Privacy (GDPR)

1. Privacy Protection

When you access our website, your browser transmits certain data to our web server. The reasons for this transfer are technical in nature and are necessary for you to access the desired information. For the purpose of ensuring the security of our information system, we automatically collect data about your IP address, the date and time of access, the difference in time zone compared to Greenwich Mean Time (GMT), the content of the request (specific page), the access status or HTTP status code, the amount of data transferred, the website requesting access, and your browser (version of the operating system of the browser software, language settings). Without providing at least your IP address, which we will record in the web log, you cannot use our website.
The data mentioned will be collected to ensure network and information security to prevent accidental events or illegal or malicious actions. The processing is therefore necessary for our legitimate interests and is based on point f of Article 6 of the General Data Protection Regulation (GDPR).

We will process the personal data in the web log for a maximum of 24 months, after which we will delete the data unless we have another legitimate reason for further processing.

2. Use of Personal Data

The company collects, maintains, processes, and stores the following user data for the purpose of providing its services:

• first and last name
• delivery addresses
• company name or legal entity name (if the user is a legal entity)
• tax number of the legal entity (if the user is a legal entity)
• email address (username)
• password in encrypted form
• contact phone number
• country of residence
• other data that the user voluntarily enters in the forms on the online store
• other data that the user voluntarily adds later in their profile

The company is not responsible for the accuracy, completeness, and timeliness of the data entered by users.

The provider does not share data with third parties, except for contractual processors with whom the provider has entered into a personal data protection agreement and who are contractually bound to the same standards of personal data protection as the provider.

The provider collects personal data with the explicit consent of individuals. Consent is stored along with its content and the content of the form through which it was obtained.

The collections of personal data are stored by the provider within the territory of the Republic of Slovenia and are not transferred to other countries.

3. Implementation of the Privacy Policy

The company has, in accordance with the Personal Data Protection Act, regulated the protection of personal data with the Personal Data Protection Policy.
All persons employed by the company, whether regularly or on a contractual basis, who have access to personal and other user data, are familiar with the provisions of the Personal Data Protection Policy and the obligation to protect personal and other data and are required to comply with these provisions regarding the confidentiality of personal data and the privacy of online store users. The obligation to protect personal and other data is valid indefinitely, even after the termination of the relationship with the company.

Registered users can stop using the online store at any time and can cancel their registration. They do this by notifying the cancellation of registration in writing. Before submitting the cancellation statement, the user must settle all outstanding obligations arising from purchases made in the online store. The company will protect the confidentiality of personal data and the privacy of online store users under this privacy policy even in the event of cancellation of registration.

Right to Access Data

You have the right to verify whether we are collecting personal data about you, and in that case, you also have the right to access that data.

If you, as an individual, wish for us to verify whether we are collecting personal data about you, you can request this in writing via email (gdpr@vini.si) or in writing by post.

4. Right to Erasure ("Right to be Forgotten")

You have the right to obtain the erasure of personal data concerning you without undue delay, and we, as the data controller, have the obligation to erase your personal data without undue delay in the following cases:

• you object to the processing (see the right to object),
• we have processed personal data unlawfully,
• we must erase personal data to comply with legal obligations.

Erasure will not be carried out if the processing of personal data is necessary:

• for compliance with a legal obligation to process under regulations,
• for the establishment, exercise, or defense of legal claims.

If you, as an individual, wish for us to erase your personal data, you can request this in writing via email (gdpr@vini.si) or in writing by post. The right to erasure can only be exercised in the limited cases listed above.

5. Contact Information

The data controller for this consent is:

Vini d.o.o., Stari trg 37, 8230 Mokronog, tax number: SI85893331, registration number: 5754437000, email: gdpr@vini.si, phone: 386 (0)7 34 99 226

The collected personal data will be processed by our employees and processors who perform tasks related to the operation of the websites.

Transfer of Personal Data

The hosting of the websites is provided by our processor:

Element Lab d.o.o., Litostrojska 56, 1000 Ljubljana. t: 030 700 080, e: info@element.si

The processor managing the website:

Element Lab d.o.o., Litostrojska 56, 1000 Ljubljana. t: 030 700 080, e: info@element.si

The processors of personal data that ensure the technical operation of tracking with cookies are:

Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Facebook Inc., 1 Hacker Way, 94025 Menlo Park, California