Parmova ulica 53, 1000 Ljubljana  I  +386 40 520 257  I  office@valeovita.si

GDPR

Privacy Policy

INTRODUCTION

The purpose of this Privacy and Cookie Policy (“Policy”) is to inform subscribers, users, customers, and other persons (hereinafter also referred to as: “individual”) about the purposes and legal basis for the processing of personal data by Valeovita d.o.o., Parmova ulica 53, 1000 Ljubljana (hereinafter: the “Controller”), as well as the rights of individuals in this area.

This Policy applies to the following website: www.valeovita.si, operated by Valeovita d.o.o., Parmova ulica 53, 1000 Ljubljana (hereinafter: “Valeovita d.o.o.”).

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter: the General Data Protection Regulation – GDPR) and the Personal Data Protection Act (Official Gazette of the Republic of Slovenia, No. 163/22, ZVOP-2), this Policy includes the following information:

  1. Contact details of the company and the contact of the person responsible for personal data protection,

  2. The purposes, legal bases, and types of processing of various categories of personal data of Individuals, including profiling,

  3. Disclosure of data to third parties and to third countries,

  4. Retention periods for individual categories of personal data,

  5. Rights of Individuals regarding the processing of personal data,

  6. The right to lodge a complaint regarding the processing of personal data.

Where appropriate, the provisions relating to individuals also apply to issues of secrecy and confidentiality of communications of users who are legal entities.

This Policy applies to the user from the moment of their first visit to the website and during all subsequent visits. By using the website, the user confirms that they have read, accepted, and agree with all provisions of this Policy. The Policy may be amended or supplemented at any time without prior notice. By continuing to use the website after changes to this Policy, the user confirms their agreement with the changes.

The Controller (and website provider) is: Valeovita d.o.o., Parmova ulica 53, 1000 Ljubljana (hereinafter: the “Controller”), VAT ID number: SI38908395, e-mail: office@valeovita.si.

The Controller has not appointed a Data Protection Officer, as personal data is not processed on such a scale as to require this obligation. Since your privacy is extremely important to us, you may always contact us with questions regarding the processing of your personal data via the e-mail address listed above.

The company undertakes to protect the confidentiality of personal data and the privacy of website participants and users and will take all necessary measures to protect them from any violations or misuse, as protecting users’ privacy is very important to us.

LEGAL BASIS

At Valeovita d.o.o., personal data is processed in accordance with the applicable Personal Data Protection Act (ZVOP-2), the General Data Protection Regulation (GDPR), and the Rules on the Protection of Personal Data at Valeovita d.o.o., which regulate the processing of personal data, security procedures and measures, including responsibility and supervision in the processing process.

PROCESSING OF PERSONAL DATA

Valeovita d.o.o. does not collect consumers’ personal data without a legal basis. The provider processes personal data based on the individual’s consent, a concluded contract, or applicable law.

Every user of the website www.valeovita.si who enters personal data on our website also gives active consent for the processing of personal data based on a specific form submitted before sending an inquiry/order/subscription to e-newsletters.

The provider collects the following data about users of our websites:

  • Subscription to e-newsletters: name and e-mail address;

  • Inquiry/contact forms: first name, surname, phone number, e-mail address;

  • Any other data voluntarily provided by the user to the company.

By clicking the button “I agree with the terms and conditions” and “I agree with the privacy policy,” the customer/user confirms that before registration they were properly informed in writing about the scope and purpose of the processing of personal data referred to in the previous paragraph (the scope and purpose of processing are also stated next to each web form on our websites), as well as those obtained by the Controller based on these general terms and the privacy policy during the process of purchasing goods from the Controller, particularly relating to the following circumstances:

  • Types of purchases (type of product);

  • The language used by the customer;

  • Customer location;

  • Whether the customer uses a smartphone, personal computer, or tablet, and the operating system used;

  • Information regarding the user’s use of the Controller’s website (dates and times of website visits, visited pages or URLs, time spent on each page, number of pages visited, total time spent on the website, settings used on the website);

  • The type and version of the browser used to access the website.

The provider processes IP addresses of devices through which users access the website.

The provider uses “cookies” on the website to recognize users; however, users cannot be identified in this way, meaning that the collected data alone cannot reveal the user’s name, surname, or other identifying information.

The collected data will be used exclusively for the provision of services offered by Valeovita d.o.o. and only for purposes and within the scope for which the customer/user has been clearly informed in advance.

If personal data is used for marketing or advertising purposes through direct contact with the customer, the Controller will clearly label such messages as advertising and inform the customer about the possibility and method of unsubscribing from receiving such messages.

Valeovita d.o.o. undertakes not to disclose personal or other data to third parties or allow third parties access to such data without explicit permission, except if required by state authorities, if such an obligation is prescribed by law, or for the purposes of court or other official proceedings.

PURPOSE OF DATA PROCESSING

The provider will use the collected user data exclusively for the following purposes:

  • Sending offers based on received inquiries, telephone contact regarding orders of goods/services or conclusion of sales contracts, sending invoices, and performance of sales contracts;

  • Maintaining customer records;

  • Informing users about novelties and offers of Valeovita d.o.o., Parmova ulica 53, 1000 Ljubljana;

  • Occasional sending of e-mails (if the individual subscribes to receive our e-mails) containing website-related content, promotional offers, notifications, articles, current events, and benefits offered by Valeovita d.o.o.;

  • Delivery of requested products/information;

  • Statistical, marketing, and other analyses and research related to website users for the purpose of improving the provider’s services and offers.

