Privacy policy

With the privacy policy, the company Digiverse, tehnologije za digitalni svet, LLC, Dolenjska cesta 318, 1291 Škofljica (hereinafter: the company) informs individuals, customers, service users, colleagues, employees and other persons (hereinafter: the individual) with whom we cooperate about the purposes, legal bases, security measures and the rights of individuals regarding the processing of personal data carried out by the company.

We treat your data with care.

The processing of personal data takes place on the basis of the applicable legislation in the field of personal data protection and other field legislation in which there is a legal basis for the processing of personal data.

Controller of personal data:
Digiverse, Digital Universe Technologies, L.L.C.
Lavrica, Dolenjska cesta 318
1291 Skofljica
Registration number: 6161707000
Tax number: SI 73003590
Email: privacy@digiverse.si

There is no appointed authorized person for the protection of personal data at the controller.

What personal data do we process?

Personal data is any information relating to a specific or identifiable individual. An identifiable individual is one who can be identified directly or indirectly.

We process your personal data in particular in the following cases:

• when the processing is necessary to fulfill a legal obligation that applies to us;
• when the processing is necessary for the implementation of a contract, the contractual party of which is the individual to whom the personal data relates, or for the implementation of measures at the request of such an individual before the conclusion of the contract;
• when processing is necessary for legitimate interests pursued by us or a third party;
• when the individual to whom the personal data relates consents to the processing of his personal data for certain purposes;
• when the processing is necessary to protect the vital interests of the data subject or other natural person.

We only process personal data that you provide to us, except in the case of data that we obtain from information systems and central registers that are available to us. We also process your personal data if it is provided to us by our clients, when this data is necessary for the provision of legal services.

Processing on the basis of a concluded contract

When a contract is concluded with the company, it constitutes the legal basis for the processing of personal data. The company may process personal data in this way for the conclusion and implementation of the contract, especially for the sale of services, preparation of offers and the like. If the individual does not provide personal data, the contract cannot be concluded and the service cannot be provided.

The legal basis for data processing is the contract. As part of contractual processing, we process only and exclusively those personal data that are necessary for the conclusion and proper performance of contractual obligations.

The retention period is until the purpose of the contract is fulfilled or up to 6 years after the termination of the contract, unless there is a dispute between the individual and the company in connection with the contract. In this case, the company keeps the data for 10 years after the finality of the court decision, arbitration or court settlement, or in the case of a peaceful resolution of the dispute, for another 6 years from the date of peaceful resolution.

Processing on the basis of legitimate interest

Personal data may be processed on the basis of a legitimate interest pursued by the controller. This is not admissible in the case when such interests are overridden by the interests or fundamental rights and freedoms of the individual to whom the personal data refer, which require the protection of personal data. In these cases, the controller makes the necessary judgment.

For the purposes of direct marketing, personal data of individuals may be processed in accordance with the legitimate interest.

The controller can also process personal data of individuals that it has collected from publicly available sources or within the framework of the legal performance of activities, also for the purposes of offering services, employment, informing about benefits, events, etc. In doing so, the controller uses mail, phone calls, e-mail and other means of telecommunications. In the context of direct marketing, the company may process the personal data of individuals, such as, above all, the name and surname of the individual, address of permanent or temporary residence, telephone number and e-mail address, all without the express consent of the individual. If the individual wishes, he can at any time request the interruption of this type of communication and processing of personal data and cancel receiving messages via the unsubscribe link in the received message or forward the request to the controller, by mail or e-mail. On the basis of legitimate interest, personal data will be processed until the cancellation of receiving messages, or until the purpose is fulfilled. An individual’s cancellation does not affect the lawful processing itself until the given cancellation.

Processing on the basis of consent

The controller can also obtain the consent of the individual for some processing of personal data. This is mainly in the case of obtaining a residential address and an email address for the purposes of notification and communication); photos, videos and other content relating to the individual (e.g. publication of images of individuals on the website for the purposes of documenting activities and informing the public about the work and events of the company) and any other purposes to which the individual properly consents before processing.

An individual may request the suspension of the processing of personal data by means of a request by mail or e-mail, but the individual’s cancellation does not affect the legal processing itself until the cancellation. As long as the purpose of the given consent is achieved before cancellation, or if it is stipulated by individual laws, the company can delete the data even before cancellation.

