Privacy Policy
When you access our website, your browser transmits certain data to our web server. This transmission is technically necessary to access the desired information. To ensure the security of our information system, we automatically record certain data in the web log. This data includes your IP address, date and time of access, time zone relative to Greenwich Mean Time (GMT), the content of your request (specific page), access status or HTTP status code, the amount of data transferred, the website requesting access, and information about your browser (operating system version, browser software, language settings). For the use of our website, at least your IP address, which is recorded in the web log, is essential.
The mentioned data will be collected to ensure network and information security and to prevent potential accidental events, illegal, or malicious actions. The processing of this data is therefore necessary to protect our legitimate interests and is based on point (f) of Article 6 of the General Data Protection Regulation (GDPR).
Personal data from the web log will be processed for a maximum of 6 months, after which the data will be deleted unless we have another legitimate reason for further processing.
Contact Information
The data controller is: STENKO d.o.o., Špruha 3, 1236 Trzin, Slovenia, +386 (01) 562 17 22, info@stenko.si. The collected personal data will be processed by our employees and processors who perform tasks related to the operation of the website.
Right of Access to Data
You have the right to verify whether we are collecting personal data about you, and if so, you also have the right to access this data.
If you, as an individual, wish to verify whether we are collecting personal data about you, you can request this in writing via email or postal mail.
Right to Erasure ("Right to be Forgotten")
You have the right to request that we erase personal data concerning you without undue delay, and we, as the data controller, are obligated to erase your personal data without undue delay in the following cases:
The erasure will not be carried out if the processing of personal data is necessary:
- You object to the processing (see the right to object),
- The personal data was processed unlawfully,
- The personal data must be erased to comply with legal requirements.
- To fulfill a legal obligation for processing based on regulations,
- To establish, exercise, or defend legal claims.
If you, as an individual, wish for your personal data to be erased, you can request this in writing via email or postal mail. The right to erasure can only be exercised in the limited cases listed above.
Right to Rectification
You have the right to request that we rectify inaccurate personal data concerning you without undue delay. Considering the purposes of the processing, you have the right to have incomplete personal data completed, including by providing a supplementary statement. If you, as an individual, wish for us to rectify your personal data, you can request this in writing via email or postal mail.
Right to Restriction of Processing
You have the right to request that we restrict the processing of your personal data in the following cases:
- If you contest the accuracy of the data, for a period enabling us to verify the accuracy of the personal data,
- The processing is unlawful, and you oppose the erasure of the personal data and request the restriction of its use instead,
- We no longer need your personal data for processing purposes, but you need it to establish, exercise, or defend legal claims,
- You have objected to the processing, pending verification of whether our legitimate grounds override yours.
If you request a restriction for the reasons mentioned above, we may only store your personal data, and all other types of processing may only be carried out:
- With your consent,
- To establish, exercise, or defend legal claims,
- To protect the rights of another natural or legal person, or
- For reasons of important public interest of the Union or a Member State.
Before lifting (i.e., ending) the restriction of personal data processing, we must notify you of the lifting of the restriction.
If we have denied your request for data erasure or if you only wish to restrict the processing of your personal data, you can request in writing via email or postal mail that we restrict the processing of your personal data. The right to restriction can only be exercised in the limited cases listed above.
Right to Data Portability
You can transfer the data you have provided to us and that we have collected during your use of the service. You can request the data in a portable format in person at our headquarters.
Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or where the alleged infringement occurred, if you consider that the processing of personal data relating to you infringes the General Data Protection Regulation.
The supervisory authority with which the complaint is lodged will inform you of the status of the case and the decision on the complaint, including the possibility of a judicial remedy under Article 78 of the General Data Protection Regulation.
As an individual whose personal data is concerned, you have the right to lodge a complaint at the following address:
Republic of Slovenia, Information Commissioner, Zaloška 59, 1000 Ljubljana, +386 (01) 230 97 30, gp.ip@ip-rs.si
The Information Commissioner will inform you of the status of the case and its decision on the complaint in accordance with the regulations.
Data Processors
The hosting of the website is provided by our processor.
Disclosure of Personal Data
We will not disclose personal data to third parties or third countries, except in cases provided by law, which primarily refers to cases where the data is requested by authorized persons or authorities.