DISCLOSURE OF DATA

Disclosure of data to third parties and transfer of data to third countries (countries outside the European Union or the European Economic Area).

Where consistent with the purpose of processing and in accordance with EU and Slovenian law, the company may disclose personal data to:

  • Persons performing specific processing tasks for the company, such as invoice preparation and dispatch, data analytics, maintenance and development of services, where such tasks necessarily involve personal data processing;

  • Persons providing sales and marketing services for the company, including field sales and marketing, or cooperating with the company in the marketing and sale of its own or third-party services, to the extent necessary for such tasks within the purposes and legal bases defined in this Policy;

  • Delivery service providers in case of product orders and deliveries — transfer of certain personal data will be carried out based on your consent and limited to data necessary for delivery (order number, name and surname, contact number, and delivery address).

Collected personal data is not disclosed to other third parties or transferred to third countries without an adequate level of protection. Your personal data may be transferred to the USA (within the scope of website analytics and e-mail notification service providers), whereby appropriate agreements are concluded with all contractual processors in the USA.

If the company merges with or is acquired by another company, personal data will be transferred to the acquiring company in accordance with the law. By using our services, you agree to the continued processing of your personal data by the acquiring company.

DATA PROTECTION AND RETENTION PERIOD

The provider uses appropriate technological and organizational measures to protect the transfer and storage of personal data.

Billing data and related contact information may be stored for the purpose of fulfilling contractual obligations until full payment for services has been made, or at the latest until the expiration of limitation periods related to individual claims, which may legally range from one to five years. Invoices are stored for 10 years after the end of the year to which the invoice relates, in accordance with VAT legislation.

If traffic data is processed based on the individual’s consent for marketing services, sale of goods, or provision of value-added services, such data may be processed for as long as necessary for such marketing or services. All other data obtained for notification and direct marketing purposes is stored until consent is withdrawn.

The provider ensures the protection of personal data in accordance with this Policy and the requirements for personal data protection prescribed by Slovenian legislation (ZVOP-2) and the GDPR.

The user acknowledges and agrees that the provider stores the data submitted during registration for as long as the user has the status of a registered user in the provider’s applications or is subscribed to e-newsletters, and for one additional year after termination of such status or unsubscription from newsletters. Other data may be stored only as long as necessary to achieve the purpose for which it was collected, after which it is permanently deleted or effectively anonymized so that it can no longer be linked to a specific user.

Personal data collected based on the individual’s explicit consent is processed for the purposes defined by the consent and stored until consent is withdrawn.

The user is also responsible for protecting their personal data by ensuring the security of their username and password and appropriate software (antivirus) protection of their computer.

RIGHTS OF USERS / CUSTOMERS UNDER THE GDPR

Regarding your personal data that we process, you have the right to:

  • Withdraw your consent to the processing of personal data at any time (withdrawal does not affect the lawfulness of processing carried out prior to withdrawal). If you only wish to update personal data, you may do so in your website account;

  • Obtain confirmation as to whether we process your personal data;

  • Access your personal data and receive a copy of such information, including information on processing purposes, categories of personal data, transfers to third countries or international organizations, etc.;

  • Request correction of inaccurate personal data concerning you without undue delay and completion of incomplete data;

  • Request deletion (“right to be forgotten”) where processing is no longer necessary for the purposes for which the data was collected or otherwise processed, or where consent has been withdrawn, etc.;

  • Restrict processing in certain cases, such as where the accuracy of data is contested;

  • Data portability — receive personal data in a structured, commonly used, and machine-readable format and transfer it to another controller in certain cases;

  • Object at any time to the processing of personal data based on our legitimate interests, including direct marketing and profiling related to direct marketing;

  • Not be subject to decisions based solely on automated processing, including profiling, producing legal effects concerning you or similarly significantly affecting you. If such a decision is necessary for entering into or performing a contract with you or based on your explicit consent, appropriate safeguards will be implemented, including the right to human intervention, expression of your own point of view, and contesting the decision;

  • Lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. Complaints may be submitted to the Information Commissioner, Dunajska 22, 1000 Ljubljana, e-mail: ip@ip-rs.si, telephone: +386 1 230 97 30, website: www.ip-rs.si.

For all the rights listed above, you may contact us at any time via e-mail at office@valeovita.si.

We will ensure that your request is fulfilled without undue delay and no later than 30 days after receiving the request. Requested personal data will be provided in a structured, machine-readable, and commonly used format. The first copy of your personal data in electronic or physical form is free of charge; additional copies may incur reasonable costs covering preparation expenses.

The user may exercise their rights at any time by e-mail at office@valeovita.si or in writing to Valeovita d.o.o., Parmova ulica 53, 1000 Ljubljana.

These rights do not release you from obligations under the General Terms and Conditions or any contract concluded with Valeovita d.o.o.

LINKS TO OTHER WEBSITES

Our websites may contain links to third-party websites. These websites have their own privacy policies, with which you should familiarize yourself, as we assume no responsibility for them.

Social Media Links

Our website contains links to social media platforms (social media plugins), including Facebook and Instagram. Clicking their icons redirects you to those social networks. The processing of personal data collected by social networks when you click the plugin and are redirected is carried out by those social networks in accordance with their privacy policies available at:

DISCLAIMER

The provider is not responsible for any damage incurred by the user due to providing incorrect, incomplete, or outdated data when making inquiries/subscribing to e-newsletters or at a later stage.

The operator of the website www.valeovita.si kindly requests that users who do not agree with this Policy or its amendments leave the website and refrain from using it in the future.