1. About the Privacy Policy
The purpose of the Privacy Policy (hereinafter the Customer) is to inform customers and other individuals (hereinafter Individuals) about the purposes and legal bases for the processing of personal data by Aplast d.o.o. Ložnica pri Žalcu 37 3310 Žalec (hereinafter Aplast d.o.o.) and about the rights of Individuals in this area. The Policy also further explains consent for data processing.
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation GDPR) the Policy includes the following information
contact details for data protection at Aplast d.o.o.
purposes legal bases and types of personal data processing including profiling
data sharing with third parties and transfers to third countries
data retention periods
rights of Individuals regarding personal data processing
the right to lodge a complaint
Where applicable provisions relating to Individuals also apply to confidentiality of communications of legal entities.
2. Data Controller
The controller of personal data processed under this Policy is Aplast d.o.o. Ložnica pri Žalcu 37 3310 Žalec. For data protection matters contact gdpr@zagozen-aplast.si
3. Purposes and Legal Bases for Processing
3.1 Processing based on contract
Aplast d.o.o. processes personal data to fulfill contractual obligations including
identification of the Individual
preparation of offers and contract conclusion
communication related to contractual relationships
notification of legal or commercial changes
billing
handling complaints
debt collection and claims management
other purposes necessary for contractual execution
3.2 Processing based on legal obligations
Personal data may be processed to comply with legal obligations and may be disclosed to competent authorities where required by law
3.3 Processing based on legitimate interest
Aplast d.o.o. may process data based on legitimate interest such as business analytics service improvement or direct marketing provided such interests do not override the rights of Individuals. Basic profiling may be used for marketing purposes without including sensitive data
3.4 Processing based on consent
Processing may be based on consent for marketing personalized offers or value added services. Individuals may withdraw or modify consent at any time
4. Data Retention
Contract related data may be retained for up to five years after termination
Invoices are stored for 10 years in accordance with tax regulations
Data processed based on consent is retained as long as necessary for the intended purpose
5. Rights of Individuals
Individuals have the right to
access personal data
rectify inaccurate data
erase data (right to be forgotten)
restrict processing
data portability
object to processing
Requests can be submitted via gdpr@zagozen-aplast.si or by post
6. Right to Lodge a Complaint
Individuals may file a complaint with Aplast d.o.o. or with the relevant supervisory authority if they believe their rights have been violated
7. Validity of the Policy
This Policy is published on www.aplast.si and has been effective since May 25 2018