Privacy Policy
1. Name and address of the responsible person
The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws is: Peter Hecl
2. Contact details of the Data Protection Officer
The Data Protection Officer of the responsible person can be contacted via the following contact details: info@domacijogurti.si
3. General information on data processing
1. Scope of personal data processing
In principle, we collect and use the personal data of our users only to the extent that this is necessary for the provision of a functional website and our content and services. The collection and use of personal data of our users are regularly carried out only after their consent. An exception applies in those cases where obtaining prior consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.
2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, the provision of Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) shall apply as the legal basis. For processing of personal data necessary for the performance of a contract to which the data subject is a contracting party, the provision of Article 6(1)(b) of the GDPR applies as the legal basis. This also applies to processing operations necessary for the performance of pre-contractual measures. Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, the legal basis is the provision of Article 6(1)(c) GDPR. Insofar as the processing of personal data is necessary for the vital interests of the data subject or of another natural person, the provision of Article 6(d) GDPR shall apply. In cases where processing is necessary for the protection of the legitimate interests of our company or of a third party, and where the interests, rights and freedoms of the data subject do not override the primary interest, the provision of Article 6(1)(f) of the EU General Data Protection Regulation (GDPR) shall apply as the legal basis.
3. Data deletion and data retention period
The personal data of the individual will be erased or blocked as soon as the purpose for which they were stored no longer exists. In addition, the storage of data is also possible when it is prescribed by the European or national legislator in EU regulations, laws or other rules applicable to the data processor, i.e., the person responsible for the processing of the data. Blocking or erasure of data shall also take place when the retention period prescribed on the basis of the applicable standards has expired, unless there is a need to continue to store the data for the conclusion or performance of a contract.
4. Provision of the website and creation of log files
1. Description and scope of data processing Whenever you access our website, our system automatically collects data and information about the computer system of the computer from which access is made. The following data is collected:
(1) information about the type of browser and the version used
(2) the user’s operating system
(3) the user’s Internet service provider
(4) date and time of access
(5) the websites from which the user’s system accesses our website
(6) Web pages accessed by the user through our website
The data is also stored in the log files of our system. This does not refer to the IP addresses of the user or other data that allows the data to be assigned to the user. The storage of this data together with other personal data of the user is not carried out.
2. Legal basis for data processing. The legal basis for the temporary storage of data is defined in Article 6(1)(f) of the EU General Data Protection Regulation (GDPR).
3. Purpose of data processing. The data is used to optimise the website and to ensure the security of our IT systems. This constitutes our legitimate interest in processing the data in accordance with Article 6(1)(f) of the GDPR.
4. Duration of retention. The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was obtained. In the case of data collection for the provision of the website, this is at the end of each session.
Possibility of objection and elimination. The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. As a result, there is no possibility of objection by the user.
5. Use of cookies
- Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on your computer system. When you visit a website, a cookie may be stored on your operating system. This cookie contains a characteristic string of characters that makes it possible to uniquely identify the browser when you return to the website. Previously established cookies can be deleted at any time. You will find the procedure in the browser manual (in the “Help” section of the browser menu). We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. In this case the following information is stored and transmitted in cookies:
- language settings
- autofill form function
In addition, we use cookies on our website, which enable the analysis of user behaviour/online movement. In this way, the following information can be transmitted:
- search terms entered
- number of page views
- use of website features
The user data collected in this way is pseudonymised by technical precautions. It is therefore no longer possible to assign the data to the calling user. The data are not stored together with other personal data of the user. When calling up our website, users are informed by an information banner about the use of cookies for analysis purposes and referred to this data protection declaration. In this context, there is also an indication as to how the storage of cookies in the browser settings can be prevented.
- Legal basis for data processing. The legal basis for the processing of personal data using cookies is defined in Article 6(1)(f) GDPR.
- Purpose of the data processing. The purpose of the use of technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, the browser must be recognized even after a page change. Cookies are required for the following applications:
- taking over language settings
- memorizing search terms.
We will not use the user data collected by technically necessary cookies to create user profiles. The use of analysis cookies is intended to improve the quality of our website and its content. Analytical cookies help us to learn how the website is used, which enables us to continuously optimise our offer. We use analytical cookies for the following purposes:
- taking over language settings
- memorizing search terms.
