PRIVACY AND PERSONAL DATA PROTECTION
GeneralWe at the company Misteral d.o.o. (hereinafter referred to as Misteral), are aware of the importance of personal data protection, so we treat your data with the utmost care and in accordance with the regulations governing the protection of personal data. As the controller of personal data, Misteral enables individuals to be informed of all relevant information relating to their personal data. The designated entity responsible for the protection of personal data is Misteral d.o.o., Zdolska cesta 18 a, 8270 Krško, Slovenija, tax no. SI85806129. Misteral acquires individuals' personal data through written accession statements upon their membership in the associations. Misteral diligently stores and safeguards personal data in strict compliance with the applicable legislation. Misteral ensures that the personal data collected is not transferred or transmitted to third countries.
Type of personal data we collect and processIn the course of our business, we at Misteral collect and process the following types of personal data: name and surname, contact details (address, email address, telephone number), login details for online services (username, password), web cookies, data about the use of our website and information necessary for the performance of the contract (subject of purchase, price, delivery address, payment methods, date of payment, details of complaints, service and other services).
Legal basis for the processing of personal dataWe may process your personal data on the following legal basis:
Purposes of data processingIn accordance with the law, Misteral may process your personal data for one or more of the purposes listed below:
Access to personal dataMisteral does not transfer personal data to third parties except to those with whom it has concluded a contract on the basis of which certain works involving the processing of personal data are carried out. Such contractual data processors are obliged to comply with the applicable data protection legislation. Contractual data processors may include: marketing service providers, email service providers, and software service providers. Contract processors may process personal information only within the framework of our instructions and may not process personal information for their own purposes. Together with their employees, they are committed to protecting the confidentiality of your personal data. No data processor is authorized to transfer any personal data to third countries outside the European Union.
Retention period for personal dataThe retention period of personal data varies depending on the basis and purpose of processing for each category of personal data. Personal data can be retained only for the duration necessary to fulfil the purpose for which they were collected or further processed. Once the purpose of processing personal data has been fulfilled, and if there are no other legal grounds or a requirement for the establishment, exercise, or defence of legal claims, personal data shall be erased, destroyed, blocked, or anonymized. We retain the personal data we process based on your consent at all times or until you explicitly withdraw it.
Deletion of personal data and rights of customers/usersThe data subject has the right to request the deletion of their personal data at any time, which can be done either in person at our company's registered office or in writing Misteral is committed to enabling individuals whose personal data it processes to exercise their rights, including:
An individual may submit a request, in a manner that allows for their identification, through various channels including an oral request recorded at Misteral's registered office, a written request, or a request sent via email. The Data Protection Officer will handle all received requests. Misteral is obliged to reply to the individual's request without undue delay or within one month at the latest. Misteral must provide the requested information to the individual free of charge. Where the requests of the individual are manifestly unfounded or excessive, in particular because they are repetitive, Misteral may (1) charge a reasonable fee, taking into account the administrative costs of providing the information or communication or of carrying out the requested action, or (2) refuse to act on the request.
Any updates or modifications to the Privacy Policy will be published on the websitewww.misteral.si. Krško, July 2019 |