Personal data protection
This is a translation of the Slovenian privacy notice; in case of doubt, the Slovenian version applies.
Draft. PREVERI pred objavo naj besedilo pregleda pravnik ali svetovalec za varstvo osebnih podatkov
This notice explains which personal data we process when you visit the website konus-servis.si, send an enquiry or order a taper reconditioning, why we need the data, to whom we disclose it, how long we keep it and what rights you have. This notice is provided in accordance with the General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).
Our customers are businesses. The personal data covered by this notice are mainly the data of contact persons and signatories at our customers (name, email, phone, signature) and the data of customers who are sole traders.
Who processes your data
Konus-Servis is the joint brand of two sole traders who jointly determine the purposes and means of processing data from the website and enquiries and are therefore joint controllers (Article 26 GDPR):
- Bor Vreček s.p., Kidričeva cesta 25, 4000 Kranj, tax no. 65915941
- Primož Jagodic s.p., Bašelj 4, 4205 Preddvor, tax no. DOPOLNI Davčna številka kolegovega s.p.
Contact for questions about personal data: info@konus-servis.si or in writing to the address of either of us. We have not appointed a data protection officer, as there is no legal obligation to do so.
Essence of the arrangement between the joint controllers
- We jointly manage the website, the enquiry form, the indicative estimates, the scheduling of appointments and the record of completed reconditioning jobs. We both have access to these data.
- The formal quotation, the invoice and the related accounting documents are issued and kept by whichever of us carries out the job. For these data (e.g. for keeping invoices under tax regulations), that sole trader is the sole controller.
- The joint contact point for all requests is info@konus-servis.si. Irrespective of this arrangement, you may exercise your rights with either of us; we will handle the request together, and whichever of us received it will reply to you.
- We are both responsible for informing individuals (this notice), for selecting and supervising external providers, and for handling any personal data breaches.
Which data we process, why and for how long
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Handling the enquiry and the automatic indicative estimate | Company name and address, machine location address, name of the contact person, phone, email, machine and taper details, photos of the taper, signature and name of the signatory, acknowledgement of the terms | Legitimate interest in replying to the business that contacts us and communicating with its representatives (Article 6(1)(f) GDPR). If the customer is a sole trader: steps prior to entering into a contract (point (b)). | 12 months from the last contact if no order is placed; then deleted. |
| Formal quotation, scheduling the appointment, performing the reconditioning, measurement results, complaints | The data listed above and data from the quotation, measurement results and correspondence | Legitimate interest in carrying out the business with the company (point (f)); for sole-trader customers, performance of a contract (point (b)). | 5 years after the end of the year in which the reconditioning was carried out (limitation periods under the Slovenian Obligations Code). Quotations not taken up: 12 months from issue. |
| Issuing invoices and keeping business accounts | Data on invoices (customer name and address, name of the person placing the order or contact person, description of the service, amount) | Legal obligation (point (c); Slovenian Tax Procedure Act, Value Added Tax Act). | 10 years after the end of the year to which the invoice relates. |
| Establishment, exercise or defence of legal claims | Data needed for the specific dispute | Legitimate interest (point (f)). | Until the proceedings are finally concluded and the time limits for legal remedies have expired. |
| Security and operation of the website | Server log files: IP address, time of visit, page visited, browser type | Legitimate interest in ensuring the secure operation of the website (point (f)). | DOPOLNI rok hrambe dnevniških zapisov pri ponudniku gostovanja, npr. 30 dni |
When the period expires, we delete or anonymise the data. If several periods apply to the same data, the longest applies (for example, we keep the name of the customer on an invoice for 10 years, even though we would otherwise delete the enquiry earlier).
Do you have to provide the data? Providing data is voluntary, but without the mandatory data in the form we cannot prepare an estimate, a quotation or carry out the reconditioning. The data on invoices are required by law.
Photos: photos should show only the machine and the taper, without people or documents. Before sending, photos are resized and then saved anew on the server; in the process, metadata (e.g. GPS location and device information) are removed.
