Privacy policy

PRIVACY PROTECTION POLICY

This privacy protection policy applies to anyone who uses our m-sora.si website.

A user shall be any legal or natural person who uses or visits the aforementioned website (hereinafter: the User).

By using the website, the User acknowledges to agree with the Privacy policy. By continuing to use our website, the User agrees with subsequent amendments.

PERSONAL DATA PROTECTION

M SORA d.d. respects your privacy and your personal data protection. We undertake to use your personal data solely for the purposes listed hereinafter. We carefully protect your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as: GDPR) and other legal regulations governing the personal data protection.

PERSONAL DATA CONTROLLER

The controller of personal data obtained on the above stated website and processed in accordance with the internal Rules on personal data protection is M Sora d.d., Trg svobode 2, 4226 Žiri (hereinafter referred to as: the Controller).

TRANSMISSION OF PERSONAL DATA TO THIRD PARTIES, THIRD COUNTRIES OR INTERNATIONAL ORGANISATIONS

M Sora d.d. does not transmit personal data to third parties, third countries or international organisations.

The only exception to this is the statistical data on the access and use of the website for which the Google Analytics platform are used.

Under their General terms and conditions and Privacy policy Google Analytics platform ensures that the rules under the GDPR are complied with and confirms that they have obtained the certificate of compliance under the EU-USA Privacy Shield Framework.

Google Analytics allows users to set the personal data processing options themselves by using the Google Analytics tool. More information on Google general terms and conditions for providing this service and privacy policy is available on the following links.

General terms and conditions,

Privacy policy

TYPES OF PERSONAL DATA, LEGAL BASES AND PURPOSES FOR WHICH IT IS USED

M Sora collects and processes personal data on the basis of: consents given by natural persons, concluded agreements or for carrying out the activities required before an agreement is concluded, legitimate interests which we strive for, and for complying with legal obligations applicable to us.

CONSENT-BASED PROCESSING OF PERSONAL DATA

A data subject whose personal data is processed based on his/her consent, may give his/her consent for the processing of his/her personal data for each purpose separately.

Data subject whom personal data refers to may in a simple and easily accessible manner recall the given consent for each purpose separately.

CONTACT DETAILS REGARDING ADVICE, SALES AND INSTALLATION

Based on a consent given with the aim to establish contact regarding advice, sales and installation, M Sora d.d., when it receives an inquiry, collects and processes the following personal data: name and surname (company), e-mail address, street name and house number, ZIP code, city and telephone number.

CONTRACT-BASED PROCESSING OF PERSONAL DATA

M Sora d.d. collects and processes personal data of natural persons based on a contract, i.e., to carry out measures before the contract is concluded, such as for example a purchase of an M Sora product or a drawing-up of a quote for an M Sora product. Contract-based processing of personal data takes place in order to fulfil contractual provisions such as, for example, installation, complaints, repair service, warranty claims etc.

PROCESSING OF PERSONAL DATA ON THE BASIS OF LEGITIMATE INTERESTS

M Sora d.d. collects and processes personal data on the basis of legitimate interests which we strive for. Personal data is processed on the basis of legitimate interests for the following purposes:

  • statistical analysis of the traffic on the M Sora d.d. websites;
  • providing and improving our services;
  • providing and developing innovative and tailor-made solutions for our clients and users of the M Sora d.d. website;
  • to provide safety of our services and websites and to protect them against fraud, spam, abuse etc.

For the above stated purposes, we collect the following personal data: IP-address, statistical data on the traffic on the M Sora d.d. website, data on the number of clicks, timing of a click, data in incoming and outgoing websites, data on the client type.

PROCESSING OF PERSONAL DATA BASED ON LEGAL OBLIGATIONS APPLICABLE TO THE CONTROLLER

M Sora d.d. collects and processes personal data based on legal obligations applicable to the controller for the following purposes: keeping accounting records, issuing invoices, recovering debt etc.

For the aforementioned purposes, we collect and process the following personal data: first name and surname, address, bank details, tax ID number, e-mail address.

Personal data protection

To protect personal data, M Sora d.d. carries out all relevant physical, technical, logical and organisational procedures and measures on the basis of adopted by-laws and in line with data protection good practices so that:

  • it protects the application software used for data processing;
  • it prevents unauthorised access to personal data while the latter is being transmitted, including transmission by telecommunication devices and networks;
  • it provides an efficient manner of archiving, destruction, deletion or anonymisation of personal data;
  • premises as well as hardware and software are protected;
  • for the period during which such personal data is stored, it is possible to identify at a later stage when individual personal data was processed in any way and who processed it.

AUTOMATED PROCESSING OF PERSONAL DATA

M Sora d.d. automatically processes personal data relating to the location of users who fill out one of the following forms ‘Send inquiry’, ‘Job’, ‘Entry in the database of architects and business partners’, ’Repair service’. During the automated processing the personal data which the data subject fills out is sent automatically to the data controller, i.e., M Sora d.d.

DEADLINE FOR STORING PERSONAL DATA

Personal data obtained on the basis of the consent given by a natural person shall be stored five years from you recalling the consent.

Personal data which is processed on the basis of a contract may be stored for ten years from contracting parties fulfilling their obligations. In the event of recovery of unsettled liabilities such data may be stored for ten years from the completion of the relevant legal proceedings.

Personal data collected on the basis of legitimate interests are stored until the data subject to whom such data refers enforces his/her rights or until the purpose for which such data was collected still exists.

RIGHTS OF DATA SUBJECTS

In accordance with the personal data protection legislation data subjects have the following rights:

Right of access by the data subject

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data.

Right to rectification

The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her.  Taking into account the purposes of the processing, the data subject shall have the right to have incomplete or inaccurate personal data completed.

Right to erasure

The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where the reasons under the GDPR apply.

Right to restriction of processing

The data subject shall have the right to obtain from the controller restriction of processing where the accuracy of the personal data is contested by the data subject, where the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead, where the data subject has objected to processing and where the controller no longer needs the personal data for the purposes for which they were initially collected, but they are required by the data subject for the establishment, exercise or defence of claims.

Right to data portability

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.

Right to objection

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on the processing required for the controller’s legitimate interests.

Right to lodge a complaint with a supervisory authority

Data subject shall have the right to lodge a complaint regarding the processing of his/her personal data directly to the competent supervisory authority, i.e., the Information Commissioner of the Republic of Slovenia.

How data subjects may enforce their rights

Data subject may at any time enforce the rights he/she is entitled to in accordance with the GDPR.

He/she shall do so by sending an e-mail with a request to the following e-mail address: info@m-sora.si.

Should you have any questions regarding the Privacy protection policy, we are at your disposal at: info@m-sora.si.

COOKIES

M Sora d.d. website uses cookies for its unhindered operation. Cookies are data files stored in the user’s device which he/she uses to access the web portal. These data files save the browsing data (unique settings the user selected on a particular website) on the user’s device.

AMENDMENTS AND VALIDITY

M SORA d.d. reserves the right to amend the Privacy protection policy of which you will be adequately informed.

The Privacy protection policy shall apply as of 25 May 2018.

Contact