General terms and conditions of sale for Slovenia
-
About the privacy policy
The purpose of the Hermi d.o.o. privacy policy (hereinafter: “privacy policy”) is to inform the users of the Hermi d.o.o. services and other persons (hereinafter: “individuals”) with the purposes and basis of personal data processing by the company Hermi, d.o.o., Trnoveljska cesta 15, 3000 Celje (hereinafter: “company”) and the individuals’ rights in this regard. The company pays special attention to the safety of your personal data. All personal data provided is treated confidentially and is used only for the purpose for which it was provided. We manage your personal data with the utmost care, taking into account the applicable legislation and the highest standards of its processing. We take care of the safety of your personal data, among other things, with appropriate organizational measures, work procedures and advanced technological solutions, as well as with the help of external experts in order to protect your personal data as effectively as possible. In doing so, we use an adequate level of protection and reasonable physical, electronic and administrative measures to protect the collected data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of personal data or unauthorized access to personal data transferred, stored or otherwise processed.
At the same time, this privacy policy further clarifies the consent you have given to the processing of your personal data.
In accordance with the Privacy policy regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and on the repeal of the Directive 95/46/EC (hereinafter: “General Data Protection Regulation”), the following information is covered:- company contact information,
- purposes, bases and types of processing of various types of personal data of individuals,
- retention time of individual types of personal data,
- the rights of individuals with regard to the processing of personal data,
- the right to lodge a complaint concerning the processing of personal data,
- validity of the privacy policy.
- Personal data, collected by the company
If you are only a visitor to the website, we only collect information about you using cookies. If you are a service user or a client, we also collect other personal data that we need in order to perform the services used or ordered. This personal data is:- name and surname
- contact e-mail address
- contact telephone number
- IP address
- information needed in order to issue an offer according to your inquiry (your address, tax number).
- Personal data controller
The controller of personal data, processed in accordance with this privacy policy, is Hermi, d.o.o., Trnoveljska cesta 15, 3000 Celje.
- Categories of individuals, whose personal data is being processed
This privacy policy is intended for anyone who has subscribed to and/or used our services or submitted an inquiry, as well as for those visiting our website.
- Purposes of processing and bases for data processing
5.1. Agreement based processing:
As part of the exercise of contractual rights and fulfillment of contractual obligations, the company processes your personal data for the following purposes: identification of an individual, preparation of an offer, conclusion of a contract, provision of services ordered, notification about possible changes, additional details and instructions on how to use the services, solving any possible technical issues, objections and complaints, billing and for other purposes necessary for the implementation or conclusion of a contractual relationship between the company and the individual.
When billing services, on the basis of tax regulations, we obtain and process your address for the correct issuance of the invoice.
5.2. Legislation based processing:
Based on a legitimate interest, we use your personal data to detect and prevent fraudulent use and misuse of services, further to ensure the stable and secure operation of our system and services, as well as to implement information security measures, meet service quality requirements and detect technical system and service failures.
Based on a legitimate interest, we also use your personal data for the purposes of possible enforcement, judicial and extrajudicial recovery.
In accordance with the General Regulation, the company may, in the event of suspected abuse, process individuals’ data to an appropriate and proportionate extent for the purpose of identifying and preventing possible fraud or abuse and may, if appropriate, pass this information on to other service providers, business partners and the police, the public prosecutor's office or other competent authorities. In order to prevent future abuse or frauds, data on the history of identified abuse or frauds in connection with the individual, which includes data on the subscription relationship and, for example, IP address, may be kept for five years after the termination of a business relationship.
5.3. Processing on the basis of consent for the processing of personal data:
Data processing may also be based on your consent, given to the company.
Consent may, for example, relate to the communication of offers, benefits and improvements to the services provided by the company. The purpose of such information is to bring the services as close as possible to your needs and desires and to increase their useful value to you. Informing is performed through the channels you have selected in the consent. You may revoke the consent at any time, as defined in the privacy policy.
You can withdraw or change your consent at any time in the same way as you gave it or in another way as defined by the privacy policy, while the company reserves the right to identify the customer. The change of consent can also be arranged via e-mail info@hermi.si or by a written request, sent to the address of the company's registered office.
Withdrawal or change of consent only applies to data, processed on the basis of your consent. The last consent we received from you is considered valid. The possibility of revoking the consent does not constitute a right of withdrawal from the business relationship of the individual with the company.
The data, for which your consent has been given and was later not revoked, is processed for up to two years after the termination of the business relationship with the company.
- Restrictions on the transmission of personal data
If necessary, we will authorize other companies and individuals to perform certain tasks that contribute to our services. In such event, the company may transfer personal data to such carefully selected external processors, who will conclude a contract with the company for the processing of personal data or similar or other binding document (hereinafter: “processing contract”). We will provide or make such data available to external processors only to the extent, required for a specific purpose. This data may not be used by the external processor for any other purpose, provided that it meets at least all the standards for the processing of personal data provided for by the applicable legislation. External processors are contractually obliged by the company to respect the confidentiality of your personal data.
On the basis of a reasoned request, companies also provide personal data to the competent state authorities with a legal basis for such inquiry. Hermi, d.o.o. will e.g. respond to requests from courts, law enforcement and other national authorities, which may also include national authorities from another EU member states.
- Data retention period
Data retention period is determined by the data category. We keep the data for a maximum of as long as is necessary to achieve the purpose for which it was collected or further processed, or until the expiry of the statute of limitations for the fulfillment of obligations or the legally prescribed retention period.
Accounting data and related contact data on individuals may be kept for the purpose of fulfilling contractual obligations until full payment of the service or until the expiration of the statute of limitations in relation to an individual claim, which may amount from one to five years. The invoices are kept for 10 years after the end of the year to which the invoice relates in accordance with the law, governing value added tax.
