We will not retain, process or transmit the information received without your consent.
PRIVACY POLICY
ALUTECH's Privacy Policy Production, Services, Trade, Ltd., Industrial Road 1, Grosuplje, 1290 Grosuplje, Tax ID SI: 29877741, Registration Number: 1797280000 (hereinafter: the Company)
About privacy policy
The purpose of the Personal Data Protection Policy (hereinafter: the Policy) is to inform Subscribers of Users and other persons (hereinafter: Individuals) about the purposes and basis of the processing of personal data by the company and the rights of Individuals in this field. At the same time, this Policy further clarifies consent for data processing. The Policy complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (hereinafter referred to as the General Regulation on data protection) covered by the following information:
• the contact information of the company and the contact of the Data Protection Officer,
• the purposes, bases and types of processing of the various types of Personal Data of Individuals, including the profiling of Personal Data of Individuals,
• providing information to third parties and to third countries,
• retention time of individual types of personal data,
• the rights of Individuals with regard to the processing of personal data,
• the right to lodge a complaint regarding the processing of personal data.
Where applicable, the provisions relating to Individuals shall also apply to matters of confidentiality and confidentiality of communications of users having legal personality. Controller and Data Protection Officer The controller of the personal data of the Individuals processed in accordance with the Privacy Policy is ALUTECH Manufacturing, Services, Trade, Ltd., Industrijska cesta 1, Grosuplje, 1290 Grosuplje, Tax ID SI: 29877741, Registration Number number: 1797280000.
The purposes of processing and the basis for data processing
Contract Based Processing: The company processes the personal data of individuals for the purpose of notifying new records on the Website, for direct marketing purposes, for segmentation purposes.
In the exercise of rights and the fulfillment of contractual obligations, an enterprise processes personal data of individuals for the following purposes:
• Email address and name (for informational purposes, sending newsletters)
• Telephone number (for the purpose of notifying the provision of a business service)
• Home address (to fulfill payment obligations - create and send invoices)
• Company information (to fulfill payment obligations - create and send invoices).
Law-based processing:
The Company processes the personal data of Individuals for the purpose of entering into, executing, monitoring and terminating a subscription. Consent processing for processing personal data: Data processing may be based on the consent given by the individual to the company. Consent may, for example, relate to providing information on a quote and service, preparing an offer tailored to the user's individual habits, or providing value-added services. Notification is done through the channels selected by consent of the Individual.
Email notification involves the submission of an email address to an external processor in order to display company advertisements while browsing the web third party services or services, to the extent necessary for such tasks within the purposes and grounds set out in this Policy.
If the company is affiliated or. taken over by another company, personal data is transferred to the transferee in accordance with the law. By using our services, you consent to the further processing of your personal information by the transferee.
Retention period for personal information:
The billing information and associated contact details of individuals may be kept for the purpose of fulfilling their contractual obligations until full payment of the service, or until the expiry of the limitation periods in respect of an individual claim, which may be from one to five years by law. Accounts shall be kept for 10 years after the end of the year to which the account relates in accordance with the law governing value added tax. Where traffic data are processed on the basis of the individual's consent for the purpose of marketing services, selling goods or providing value-added services, such data may be processed to the extent necessary for such marketing or services. All other information obtained for information and direct marketing purposes shall be retained until revoked.
Individuals' rights in relation to the processing of personal data:
The company guarantees individuals the exercise of their rights without undue delay and in any event within one month of receiving the request. An entity may extend the period for exercising an individual's rights by up to two additional months, taking into account the complexity and number of requirements. If the company extends the deadline, it shall notify the individual of any such extension within one month of receipt of the request, together with the reasons for the delay. The company accepts requests regarding the rights of the individual by telephone, at 01-786-52-88 or by e-mail info@alutech.si. Where the data subject submits a request by electronic means, the information shall, where possible, be provided by electronic means, unless otherwise requested by the data subject. Where there is reasonable doubt as to the identity of the Individual who submits the request regarding any of his rights, the entity may require the provision of additional information necessary to confirm the identity of the data subject. If the requests of the data subject are manifestly unfounded or excessive, especially as they are repeated, the undertaking may: charge a reasonable fee, taking into account the administrative costs of transmitting the information or message or taking the requested action, or refuse to take action on the request .
Individuals are granted the following rights in relation to the processing of personal data by an enterprise:
• the right to access data,
• the right to rectify,
• the right of erasure (the "right to forget"),
• the right to restrict processing,
• the right to data portability.