The request for erasure for reasons based on legislation can also be rejected In some cases, if it is the exercise of the right to freedom of expression and information, fulfillment of the legal obligation of processing, reasons of public interest in the field of public health, purposes of archiving in the public interest, scientific or historical research purposes, statistical purposes, exercise or defense of legal claims.

Data collected on the basis of consent will be kept until cancellation or until the purpose is fulfilled.

Cookies

The website may store small files, also known as cookies, on your devices (computer, mobile device or other device) during your visit to our website.

We only use absolutely necessary cookies on our website, which are essential for the website to function and for which we do not need your consent.

The website uses the following cookies:

• __cf_bm - used to license the fonts used on the page

Personal data processing

We collect your personal data only when it is absolutely necessary and in accordance with the purpose for which it was provided. We will not use personal data for any other purpose.

The company can entrust individual processing of personal data to a contractual processor on the basis of a contractual processing agreement. Contractual processors can process confidential data exclusively on behalf of the controller, within the limits of his authority, which is written in a written contract or other legal act and in accordance with the purposes defined in this privacy policy.

The contractual processors with whom we cooperate are mainly:

• maintainers of information systems;
• and e-mail service providers and software providers, cloud services (Microsoft).

Under no circumstances will the company provide personal data of an individual to unauthorized third parties.

We will also not transfer personal data to third countries (i.e. countries that are outside the member states of the European Economic Area - EU members and Iceland, Norway and Liechtenstein) and to international organizations, except in the USA, where relations with contractual processors from the USA regulated on the basis of standard contractual clauses (standard contracts adopted by the European Commission) and/or binding business rules (adopted by the company and approved by supervisory authorities in the EU).

How long do we keep your personal data?

We process your personal data to the extent and for as long as is necessary to fulfill the purpose of the processing. We will thus process your personal data until the purpose of processing is fulfilled or within the limitation periods for obligations that could arise from the processing of this personal data. If the retention of personal data is prescribed by law, we will keep your personal data in accordance with the prescribed retention periods. In this case, some data is stored during cooperation with the company, while some data must be stored permanently.

In cases where the legal basis for processing is your consent or a legitimate interest, we will keep the data until the withdrawal of consent or until the request for data deletion. We will also stop processing your personal data upon withdrawal of consent, unless there is another legal basis for further processing. In the case of exercising the rights of an individual, the company keeps the personal data of this individual until a final decision has been made on the matter, and after the final decision in accordance with the final decision in the case.

Data security and data accuracy

We take care of information security and infrastructure security (premises and application system software). Information systems are protected by anti-virus programs and a firewall, among other things. In the organization, we have appropriate organizational and technical security measures, which are intended to protect personal data against accidental or illegal destruction, loss, modification, unauthorized disclosure or access, and against other illegal and unauthorized forms of processing.

You are responsible for the information you provide us.

What are your rights?

The existence and extent of your rights depends on the specific circumstances of the individual case or processing. Under the terms of the GDPR, you have the right to request from us access to personal data and correction or deletion of personal data, restriction of processing and the right to object to processing and the right to data portability.

We will respond to an individual’s request without undue delay, no later than one month after receiving the request. This deadline may be extended by a maximum of two additional months, taking into account the complexity and number of requests, of which the individual will be informed, together with the reasons for the delay. Exercising your rights is free of charge for the individual, but we may charge a reasonable fee if the request is manifestly unfounded or excessive, particularly if it is repeated. In such a case, the company can also reject the request. In case of doubt about the identity of an individual, additional information may be requested, which we need to establish the identity.

You can send us your request by e-mail or registered mail to our address. If you believe that there has been a breach of personal data protection, please notify us immediately, and we will provide you with an appropriate response in a timely manner. If necessary, we will also immediately implement all necessary measures to eliminate possible irregularities. Along with the answer, we will also inform you about the possibility of filing a legal remedy with the supervisory authority within 15 days of being informed of the decision. You can file a complaint with the Information Commissioner at the address: Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, e-mail: gp.ip@ip-rs.si, telephone: 01 230 97 30; website: www.ip-rs.si.

All changes to this document are posted on this website. By using the website, you confirm that you are familiar with the entire content of the privacy policy.

This privacy policy is valid from 30.5.2024 onwards.