Privacy Policy

Personal data protection policy - GDPR 

• 1) About the personal data protection policy of Gajcom d.o.o. With this document, we want to communicate as simply as possible how the company Gajcom d.o.o., Pot heroja Trtnika 45, 1000 Ljubljana (hereinafter: Gajcom) collects, stores and processes personal data and manages the rights of individuals in the field of personal data protection (GDPR ). The Policy is in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals in the processing of personal data and on the free flow of such data and on the repeal of Directive 95/46/EC (hereinafter the General Regulation on data protection), the following information is covered: contact information of the company and authorized person for data protection, purposes, bases and types of processing of various types of personal data of individuals, including profiling of personal data of individuals, transfer of data to third parties and to third countries, storage time of individual types of personal data, the rights of individuals in relation to the processing of personal data, the right to file a complaint regarding the processing of personal data. Where applicable, the provisions relating to individuals also apply to issues of secrecy and confidentiality of communications of users who are legal entities.

   

• 2) Administrator and authorized person for data protection The manager of the personal data of individuals that are processed in accordance with the Personal Data Protection Policy is Gajcom d.o.o. In Gajcom d.o.o. no special authorized person for data protection has been appointed, but we can be reached for additional questions in this regard at the email address [email protected]. 

• 3) Processing purposes and basis for data processing Processing on the basis of a contract or business - Gajcom d.o.o. stores and processes personal data of individuals in order to fulfill its obligations from the contractual relationship, this includes processing orders, communicating with the customer in the process of processing the order, issuing invoices, informing about the status of the order and delivery of services and goods. The data of individuals who order online is stored in the online store database, and the data of individuals who buy via e-mail is stored in the accounting system. We use the data of customers who order physically in the store for the purposes of processing the order and handing over the goods or service. 

• 4) Storage of personal data We store personal data about individuals for legitimate business interests (issuance of invoices, guarantees, records for possible re-orders) for an indefinite period of time.

• 5) Processing of personal data based on the law In accordance with the General Data Protection Regulation, direct marketing is also a legitimate interest. For the purposes of direct marketing, Gajcom may also create profiles of individuals without consent based on basic information about past orders, expressed interest or lack of interest in certain services or goods. Such basic profiling will never include traffic data or the content of electronic communication services. The individual can object to the aforementioned processing or in every message he receives from Gajcom d.o.o., he has the option to request an unsubscribe from an individual set of notifications or until afternoon deletion (deletion of legally defined data related to a business contract is not possible when we have to keep the data for business legal reasons or for protection individual rights) Based on a legitimate interest, Gajcom d.o.o. can contacts individuals for the purposes of determining their satisfaction with the services or the user experience, even in cases where this is not absolutely necessary for the performance of the contract. Due to the weighing of this interest with the interests of the individual, Gajcom does not contact again those individuals who objected to it.

• 6) Processing based on consent for the processing of personal data: Data processing may be based on the consent given by the individual to Gajcom d.o.o. Consent may, for example, refer to information about offers and services, preparation of offers adapted to individual user habits or provision of value-added services. Notification is carried out through the channels chosen by the individual (natural person or authorized representative of a legal entity). The individual to whom the personal data relates can withdraw or change their consent at any time in the same way as the consent was given or in another way as defined by Gajcom d.o.o., whereby Gajcom d.o.o. reserves the right to identify the customer. Change of consent can be arranged via the online store, via contact e-mail or at the Gajcom d.o.o. headquarters. Withdrawal or change of consent only applies to data processed on the basis of consent. The last given consent of the individual received by Gajcom is valid. The possibility of revocation of consent does not constitute the right to resign in the individual's business relationship with Gajc d.o.o. Where consent includes direct marketing based on an individual's profile, Gajcom may perform profiling of the individual based on past purchases. Data for which consent is given is processed indefinitely in the absence of revocation.

• 7) Transmission of data to third parties and transmission of data to third countries (countries that are not members of the European Union or the European Economic Area) Gajcom forwards personal data about customers in connection with the legal obligation to external accounting, which at a given moment has a contract on business cooperation with Gajcom d.o.o. All data is recorded in the business system, which enables the issuance of tax-certified invoices and collects all the data of clients, customers and potential customers who have contacted Gajcom d.o.o. The data is kept by the company with which Gajcom d.o.o. concluded a contract on business cooperation in connection with the management and processing of management documents. Gajcom does not forward data to other third parties, even to third countries.

• 8) Personal data retention period Data on issued invoices and related contact data on individuals are kept for the purpose of fulfilling contractual obligations until full payment for the service, or at least until the expiration of the statute of limitations in relation to an individual claim, which by law can be from one to five years. Invoices are kept for 10 years after the end of the year to which the invoice refers, in accordance with the law governing value added tax.