This constitutes our legitimate interest in processing the data in accordance with Article 6(1)(f) of the GDPR.
- Duration of storage, possibility of objection, and removal
Cookies are stored on the user’s computer and are transmitted from there to our website. For this reason, you as the user have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing the settings in your web browser. You can delete cookies that have already been stored at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to take full advantage of all the features of the website.
6. Use of Google Analytics and Google Adwords
- Description and scope of data processing
We use Google Analytics, a web analytics service provided by Google Inc. (“Google”), to improve the performance of our website. Google Analytics uses so-called “cookies”, which are text files that are stored on your computer and enable an analysis of the use of the website. The information obtained by the cookie about your use of this website (including your IP address) will be sent to Google and
stored on servers in the USA. In order to protect the interests of users in terms of the protection of their personal data, we provide this service by anonymising the data. You can prevent the storage of cookies by setting your browser software accordingly; however, please note that in this case you may not be able to use the full functionality of this website. You can also restrict the collection or retrieval of data generated by the cookie in connection with your use of the website and (including your IP address) for Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: tools. google.com/dlpage/gaoptout. This website also uses cookies to attract visitors to Google’s network through advertising campaigns for the purpose of remarketing (remarketing) through online advertising. For remarketing purposes, third parties such as Google use cookies based on your visit to our website. As a user, you have the option to disable Google’s use of cookies by visiting the deactivation page at www.google.com/ads/preferences. The following information is collected during the registration process: www.google.com/ads/preferences.
The following information is collected during the registration process:
(1) the encrypted IP address of the user
(2) date and time of access
(3) frequency of page views
(4) use of the site’s features
(5) the user’s operating system
(6) the user’s Internet service provider
(7) the date and time of access
(8) the websites from which the user’s system accesses our website
(9) the web pages accessed by users through our website
(10) the operating systems used by the terminals
(11) age, gender, language, interest, country of origin
- Legal basis for data processing
The legal basis for the processing of data is our legitimate interest in increasing the efficiency and funding of the website, as defined in the provision of Article 6(1)(f) GDPR. - Purpose of the personal data processing
Providing an anonymous IP address to Google serves to increase the effectiveness of our website, to anonymously evaluate user behaviour, and to fund the website. - Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
8. Rights of the data subject
In the case of processing of personal data relating to you, you are the person affected and have the following rights in relation to the person responsible:
1. Right to information
You can ask the person responsible to provide you with a confirmation of whether personal data relating to you is being processed by us. If it is being processed, you can request the following information from the person responsible:
(1) the purpose for which your personal data is being processed;
(2) the categories of your personal data that are being processed;
(3) the recipients or categories of recipients to whom your personal data have been or will be disclosed;
(4) the proposed retention period for your personal data or, if this information cannot be provided, the criteria for determining the retention period;
(5) the existence of a right to rectification or erasure of your personal data in relation to the right to restriction of processing by the controller or the right to lodge a complaint against such processing;
(6) the existence of a right to lodge a complaint with a supervisory authority;
(7) any available information about the source of the data, if the personal data are not obtained or collected from the data subject;
(8) the existence of automated decision-making, including profiling in accordance with Article 6(1) and (4) of the EU General Data Protection Regulation (GDPR) and – at least in these cases – relevant information on the logic and scope applied and the desired effects of such processing on the data subject.
You have the right to request information on whether your personal data is transferred to a third country or an international organisation. In this respect, you may request appropriate safeguards in accordance with Article 46 of the GDPR.
2. Right to rectification. You have the right to have your data rectified and/or completed by the person responsible if the personal data relating to you is incorrect or incomplete. The person responsible is obliged to rectify the data immediately.
3. Right to restriction of processing. You have the right to request restriction of the processing of your personal data under the following conditions:
(1) if you contest the accuracy of your personal data for a specified period of time, which allows the regulator to verify the accuracy of the personal data;
(2) if the processing is unlawful, namely if you object to the erasure of the personal data and instead request the restriction of the use of the personal data;
(3) if the data controller no longer needs the personal data for the purposes of the processing, but you will need it to assert, exercise or defend legal claims; or
(4) where you have lodged an objection to the processing of personal data for processing pursuant to Article 46(1) of the GDPR and it has not yet been decided whether the legitimate grounds of the data subject outweigh your grounds. If the processing of personal data has been restricted, the data may – in addition to being stored – only be disclosed to others with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of public interest of substantial importance for the Union or one of the Member States. If the processing of personal data has been restricted on the basis of the above conditions, you will be informed by the data controller before the restriction is eliminated.