Other data, obtained on the basis of your consent, is kept for the duration of the business relationship and for 2 years after the termination, unless the law provides for a longer retention period. If the individual, who gave consent for the processing of personal data, has not entered into a business relationship with us, his consent is valid for 2 years from its submission or until its revocation.
At the end of the retention period, the data is deleted, destroyed, blocked or anonymised, unless otherwise provided by law for each type of data.
- The rights of individuals with regard to the processing of personal data
We guarantee the exercise of your rights in relation to the processing of your personal data without undue delay. We will decide about your request within one month of receiving it. In case of complexity and a large number of requests, the deadline can be extended by a maximum of two additional months. If we extend the deadline, we will notify you of any such extension within one month of receiving the request, together with the reasons for the delay.
We accept requests regarding the exercise of your rights via e-mail address info@hermi.si or via post to the address Hermi, d.o.o., Trnoveljska cesta 15, 3000 Celje.
Where you submit your request by electronic means, we will provide you with the information by electronic means whenever possible, unless you request otherwise.
Where there is reasonable doubt as to the identity of an individual who makes a request in relation to any of his or her rights, we may request the provision of additional information necessary to confirm the identity of the individual.
If the individual’s requests are manifestly unfounded or excessive, in particular because they are repetitive, the company may:
- charge a reasonable fee, taking into account the administrative costs of providing the information or communication or implementing the required action, or
- refuse to act on the request.
We grant you the following rights in relation to the processing of your personal data:
(i) the right of access to data
(ii) the right of rectification
(iii) the right to erasure (“the right to be forgotten”)
(iv) the right to processing restriction
(v) the right to data transmission
(vi) the right to object
(i) the right of access to data
You always have the right to know whether personal data in relation to you is being processed and, if so, access to personal data and the following information:
- the purpose of processing,
- the types of personal data being processed,
- users or categories of users to whom personal data has been or will be disclosed,
- the provided retention period of personal data or, if this is not possible, the criteria used to determine that period,
- the existence of a right to require the controller to correct or delete personal data or to restrict the processing of your personal data, or the existence of a right to object to such processing,
- the right to lodge a complaint with the supervisory authority,
- where personal data is not collected from you, all available information regarding the source.
(ii) the right of rectification
You have the right to have inaccurate personal data concerning you rectified without undue delay and, taking into account the purposes of the processing, the right to supplement incomplete personal data, including the submission of a supplementary statement.
(iii) the right to erasure (“the right to be forgotten”)
You have the right to have your personal data deleted without undue delay when one of the following reasons applies:
- when personal data is no longer necessary for the purposes for which it was collected for or otherwise processed,
- when you revoke the consent on the basis of which the processing takes place, and there is no other legal basis for the processing,
- when you object to the processing of data and there are no overriding legitimate reasons for the processing,
- when the personal data was processed without a legal basis,
- when personal data must be deleted in order to fulfill a legal obligation in accordance with EU or Slovenian legislation.
(iv) the right to processing restriction
You have the right to have the processing of your personal data restricted without undue delay when one of the following reasons applies:
- when you dispute the accuracy of the data for a period that allows us to verify the accuracy of the personal data,
- the processing is illegal and you oppose the deletion of personal data and instead request a restriction on its use,
- we no longer need your personal data for the purposes of processing, but you need it to assert, enforce or defend legal claims,
- if you have filed an objection regarding processing, based on the legitimate interests of the company, until it is verified that our legitimate reasons outweigh your reasons.
Where the processing of your personal data has been restricted in accordance with the preceding paragraph, such personal data, with the exception of its storage, is processed only with your consent, either to assert, enforce or defend legal claims or to protect the rights of another natural or legal person.
We are obliged to inform you before the restriction on the processing of your personal data is lifted.
(v) the right to data transmission
You have the right to receive your personal data provided to us in a structured, commonly used and machine-readable form, and the right to pass this data on to another controller without being hindered by the company when the processing is based on your consent and processing is performed by automated means. At your request, where technically feasible, personal data may be transferred directly to another controller.
(vi) the right to object
When we process your data on the basis of a legitimate interest for marketing purposes, you may object to such processing at any time.
We will stop processing your personal data unless we prove compelling reasons for the processing that outweigh your interests, rights and freedoms, or for asserting, enforcing or defending legal claims.
- The right to lodge a complaint concerning the processing of personal data
Any complaint regarding the processing of your personal data may be sent via e-mail to info@hermi.si or via post to the address Hermi, d.o.o., Trnoveljska cesta 15, 3000 Celje.
In the event that we do not decide on your request within the legal deadline or reject your request, you have the option of filing a complaint with the Information Commissioner.
You also have the right to lodge a complaint directly with the Information Commissioner if you believe that the processing of your personal data violates Slovenian or EU regulations in the field of personal data protection.
If you have exercised your right of data access and after receiving the decision you believe that the personal data you received is not the personal data you requested or that you have not received all the requested personal data, you can file a reasoned complaint at the company within 15 days, before filing a complaint with the Information Commissioner. We need to decide on your complaint and treat it as a new request within five business days.
- Final provisions
Anything not covered by this privacy policy is subject to applicable law.
The company reserves the right to change this privacy policy. We will inform you about the change with a post on the official Hermi, d.o.o. website 30 days before it enters into force.
If you have any questions about the Privacy Policy or the information we hold about you, please email us info@hermi.si.
- Validity of the privacy policy
This privacy policy is posted on the Hermi, d.o.o. website and enters into force on 25 May 2018.
Hermi, d.o.o.
"