• 9) The rights of individuals in relation to the processing of personal data Gajcom d.o.o. ensures that individuals exercise their rights without undue delay and in any case within one month of receiving the request. Gajcom d.o.o. accepts requests regarding individual rights to the email address [email protected] or by post to the address Gajcom d.o.o., Pot heroja Trtnika 45, 1000 Ljubljana. an individual can also submit a request at the headquarters of Gajcom d.o.o. When a data subject submits a request by electronic means, the information shall be provided by electronic means whenever possible, unless otherwise requested by the data subject. When there is a legitimate doubt regarding the identity of an individual who submits a request regarding one of his rights, Gajcom d.o.o. may requires the provision of additional information necessary to confirm the identity of the individual to whom the personal data refer. individuals are provided by the company Gajcom d.o.o. the following rights in relation to the processing of personal data: the right to access data, the right to correct data, the right to delete data ("right to be forgotten"), the right to limit data processing, the right to data portability, the right to object

• 10) Right to access data The individual to whom the personal data relates has the right from the company Gajcom d.o.o. obtain information as to whether personal data is being processed in relation to him, and when this is the case, access to personal data and additional information related to the processing of personal data, including: processing purposes; types of personal data; users or categories of users to whom personal data has been or will be disclosed, in particular users in third countries or international organizations; where possible, the intended period of retention of personal data or, if this is not possible, the criteria used to determine this period; the existence of the right to request from the controller the correction or deletion of personal data or the limitation of the processing of personal data in relation to the individual to whom the personal data refer, or the existence of the right to object to such processing; the right to file a complaint with a supervisory authority; where personal data is not collected from an individual, all available information regarding its source; the existence of automated decision-making, including profiling, and meaningful information about the reasons for it, as well as the meaning and intended consequences of such processing for the individual. Based on the individual's request, the company Gajcom d.o.o. provide a copy of his/her personal data being processed.

• 11) Right to rectification The individual to whom the personal data relates has the right to obtain that Gajcom d.o.o. correct inaccurate personal data relating to him/her without undue delay. Taking into account the purposes of the processing, the individual to whom the personal data relates has the right to complete incomplete personal data, including the submission of a supplementary statement.

• 12) Right to erasure ("right to be forgotten") The individual to whom the personal data relates has the right to have Gajcom d.o.o. delete the personal data relating to him without undue delay, but he has the obligation to delete the personal data without undue delay: when personal data are no longer necessary for the purposes for which they were collected or otherwise processed; when the individual revokes the consent that is the basis for data processing, there is no other legal basis for the processing; when an individual objects to the processing based on the legitimate interest of Gajcom d.o.o., there are no overriding legal reasons for their processing; when an individual objects to processing for direct marketing purposes; when personal data must be deleted to fulfill a legal obligation in accordance with EU law or the Slovenian legal order; when it comes to data relating to the provision of information society services, improperly collected from a child who cannot provide such data in accordance with applicable legislation. In the case of directory or otherwise published data, take reasonable measures, including technical ones, to inform controllers processing personal data that the data subject requests them to delete any links to that personal data, or their copies.

• 13) Right to restriction of processing The data subject has the right to obtain restriction of processing when: - the individual disputes the accuracy of the data, namely for a period that allows the controller to check the accuracy of the personal data; the processing is illegal and the individual opposes the deletion of personal data and instead requests a restriction of their use; - the personal data is no longer needed for the purposes of processing, but the individual to whom the personal data relates needs them to assert, implement or defend legal claims; - the individual has filed an objection regarding the processing until it is verified whether the lawful reasons of the controller prevail over the reasons of the individual to whom the personal data refer.

• 14) Right to data portability Gajcom d.o.o. does not forward personal data to third parties even at the individual's request.

• 15) The right to object The data subject has the right, based on reasons related to his special situation, to object to the processing of personal data at any time if this is based on legitimate interests pursued by him or a third party. ceases to process personal data, unless it demonstrates imperative reasons for processing that override the interests, rights and freedoms of the individual to whom the personal data relates, or for the assertion, exercise or defense of legal claims. Where personal data is processed for the purposes of direct marketing, the individual has the right to object at any time to the processing of personal data relating to him for the purposes of such marketing, including profiling in so far as it is related to such direct marketing. If direct marketing is based on consent, the right to object can be exercised by withdrawing the given personal consent.

• 16) The right to file a complaint regarding the processing of personal data An individual can submit a possible complaint regarding the processing of personal data to Gajcom d.o.o. to the published contact information. Likewise, every individual to whom personal data relates has the right to file a complaint directly with the Information Commissioner if he believes that the processing of personal data in relation to him violates Slovenian or EU regulations in the field of personal data protection. If an individual has asserted the right to access data and, after receiving a decision, believes that the personal data he received is not the personal data he requested, or that he did not receive all the requested personal data, he can submit a reasoned statement to the Information Commissioner before filing a complaint complaint to Gajcom d.o.o. Within 15 days. mora Gajcom d.o.o. decide on the appeal as a new request within five working days.

• 17) Validity of the Policy This policy is published on www.Gajcom.si and comes into force on 5/25/2018, date of last revision 3/24/2022.

• All rights reserved.

Privacy Policy