The signature in the form is used only as acknowledgement of the terms of service. We do not use it for biometric identification of individuals.
Where we obtain the data from
You provide most of the data to us yourself. If you are a contact person or signatory entered in the form by a colleague, we received your data from the company on whose behalf the enquiry was sent. ODLOČI če prevzamete seznam obstoječih strank od MATRIS d.o.o., dodajte: »Kontaktne podatke obstoječih strank storitve brušenja konusov sva prejela od družbe MATRIS d.o.o., ki je storitev izvajala pred nama.«
Automatic indicative estimate
The indicative estimate is prepared automatically according to a predefined price list, based on the data about the machine, the taper, the lead time and the distance to the site. The estimate is not binding, does not affect your rights and does not constitute a decision about you as an individual. The formal quotation is always prepared and reviewed by a person. We do not carry out automated decision-making or profiling within the meaning of Article 22 GDPR.
To whom we disclose data
We do not sell data and do not use it for advertising. We disclose it only to:
- The web hosting provider Hitrost.com DOPOLNI točen naziv in sedež podjetja s pogodbe ali računa Hitrost.com, whose servers in Slovenia host the website, the form data, the photos and our business email. The provider is a processor that processes the data only on our instructions under a data processing agreement.
- The distance calculation services Nominatim (OpenStreetMap Foundation, United Kingdom) and OSRM (FOSSGIS e.V., Germany): our server sends them only the machine location address, without names or contact details. The address is sent for the distance calculation while you are still filling in the form, as soon as you enter the address.
- The accounting firm that keeps our business accounts: DOPOLNI naziv ali »računovodski servis v Sloveniji«.
- Banks, for processing payments, and public authorities (e.g. the Financial Administration of the Republic of Slovenia) and courts where required by law.
Transfers of data outside the EU
We store and process data in Slovenia or within the European Union. The exception is the machine location address (without names or contact details), which we send to the Nominatim service in the United Kingdom for the distance calculation; the United Kingdom is covered by a European Commission adequacy decision.
Your rights
You may request from either of us:
- confirmation as to whether we process your data, access to it and a copy (Article 15 GDPR),
- rectification of inaccurate data or completion of incomplete data (Article 16),
- erasure of data where there are grounds for it (Article 17); we may not erase data on invoices before the statutory period expires,
- restriction of processing (Article 18),
- portability of the data you have provided to us, in a machine-readable format, where the processing is based on a contract and carried out by automated means (Article 20).
Right to object (Article 21 GDPR): where we process data on the basis of legitimate interest, you may object to the processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we demonstrate compelling legitimate grounds that override your interests, or we need the data for legal claims.
If any processing were based on your consent, you may withdraw it at any time; this does not affect the lawfulness of processing before the withdrawal. ODLOČI če bosta prosila za privolitev, npr. za objavo fotografij ali imena podjetja kot reference, to tukaj navedite.
Send your request to info@konus-servis.si. We reply free of charge within one month at the latest; for complex requests this period may be extended by up to two months, in which case we will inform you. If we cannot verify that the request is being sent by you, we may ask you for additional confirmation of your identity.
Complaint: if you believe that we process your data in breach of the regulations, you may lodge a complaint with the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, email gp.ip@ip-rs.si, phone +386 1 230 97 30, www.ip-rs.si, or with the supervisory authority in the country where you live or work.
Security
Only the two of us have access to the data, using personal accounts and strong passwords. The connection to the website is encrypted (HTTPS). The form data are not publicly accessible. In the event of a personal data breach, we act in accordance with Articles 33 and 34 GDPR.
Cookies and similar technologies
The website does not use cookies, analytics tools, or advertising or social media plug-ins. We host the fonts ourselves, so they are not loaded from third-party servers when you visit the site. We also do not store anything in your browser (we do not use browser local storage). When you submit the form, the data are sent to our server at the hosting provider.
Changes to this notice
We update this notice when the way we process data changes (for example, when moving to a different hosting provider). The current version is always published on this page. We inform existing customers of material changes by email.
Version 1.0, valid from DOPOLNI datum objave strani.