
The controller does not process the data for longer than is necessary to achieve the purposes for which personal data have been collected and further processed. Personal data processed by Agitavit Solutions d.o.o. for the performance of contract are kept by Agitavit Solutions d.o.o. for the period which is necessary for the execution of the contract and 5 years after its termination, except in cases where there is a dispute between you and the controller concerning the contract. In this case, Agitavit Solutions d.o.o. keeps data for 5 years after the final judicial or arbitral decision or settlement, or if there is no litigation, 5 years from the date of an amicable settlement.
Personal data processed by Agitavit Solutions d.o.o. on the basis of the law are kept by Agitavit Solutions d.o.o. for the period prescribed by law. Personal data processed by the controller based on your personal consent or legitimate interest are kept by Agitavit Solutions d.o.o. permanently, until your consent is revoked or until a request is made to discontinue processing. Agitavit Solutions d.o.o. shall delete such data before cancellation only in the event that the purpose of the processing of personal data has already been made or if the law so provides.
After the expiration of the retention period, Agitavit Solutions d.o.o. will effectively and permanently delete or anonymise your personal information so that it will no longer be associated with you.
In accordance with the General Data Protection Regulation, Agitavit Solutions d.o.o. provides the following rights regarding the protection of personal data, which are discussed in more detail below:
You have the right to obtain confirmation from Agitavit Solutions d.o.o. as to whether your personal data are processed, and if so, you have the right to obtain access to your personal data and the following information concerning the processing of personal data:
Based on your request, Agitavit Solutions d.o.o. will provide you with one free copy of your personal data being processed. Any additional copies of data that you should require will be charged a reasonable fee by the company to take into account administrative costs.
You have the right to request from Agitavit Solutions d.o.o. to correct, without undue delay, any inaccurate personal data relating to you. Considering the purposes of the processing, you are entitled to the completion of incomplete personal data, including the presentation of a supplementary declaration.
You have the right to request from Agitavit Solutions d.o.o. to delete your personal information without undue delay; the company shall delete your personal information, without undue delay, in the following cases:
Where Agitavit Solutions d.o.o. transmits your personal information, it shall take reasonable steps, including technical, to inform the processors who process your personal information that the data subject requires from the controller to erase any links to these personal data or copies thereof.
You have the right to receive personal data relating to you in possession of Agitavit Solutions d.o.o., in a structured, widely used and machine-readable form, and the right to forward such information to another controller, without Agitavit Solutions d.o.o., for whom the data was provided, hampering you, where:
On grounds related to your particular situation, you have the right, at any time, to object to the processing of personal data if this is based on the legitimate interests pursued by Agitavit Solutions d.o.o. or a third party. Agitavit Solutions d.o.o. will cease to process personal data, unless it proves compelling reasons for processing that outweigh your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. Where personal data are processed for direct marketing purposes, you have the right, at any time, to object to the processing of your personal data for such marketing purposes, including profiling, if it is associated with such direct marketing. Where direct marketing is based on consent, the right of reply can be made by cancelling the given personal consent.
All the above-mentioned requirements which relate to the exercise of rights in connection with your personal data may be addressed in writing to the controller by using the contact addresses for personal data protection. If you submit your request in accordance with the above paragraph by electronic means, the information, to the extent possible, will be provided to you by electronic means, unless you request otherwise.
For the purposes of reliable identification in the event of exercising your rights with respect to personal information, the controller may request additional information from you needed to confirm your identity; it may refuse to act in accordance with this chapter only in the event that it proves that you cannot be reliably identified.
The request by which you exercise your rights in relation to your personal data will be responded without undue delay and no later than one month from receipt of the request. Agitavit Solutions d.o.o. may extend the limit for exercising the rights for up to two additional months, considering the complexity and the number of requests. Where Agitavit Solutions d.o.o. extends the deadline, you will be notified of any such extension within one month of receipt of the request together with the reasons for the delay.
Where, in accordance with this chapter, your requests are manifestly unfounded or exaggerated, especially since they are repeated, Agitavit Solutions d.o.o. may:
Any complaint with regard to the processing of your personal data may be directed to the contact addresses for personal data protection.
You have the right to lodge a complaint directly with the Information Commissioner if you think that the processing of personal data relating to you violates Slovenian rules or regulations of the European Union in the field of personal data protection.
Valid from 25 May 2018 onwards and may be amended or supplemented at any time.