Right of access to data:
The data subject has the right to obtain from the company an acknowledgment of the processing of personal data and, where applicable, access to personal data and additional information concerning the processing of personal data, including:
• purposes of processing;
• types of personal data;
• users or categories of user to whom personal data have been or will be disclosed, especially to users in third countries or international organizations;
• where possible, the envisaged period of retention of personal data or, where this is not possible, the criteria used to determine that period;
• the existence of the right to request from the controller the correction or deletion of personal data or restrictions on the processing of personal data in relation to the data subject or the existence of the right to object to such processing;
• the right to lodge a complaint with the supervisory authority;
• where personal data are not collected from the Individual, all available information regarding their source;
• the existence of automated decision-making, including the creation of profiles, and meaningful information about the reasons for it, as well as the importance and anticipated consequences of such processing for the individual.
Upon request of the individual, the company provides a copy of his or her personal information that is being processed. For additional copies of the information required by the Data subject, the company may charge a reasonable fee, taking into account the administrative costs.
Right of correction:
The data subject has the right to have the company rectify inaccurate personal data regarding him without undue delay. The data subject has the right to complete incomplete personal data, including the submission of a supplementary statement, taking into account the purposes of the processing. Right of erasure ("right to be forgotten") Individual, at the data subject has the right to complete incomplete personal data, including the submission of a supplementary statement, having regard to the purposes of the processing. Right of erasure (“right to be forgotten”) The data subject has the right to have the business delete personal data relating to him or her without undue delay, and the company has the obligation to delete personal data without undue delay:
• when personal data are no longer needed for the purposes for which they were collected or otherwise processed;
• when the Individual withdraws the consent which is the basis for the processing of the data, there is no other legal basis for the processing;
• where the Individual objects to processing on the grounds of the legitimate interest of the enterprise, however, there are no overriding legitimate reasons for processing;
• where the Individual objects to processing for direct marketing purposes;
• where personal data need to be deleted in order to fulfill a legal obligation in accordance with EU or Slovenian law; in the case of information relating to the provision of information society services improperly collected from a child who cannot provide such information in accordance with applicable law.
In the case of directory information or otherwise published information, the company takes reasonable steps, including technical ones, to inform the processors of the personal data that the data subject requires them to delete any links to that personal data. but copies thereof.
Right to Restrict Processing:
The data subject is entitled to have the undertaking restrict the processing where:
• The individual disputes the accuracy of the data for a period allowing the controller to verify the accuracy of the personal data;
• the processing is illegal and the Individual opposes the deletion of personal data and instead requests a restriction on their use;
• The company no longer needs the personal data for processing purposes, but rather
• the data subject needs to make, enforce or defend legal claims;
• the individual has filed an objection regarding the processing until it is verified that the controller's legitimate reasons outweigh the data subject's reasons.
Right to data portability:
The data subject has the right to receive personal data relating to him held by the enterprise in a structured, commonly used and machine-readable form and to pass that information on to another controller without the company to which the personal data were provided hindered him when:
• processing is based on the consent of the Individual or the contract and the processing is performed by automated means.
Right to contract:
The data subject shall have the right to object to the processing of personal data at any time on grounds relating to his or her particular situation, provided that it is based on the legitimate interests pursued by the undertaking or a third party. the enterprise ceases to process personal data unless it demonstrates compelling reasons for processing that outweigh the interests, rights and freedoms of the Data subject or for the enforcement, enforcement or defense of legal claims. Where personal data are processed for direct marketing purposes, the individual has the right to object at any time to the processing of personal data relating to him for the purposes of such marketing, including profiling, insofar as it is related to such direct marketing. To the extent that direct marketing is based on consent, the right of objection may be exercised by withdrawing the personal consent given.
Right to lodge a complaint regarding the processing of personal data:
An individual may report any complaint regarding the processing of personal data to01-786-52-88 or by e-mail info@alutech.si, or by post to:
Industrijska cesta 1, 1290 Grosuplje.
Likewise, any data subject has the right to lodge a complaint directly with the Information Commissioner if he / she considers that the processing of personal data concerning him / her violates Slovenian or EU data protection regulations.
If an individual has exercised the right of access to data at a company and after receiving the decision of the company, considers that the personal data he received are not the personal data he has requested or that he has not received all the requested personal data, he may the authorized representative shall file a reasoned complaint with the company within 15 days. The company must decide on the complaint as a new request within five business days.
Validity of the Policy
This Policy is published on the website http://www.alutech.si/ and will enter into force on 20.5.2019.