The processing of personal data
GINEX INTERNATIONAL d.o.o. is aware of the importance of the security of personal data of individuals, so we respect and enforce the applicable national and European legislation in this field.
We process personal data with the purpose of providing the best user and consumer experience in relation to our products and services, as well as ensuring the highest level of security and discretion in the storage and processing of your personal data.

All our personal data-related practices comply with the current legislation on the protection of personal data. We take care that your personal data is properly stored and in accordance with due care, we provide adequate control over the purposes of processing your personal data, and we enable you to exercise all rights you have under current applicable law.

As an individual, you have the right to request:

• information about which personal data we process and for what purposes;
• correction of your personal data in case of incompleteness in our database;
• transfer of personal data from our database to another data processor or data controller;
• an objection in the event that the processing is intended for direct marketing, including the creation of user profiles, and we have a duty to exercise these rights to you.

You can read more about your personal data protection rights below.

The legal basis for processing
GINEX INTERNATIONAL d.o.o. processes your personal data only if it has a legal basis for it. The data processing is based on the following:

• Your direct consent in the form of a contact form and the use of online analytics;
• For the performance of a contract concluded between us as a service provider and you as a service client;
• For the purpose of implementing the measures prior to the conclusion of the contract;
• The legitimate interest, which relates in particular to the direct marketing of our services; and
• The fulfillment of legal obligations, in particular in the event of non-compliance with contractual obligations and therefore appropriate sanctions.

The data we process and our purpose
The data we obtain from the contact form and online purchase
The data we obtain from the contact form is your first and last name, phone number, e-mail address and the service(s) you need. We collect them in a safe way. We use them to respond to your inquiry/fulfil the obligations under the sales agreement and further business cooperation. We do not use this information for marketing purposes unless you expressly agree to it.

The data obtained on the basis of a contract concluded
Information obtained on the basis of a contract is the name of the company, address, tax and registration number and name, surname and e-mail address of the contact person. We need them for smooth work, for invoicing and, at a later stage, for possible recovery.

Information obtained from public records
Information obtained from public records is the name of the company, address and tax number. We need them to issue an invoice. In our business practice there is no data collection from bases for marketing purposes.

Data from natural persons are processed at the request of clients and by contract with them. The client shall ensure that the data are collected in a lawful manner. However, we obtain all the necessary information to ensure that the data has been obtained in a lawful manner.

For the purpose of marketing our services, we advertise on different platforms (Google Adwords, Facebook Ads Manager) using the information we collect with advertising tools. With these tools we do not have access to concrete personal data, but we can use these data, which are anonymised, to profile visitors to our site. In doing so, we want our marketing to be aimed at those who are interested in advertising services and who want to receive suitable advertisements.

Processing of personal data when visiting www.ginex-int.si.

We use Google Analytics, an advanced software for web analytics, to provide the best user experience on our website. The aim is to ensure the users a smooth operation of the website, which is optimized for the benefit of all our visitors.

As a user of our website, you have the right to refuse the processing of this data immediately upon your visit to the home page. To avoid processing, you can use the appropriate cookie settings when you visit the website or the appropriate cookie settings on the web browser you are using.

If you choose to give your consent to using online analytics, you can do so in the same way you used to turn it off or decline. You can change this on the first page of our web page.

In case of consent to data processing (you accept cookies on the page), we obtain your anonymised IP address. This means that all your personal data is being crypted and not available to us.

The rights of individuals whose personal data are processed
Individuals whose personal data we process have the right to request the following from GINEX INTERNATIONAL d.o.o.:

• access to personal data,
• correction of personal data,
• deletion of personal data from the personal data base and
• restriction on the processing of your personal data.
• As an individual, you also have the right to object to the processing and the right to portability of your personal data.

You can exercise your rights by means of a written request that you forward via e-mail to uprava@ginex-int.si.

We will decide on your request within one month of receiving your request. This deadline may be extended by up to two additional months, in case of complexity and a higher number of requests, and you will be notified of this.

Access to your personal data or information about processing
You always have the right to know whether personal data is processed in connection with you. Where this is the case, we provide you with access to your personal data and the following information:

• the purpose(s) of the processing;
• types of personal data;
• users to whom personal data have been or will be disclosed;
• the envisaged period of retention of personal data or, where this is not possible, the criteria used to determine that period;
• where personal data is not collected from you, all available information relating to their source.

Information on the processing of personal data shall be free of charge, except where the requests of the data subject are manifestly unfounded or excessive, in particular because they are repeated. In such a case, the controller may: (a) charge a reasonable fee, taking into account the administrative costs of transmitting information or of communicating or implementing the requested measure, or refuse to act on the request.

Right to correction
As an individual you have the right under the law to correct inaccurate personal data relating to you and, taking into account the purposes of the processing, to supplement incomplete personal data.

Right to delete
You have the right to achieve deletion of your personal data when one of the following applies:

• personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• when you withdraw consent on which the processing is based and when no other legal basis exists for the processing;
• when you object to the processing, and there are no overriding legitimate reasons for processing them;
• personal data have been processed illegally.

Right to restrict processing
You have the right to limit the processing of your personal data when one of the following applies:

• when you dispute the accuracy of the data, for a period that allows us to verify the accuracy of the personal data;
• the processing is unlawful and you object to the deletion of personal data and instead request a restriction on their use;
• we no longer need your personal data for processing purposes, but you need it to enforce or defend legal claims;
• if you have lodged an objection in respect of processing based on our legitimate interests until it is verified that our legitimate reasons prevail over your reasons.

If the processing of personal data has been restricted, they shall be processed only with your consent, with the exception of their storage, or for the enforcement, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person.
We are obliged to inform you of this before cancelling any restriction on the processing of your personal data.

Right to portability of data
You have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable form, and the right to provide this information to another controller when the processing is based on your consent or processing is carried out by automated means. Upon your request, where technically feasible, personal data may be transferred directly to another controller.

Right to objection
When we process your data on the basis of legitimate interest for marketing purposes, including profiling, you may object to such processing at any time.
The right to lodge a complaint with the Information Commissioner
If we do not decide on your request within the legal deadline or reject your request, you have the possibility to lodge a complaint with the Information Commissioner.

THE RETENTION PERIOD OF PERSONAL DATA
We store the data for a maximum time necessary to achieve the purpose for which it was collected or further processed or until the expiry of the limitation periods for the fulfilment of the obligation or the statutory retention period.
Information on clients or customers whose processing is based on the law after the termination of the service relationship is retained until the full payment of the services, but no longer than the expiry of the limitation period for our claims for performance of services or performance of the contract, except where the law provides for a longer retention period.
We retain other information obtained on the basis of your consent for the duration of the cooperation and for 2 years after it has been terminated, unless the law provides for a longer retention period. If the party that has granted consent to the processing of personal data has not entered into a business relationship with us, their consent shall be valid for 2 years from its submission. As a taxable person under the law governing value added tax, we must ensure that invoices are kept for 10 years after the end of the year to which the invoices relate.
Upon expiry of the retention period, data shall be erased, destroyed, blocked or anonymised unless otherwise provided by the law for each type of data.

Data about the controller
Your personal data is collected and processed by GINEX INTERNATIONAL d.o.o. The Personal Data Protection Officer designated by the controller is accessible by email: uprava@ginex-int.si.

Final provisions
If these conditions of personal data processing do not regulate certain areas, applicable legislation shall apply instead.
We reserve the right to change these processing conditions. We will inform you about the change by publishing it on the official website or by other appropriate means. The change will be published one month before its entry into force on the official website.

These processing conditions shall enter into force and apply from 1 January 2021.