The purpose of the personal data protection statement is to inform all visitors and customers of the website about the purposes and basis for the processing of personal data by TEHNO KAR d.o.o., Vojskarska 23a, 5280 Idrija (hereinafter referred to as the controller) and the rights of individuals in this area.

1. Personal data

Personal data is any information that identifies you as a specific or identifiable individual. An individual is identifiable when he or she can be identified directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier or by reference to one or more factors specific to the individual's physical, physiological, genetic, mental, economic, cultural or social identity.

The controller, in accordance with the purposes defined below in this Statement, collects and processes the following personal data:

contact details and data about your communication with the operator (name and surname, e-mail address, telephone number and all data provided in postal or electronic communication),
data about users of the operator's websites (IP address, dates, times and duration of visits to websites, data about the location or Internet access entry point, data about visited subpages, data about settings made, etc.),
data about registered or registered users (email address),
data on registered or unregistered buyers of products (entries in the shopping cart, name and surname, residential address, email address, telephone number, address for delivery of products, contact details for delivery and telephone number, method of collection and delivery of products, method of payment),
data on user purchases and issued invoices (date and place of purchase, purchased products, prices of purchased products, total purchase amount, method of payment, delivery address, number and date of issue of invoice, code of the person who issued the invoice, etc.) and data on resolving complaints about sold products,
data on entries in online forms (e.g. within the framework of prize games, registration for the e-list),
other data that users voluntarily provide to the administrator when ordering a specific product or submitting an offer or inquiry.

The controller does not collect or process your personal data, except when you enable it or consent to it, i.e. when ordering products, when you subscribe to receive promotions and news via our e-list, participate in a prize draw, etc., or when there is a legal basis for collecting personal data or we have legitimate interests in processing your data.

2. Personal data controller

The personal data controller is TEHNO KAR d.o.o., Vojskarska 23a, 5280 Idrija, Slovenia.

3. Purpose of processing and legal basis

All personal data you provide to us will be treated confidentially and will be used only for the purposes for which they were provided and collected. If there is a need to further process your data for another purpose, we will contact you in advance and ask for your prior written consent.

4. Data Users

We undertake not to disclose your personal data to unauthorized third parties without your consent.

Within the framework of legal competencies, your personal data may be disclosed to the following data users:

providers of postal services and logistics/delivery services for the purpose of fulfilling your order
distributors, goods suppliers, and authorized service providers
law firms and other providers of legal and business consulting services
providers of information technology services within the scope of software servicing and maintenance
administrators and managers of the website
providers of email messaging services (e.g., MailChimp and others)

5. Retention period

We guarantee that we only store your data for as long as is necessary to fulfill the purpose for which the individual data was collected and further used.

Personal data that we process on the basis of your consent or legitimate interest, e.g. in the case of sending electronic newsletters, are stored permanently until you revoke this consent or until you request the termination of the processing, whereby we undertake to check the existence of the purpose of the processing of personal data at regular intervals. We will only delete the data before revocation if the purpose of the processing of personal data has already been achieved or if the law so provides.

6. User rights

The controller ensures the exercise of all your rights that you are entitled to in relation to the processing of your personal data on the basis of applicable legal regulations.

As individuals, you have the following rights:

Right to withdraw consent: If you, as an individual, have consented to the processing of your personal data (for one or more specific purposes), you have the right to withdraw your consent. Withdrawal of consent does not affect the lawfulness of the data processing carried out until its withdrawal. You can withdraw your consent at any time, free of charge, by sending a written statement to the controller to the following e-mail address: info@tehnoshop.net.

Right to access personal data: As an individual, you have the right to obtain confirmation from the controller whether or not data concerning you is being processed. If this is the case, you have the right to provide you with access to your personal data (i.e. to view and copy or transcribe it) and to provide you with information regarding the processing of your personal data (e.g. the purpose of the processing, the type of personal data, the users to whom the personal data have been or will be disclosed, the envisaged data retention period, the technical and organizational measures for data protection, the existence of automated decision-making, including profiling, etc.).

Right to rectification: As an individual, you have the right to obtain from us the rectification of inaccurate personal data concerning you and the completion of incomplete personal data. For this purpose, you have the right to provide us with a supplementary statement with up-to-date personal data.

Right to erasure of personal data (i.e. right to be forgotten): You have the right to obtain from the controller the erasure of personal data concerning you without undue delay if one of the reasons set out in Article 17 of the General Data Protection Regulation applies (e.g. if the data are no longer necessary for the purposes for which they were collected or otherwise processed, if you withdraw your consent to the processing and there is no other legal basis for the processing, if you object to the processing and there are no overriding legitimate interests, if the personal data have been processed unlawfully, etc.).

Right to restriction of processing: You have the right to obtain from the controller restriction of processing of your data where one of the following applies:

if you contest the accuracy of the data processing, for a period enabling the controller to verify the accuracy of the data,
if the processing is unlawful and you request restriction of processing instead of erasure,
if the controller no longer needs the data, but you need them for the establishment, exercise or defence of legal claims,
if you have objected to the processing, pending verification of whether the legitimate grounds of the controller override your grounds.

Right to data portability: As an individual, you have the right to receive your personal data in a commonly used and machine-readable format and to transmit these data directly to another controller, provided that the processing of your personal data is based on consent or a contractual relationship and is carried out by automated means.

Right to object: If the processing is based on our legitimate interests, you have the right to object at any time to the processing of your personal data, on grounds relating to your particular situation. In such a case, we will continue to process your personal data only if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

You may object to the processing of your personal data for direct marketing purposes, including profiling, at any time and free of charge without giving any reasons by sending us an email to: info@tehnoshop.net. If you object to the processing of your data for direct marketing purposes, we will immediately stop processing your data for these purposes.

We will also provide you with other information regarding your personal data that we process at your request, in accordance with applicable law.

Right to lodge a complaint: If you suspect that the processing of your data violates the legislation in the field of personal data protection, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia, at Zaloška 59, 1000 Ljubljana, Slovenia, telephone number: +386 (0)1 230 97 30, email address: gp.ip@ip-rs.si.

Izdelava spletne trgovine