4. Right to deletion
a) Obligation to delete
You may request the person responsible to delete your personal data without delay, and the person responsible must delete the data immediately if:
(1) your personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
(2) you withdraw your consent to the processing of the data in accordance with Article 6(1)(a) or Article 9(2)(a) of the GDPR and there are no other legal grounds for the processing;
(3) you object to the processing of the data in accordance with Article 21(1) of the GDPR and there are no prior valid grounds for the processing, or you object to the processing of the data in accordance with Article 21(2) of the GDPR;
(4) if your personal data have been unlawfully processed;
(5) if the deletion of your personal data is necessary to comply with a legal obligation under Union or Member State law to which the data subject is subject.
(6) if your personal data was obtained in connection with information society services made available pursuant to Article 8(1) of the GDPR.
a) Information to third parties. If the person responsible has made your personal data publicly available and is obliged to delete it pursuant to Article 17(1) of the GDPR, then the person responsible shall, taking into account the technical means available and the costs of implementation, take appropriate steps to inform the processors responsible for processing the personal data that you, as the affected person, have requested them to delete any links to such personal data or copies or replicas of such personal data.
b) Exceptions. There is no right to deletion if the processing is necessary for
(1) to exercise the right to freedom of expression and information;
(2) the performance of a legal obligation required by Union or Member State law to which the data subject is subject, or the performance of a task carried out in the public interest or the exercise of official authority vested in the data subject;
(3) for reasons of public interest in the field of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) of the GDPR;
(4) for archival purposes in the public interest, scientific or historical purposes or statistical purposes, in accordance with Article 89(1) of the GDPR, where the right referred to in subparagraph (a) would be likely to frustrate or seriously impair the achievement of the objectives of that processing; or
(5) for the establishment, exercise or defence of legal claims.
5. Right to information. If you have exercised your right to rectification, deletion or restriction of the data processing in relation to the person responsible, the latter is obliged to inform all recipients to whom the personal data have been disclosed of this rectification or deletion or restriction of the data processing, unless this proves impossible or involves disproportionate costs. You also have the right to be informed of these persons or recipients in relation to the person responsible.
6. Right to data portability. You have the right to receive the personal data you have provided to the Data Protection Officer in a structured, plain and machine-readable format, where technically feasible. In addition, you have the right to transfer this data to another person responsible without hindering the person responsible to whom the personal data have been provided, provided that
(1) the data processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or pursuant to a contract referred to in Article 6(1)(b) of the GDPR;
(2) the data processing is carried out by automated means. In exercising this right, you also have the right to have your personal data
to be transferred directly from the person responsible to another person responsible, insofar as this is technically feasible. The freedoms and rights of other persons shall not be affected. The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority which has been delegated to a person responsible.
7. Right to objection
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data relating to the provision of Article 6(1)(e) or (f) of the GDPR.
The person responsible shall no longer process your personal data unless he or she can demonstrate the existence of legitimate and compelling reasons for the processing which override your interests, rights and freedoms, or if the processing is necessary for the establishment, exercise or defence of legal claims. If your personal data relate to processes for the performance of direct advertising, you have the right to object at any time to the processing of your personal data relating to the purpose of such advertising; this also applies to profiling insofar as it is related to such direct advertising. If you object to processing for the purposes of direct advertising, your personal data will no longer be processed for those purposes. You have the possibility, notwithstanding the provisions of Directive 2002/58/EC, to exercise your right to object in relation to the use of information society services by means of automated processes using technical specifications.
8. Right to revoke the data protection declaration. You have the right to revoke the data protection declaration at any time. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
9. Right to lodge a complaint with a supervisory authority. Notwithstanding any other remedies available to you in the context of administrative or judicial proceedings, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement, if you consider that the processing of your personal data is contrary to the provisions of the GDPR. The supervisory authority to which the complaint has been lodged will inform the complainant of the status and outcome of the complaint, including the possibility of judicial redress in accordance with Article 78 of the GDPR.