PRIVACY AND PERSONAL DATA PROTECTION

General

We at the company Misteral d.o.o. (hereinafter referred to as Misteral), are aware of the importance of personal data protection, so we treat your data with the utmost care and in accordance with the regulations governing the protection of personal data. As the controller of personal data, Misteral enables individuals to be informed of all relevant information relating to their personal data.  

The designated entity responsible for the protection of personal data is Misteral d.o.o., Zdolska cesta 18 a, 8270 Krško, Slovenija, tax no. SI85806129.

Misteral acquires individuals' personal data through written accession statements upon their membership in the associations.

Misteral diligently stores and safeguards personal data in strict compliance with the applicable legislation.

Misteral ensures that the personal data collected is not transferred or transmitted to third countries.

Type of personal data we collect and process

In the course of our business, we at Misteral collect and process the following types of personal data: name and surname, contact details (address, email address, telephone number), login details for online services (username, password), web cookies, data about the use of our website and information necessary for the performance of the contract (subject of purchase, price, delivery address, payment methods, date of payment, details of complaints, service and other services).

Legal basis for the processing of personal data

We may process your personal data on the following legal basis:

• To comply with our legal obligations and provide our services (e.g. when you request a quotation from us, for the conclusion and performance of a contract, for invoicing, etc.);
• For processing of your personal data for which you have previously given your consent and which relates to a specific purpose of the data processing. You can withdraw your consent at any time.

Purposes of data processing

In accordance with the law, Misteral may process your personal data for one or more of the purposes listed below:

• to contact you (email, phone) in order to provide the desired services (enquiries, offers, etc.);
• to conclude the contract and fulfil any obligations arising under it;
• for marketing communication (sending newsletters, invitations to events, other marketing messages);
• to resolve disputes and pursue any legal claims;
• for internal statistical and market analysis of sales of our products/services and use of our websites.

Access to personal data

Misteral does not transfer personal data to third parties except to those with whom it has concluded a contract on the basis of which certain works involving the processing of personal data are carried out. Such contractual data processors are obliged to comply with the applicable data protection legislation. Contractual data processors may include: marketing service providers, email service providers, and software service providers. Contract processors may process personal information only within the framework of our instructions and may not process personal information for their own purposes. Together with their employees, they are committed to protecting the confidentiality of your personal data. No data processor is authorized to transfer any personal data to third countries outside the European Union.

Retention period for personal data

The retention period of personal data varies depending on the basis and purpose of processing for each category of personal data. Personal data can be retained only for the duration necessary to fulfil the purpose for which they were collected or further processed. Once the purpose of processing personal data has been fulfilled, and if there are no other legal grounds or a requirement for the establishment, exercise, or defence of legal claims, personal data shall be erased, destroyed, blocked, or anonymized. We retain the personal data we process based on your consent at all times or until you explicitly withdraw it.

Deletion of personal data and rights of customers/users

The data subject has the right to request the deletion of their personal data at any time, which can be done either in person at our company's registered office or in writing This email address is being protected from spambots. You need JavaScript enabled to view it. email at This email address is being protected from spambots. You need JavaScript enabled to view it..

Misteral is committed to enabling individuals whose personal data it processes to exercise their rights, including:

• Right of access to personal data collected in connection with it;
• Right to rectification: the right to obtain from Mistral without undue delay the rectification of inaccurate personal data concerning you;
• Right to erasure: the right to have personal data relating to you erased by Misteral without undue delay where one of the following applies: (1) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, (2) the data subject withdraws the consent on the basis of which the processing is carried out and where there is no other legal basis for the processing, (3) the data subject objects to the processing and there are no overriding legitimate grounds for the processing, (4) the personal data have been unlawfully processed, or (5) if provided for by law.
• Right to restriction of processing where one of the following applies: (1) the data subject contests the accuracy of the data for a period which enables Misteral to verify the accuracy of the personal data; (2) the processing is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of the use of the personal data; (3) Misteral no longer needs the personal data for the purposes of the processing, but the data subject needs them for the establishment, exercise or defence of legal claims; or (4) the data subject has lodged an objection to processing of the personal data, pending verification whether the legitimate grounds of the controller override those of the data subject. Where the processing of personal data has been restricted in accordance with the preceding paragraph, such personal data shall, with the exception of their retention, be processed only with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person. Prior to revoking the restriction of processing, Misteral shall inform the data subject thereof.

An individual may submit a request, in a manner that allows for their identification, through various channels including an oral request recorded at Misteral's registered office, a written request, or a request sent via email.

The Data Protection Officer will handle all received requests. Misteral is obliged to reply to the individual's request without undue delay or within one month at the latest.

Misteral must provide the requested information to the individual free of charge. Where the requests of the individual are manifestly unfounded or excessive, in particular because they are repetitive, Misteral may (1) charge a reasonable fee, taking into account the administrative costs of providing the information or communication or of carrying out the requested action, or (2) refuse to act on the request.

Any updates or modifications to the Privacy Policy will be published on the websitewww.misteral.si.

Krško, July 2019