Data Protection Policy
Centernorma d.o.o. respects your right to privacy and strives for the highest level of protection of your personal data. Here, we want to explain which data we collect, why we collect it, and what your rights are regarding the data we hold about you and how to exercise them.
Data Controller that processes data in accordance with this policy when using the website is: CENTERNORMA d.o.o., Šentlenart 68, Mislinja, 2382 Mislinja, Company ID: 6047700000, VAT ID: SI 42581451 (hereinafter: “controller”).
Type of Data and Purpose of Personal Data Processing
We may collect personal data from you if you contact us through the service: “contact form – general information”. This service allows you to contact us and establish communication.
When filling out the form, we may collect the following data that you voluntarily provide:
- name and surname,
- email address,
- your message.
We collect this data only if you allow us to. We need it to respond to your questions or messages and to establish communication with you.
Before you provide us with the data, we need your explicit consent agreeing to our rules regarding the use of this data. All data collected based on your consent will be used solely for the purpose for which you provided it and will not be shared with third parties without your permission.
Storage and Deletion of Personal Data
We do not store your data on the website www.centernorma.si when you send us a message via the contact form. Your messages are sent directly to the email address of Centernorma d.o.o. and are used only for communication with you.
We retain the data for no longer than necessary to achieve the purpose for which it was collected or further processed, or until the expiration of the statutory deadlines for fulfilling obligations or the legally prescribed retention period.
Personal data processed based on the individual’s consent or legitimate interest is retained until the consent is revoked or until a request for data deletion is made.
Individual Rights
In accordance with the General Data Protection Regulation, you have the following rights concerning the processing of your personal data:
- Right of access to data: the right to request information from the company about which data is being processed about you, the right to obtain confirmation from the company whether your personal data is being processed.
- Right to rectification: the right to have the company correct inaccurate personal data about you without undue delay.
- Right to erasure: the right to have the company delete personal data about you without undue delay.
- Right to restriction of processing: the right to have the company restrict the processing of personal data.
- Right to data portability: the right to receive personal data concerning you, which you have provided to the company, in a structured, commonly used, and machine-readable format, and the right to transfer this data to another controller or to have the company transfer this data directly.
- Right to object: the right to object at any time to the processing of personal data concerning you.
- Withdrawal of consent: The individual has the right to withdraw consent for the processing of their personal data when the processing is based on consent, without affecting the lawfulness of processing based on consent before its withdrawal.
Exercising Rights
In accordance with the General Data Protection Regulation, exercising rights for the individual is free of charge. If the individual’s requests concerning personal data are manifestly unfounded or excessive, especially because they are repetitive, we reserve the right to charge a reasonable fee, considering the costs of providing information or implementing the requested measure. In certain cases, we may also refuse your request. To prevent unauthorized disclosure of data, we may ask you for additional information to confirm the identity of the individual when exercising rights. All questions related to the processing of an individual’s personal data or any requests regarding the exercise of individual rights are accepted via email and by mail to the company’s address.
If you believe that your rights have been violated in any way, you can contact the Information Commissioner of the Republic of Slovenia. You can submit a complaint to the address: Dunajska 22, 1000 Ljubljana, email address: gp.ip@ip-rs.si, phone: 012309730, website: www.ip-rs.si.
Data Export
We store collections of personal data within the European Union and generally do not export them to third countries. If we transfer your personal data to third countries, we will do so after carefully reviewing the legal bases and protective measures considered by the third country (binding rules, codes of conduct, standard contractual clauses). Any transfer of personal data to third countries will be carried out by the controller with due diligence in accordance with the principle of accountability.
Direct Marketing
The controller does not use any personal data for direct marketing purposes.
Disclosure of Personal Data to Third Parties
The controller does not disclose users’ personal data to third parties.
Publication of Changes
We reserve the right to change this data protection policy.