Privacy Policy

Privacy Notice

This Privacy Policy applies to all users of the www.mlekarna-celeia.si website.
A user is any legal or natural person that uses or visits the aforementioned website. By using the website, the user confirms that they agree to this Privacy Policy.

Protection of personal data

At Mlekarna Celeia d.o.o., the operator of the www.mlekarna-celeia.si website, we respect privacy and the security of personal data. We undertake to use personal data exclusively for the purposes set forth in this Privacy Policy. We protect personal data with due care and in accordance with the General Data Protection Regulation and other applicable data protection legislation.

Data controller

The data controller of the personal data obtained via the above-mentioned websites, which we process in accordance with our internal policy, is Mlekarna Celeia d.o.o., Arja vas 92, 3301 Petrovče.

Transfer of personal data to third parties or third countries

Mlekarna Celeia d.o.o. does not transfer personal data to third parties, third countries, or international organisations, except in cases where the individual has given explicit consent.

The exception is the statistical data on website visits and usage, for which the online platforms Google Analytics, Facebook, YouTube, Instagram, and Mailchimp are used to send email notifications about  news and offers from Mlekarna Celeia.

Types of personal data and purposes of processing

Mlekarna Celeia d.o.o. collects and processes personal data based on individuals’ consent, contracts that have been concluded, or for the purpose of carrying out activities prior to the conclusion of a contract, legitimate interests we pursue, and to comply with legal obligations applicable to us.

Sending news, notifications and promotional offers

  • Electronic communications about news and offers from Mlekarna Celeia d.o.o.
  • Collecting orders by phone or electronically and marketing of Mlekarna Celeia products.
  • Sending e-publications or notifications about tenders and business-related updates.

Management of subscription relationships

Mlekarna Celeia d.o.o. processes the personal data of individuals on the basis of a concluded contract for the purposes of managing the subscription relationship.

The data on companies, institutions, or other legal entities that we process for the purpose of managing subscription relationships include: first name, last name, company or institution name, full address, email address, phone number, and tax identification number.

Processing based on legitimate interests

Mlekarna Celeia d.o.o. collects and processes personal data based on the legitimate interests we pursue. We collect personal data based on legitimate interests for the following purposes:

  • statistical analysis of the www.mlekarna-celeia.si website traffic;
  • providing and improving our services;
  • ensuring the security of our services and websites and protection against fraud, spam, abuse, etc.

For these purposes, we collect and process the following personal data: IP address, statistical data on visits to the www.mlekarna-celeia.si website, data on the number of clicks, click time, data on referring and exit websites, and client type data.

Personal data that is processed in accordance with the purposes stated above is not linked to the personal data of identifiable individuals.

Protection of personal data

To ensure the protection of personal data, Mlekarna Celeia implements all necessary physical, technical, and organisational measures (prevents unauthorised access to personal data during transmission, including transmission via telecommunications means and networks; ensures effective methods for archiving, destruction, deletion, or anonymisation of personal data; and ensures the security of premises, hardware, and software).

Personal data acquired on the basis of consent is retained for up to 5 years from the date the individual withdraws their consent, unless otherwise required by applicable legislation or if retained in anonymised form.

Data subject rights

In accordance with the applicable personal data protection legislation, the data subject has the following rights:

  • Right of access by the data subject
  • The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data.

Right to rectification

The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her.

Right to Erasure

The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay.

Right to restriction of processing

The data subject shall have the right to obtain from the controller restriction of processing when the accuracy of the personal data is contested by the data subject, when the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead, when the data subject has objected to the processing of his or her data and when the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims.

Right to data portability

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.

Right to object

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on processing required due to the controller’s legitimate interests, including profiling.

How to exercise data subject rights

The data subject may exercise their rights at any time in accordance with the General Data Protection Regulation.

To do so, they may send a request to exercise their rights at any time to the email address tajništvo@mlekarna-celeia.si

Cookies

The website www.mlekarna-celeia.si uses cookies to ensure its proper functioning. These are files that are stored on the user’s device used to access the website. They store unique user data or the settings selected by the user on a particular website on the user’s device. More on cookies in Cookie Policy.

Changes and validity

Mlekarna Celeia d.o.o. reserves the right to changes to the Privacy Policy, about which we will issue an appropriate notice.

Legal basis for personal data processing

Personal data processing at the Mlekarna Celeia d.o.o. company is based on the following legal grounds:

  • data subject’s consent (Article 6(1)(a) of the GDPR),
  • the performance of a contract  or in order to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) of the GDPR),
  • compliance with a legal obligation (Article 6(1)(c) of the GDPR),
  • legitimate interests pursued by the controller or by a third party (Article 6(1)(f) of the GDPR), except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

Contractual obligation and consequences of non-performance

In cases where personal data is necessary for the conclusion or performance of a contract with the user, Mlekarna Celeia d.o.o. will inform the individual of this. Should the individual fail to provide the necessary data, this may mean that the contract cannot be concluded or performed.

Automated decision-making, including profiling

Mlekarna Celeia d.o.o. does not currently carry out automated decision-making, including profiling, as defined in Article 22 of the General Data Protection Regulation (GDPR). In the event of any changes, the individual will be expressly notified.

Transfer of personal data to contractual data processors

In certain cases, the company may entrust personal data to third-party contractual processors (e.g., for website hosting, accounting services, sending emails, etc.). These processors are bound by the same level of personal data protection as that provided by Mlekarna Celeia d.o.o., and they may not use personal data for their own purposes.

Right to lodge a complaint

If an individual believes that the processing of their personal data violates data protection regulations, they have the right to file a complaint with the supervisory authority: Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, e-pošta: gp.ip@ip-rs.si, telephone: 01 230 97 30.

Validity and changes to the policy

This Privacy Policy is effective from the date it is published at the mlekarna-celeia.si website, and my be updated occasionally without prior notice. All changes will be posted on this website. Please check this policy regularly.