Personal data processing
In the company OSIKRO d.o.o., we are aware of the importance of the security of personal data of individuals, which is why we carefully respect and enforce applicable national and European legislation in this area.
We process personal data in order to provide the best user and consumer experience in connection with our products and services, and we also ensure the highest level of care in the field of security and discretion in the storage and processing of your personal data.
All our actions related to personal data comply with the current legislation in the field of personal data protection. We make sure that your personal data is stored properly and with due diligence, we provide appropriate control over the purposes of processing your personal data and enable you to exercise all the rights you have under the current applicable legislation.
As an individual, you have the right to request:
You can read more about your personal data protection rights below.
Legal basis for processing
The company OSIKRO d.o.o. processes your personal data only if it has a legal or other basis for this. Thus, we process data on the following bases:
your direct consent within the contact form and use of web analytics;
to perform the contract concluded between us as a service provider and you as a customer of the service;
due to the implementation of measures before the conclusion of a contract;
legitimate interest related primarily to the direct marketing of our services; and
fulfilment of legal obligations, especially in case of non-fulfilment of contractual obligations and thus appropriate sanctions.
The data we process and our purpose
Data obtained on the basis of the contact form and online purchase
The data we obtain on the basis of the contact form is your name and surname, telephone number, e-mail address and the service(s) you need. We collect it in a safe way. We use it in order to respond to your request/fulfil the obligations from the sales contract and for further business cooperation. We do not use this data for marketing purposes unless you expressly agree to it.
Data obtained on the basis of a concluded contract
The data obtained on the basis of the concluded contract is the name of the company, address, tax and registration number, as well as the name, surname and e-mail address of the contact person. We need it for smooth work, issuing invoices and at a later stage for possible recovery.
Data obtained from public records
The data obtained from public records are the name of the company, address and tax number. We need it to issue an invoice. In our business practice, there is no collection of data from databases for marketing purposes.
We process the data of natural persons at the request of clients and under a contract with them. The client himself ensures that the data is collected in a lawful manner. Thereby, we obtain all the necessary evidence that the data was indeed obtained in a lawful manner.
For the purpose of marketing our services, we advertise on various platforms (Google Adwords, Facebook Ads Manager), using data obtained through advertising tools. We do not have access to specific personal data with these tools, but we can profile visitors of our site on the basis of this data which is anonymised. Thereby, we want our marketing to be aimed at those who are interested in advertised services; thus, they can receive suitable ads.
Processing of personal data when visiting the website www.osikro.si/en/
We use the advanced web analytics program Google Analytics to provide the best user experience on our website. The purpose is to ensure the smooth operation of the website for users and that it is optimised for the benefit of all our visitors.
As a user of our website, you have the right not to consent to the processing of this data immediately upon visiting the title page. You can avoid the processing by using the appropriate cookie settings when you visit the website or the appropriate cookie settings in the web browser you are using.
If you choose to consent to the use of web analytics, you can do so in the same way that you turned it off or refused. You can change this on the title website.
If you consent to the processing of data (you accept cookies on the site), we obtain your anonymised IP address. This means that all your personal data is encrypted and not available to us.
The rights of the individuals whose personal data is processed
Individuals whose personal data we process have the right to request from OSIKRO d.o.o.:
the access to personal data;
the correction of personal data;
the deletion of personal data from the personal data file; and
the restriction of the processing of your personal data.
As an individual, you also have the right to object to the processing and the right to the portability of your personal data.
You can exercise your rights with a written request sent to the e-mail address email@example.com.
We will decide on your request within one month of receiving your request. This period may be extended by a maximum of two additional months in the event of complexity and a large number of requests, of which you will be notified.
Access to your personal data or acquaintance with the processing
You always have the right to be informed whether personal data related to you is being processed. If this is the case, we provide you with access to your personal data and the following information:
purpose(s) of processing;
types of personal data;
users to whom personal data has been or will be disclosed;
the envisaged retention period of storage of personal data or, if that is not possible, the criteria used to determine that period;
when personal data is not collected from you, all available information regarding its source.
The information about the processing of personal data shall be free of charge, except when the data subject’s requests are manifestly unfounded or excessive, in particular because they are repeated. In such a case, the operator may: a) charge a reasonable fee, considering the administrative costs of providing the information or communication or implementing the requested action, or refuse to act on the request.
Right to correction
As an individual, you have the right under the law to correct inaccurate personal data about you and, considering the purposes of processing, the right to supplement incomplete personal data.
Right to deletion
You have the right to have your personal information deleted when one of the following reasons applies:
personal data is no longer required for the purposes for which it was collected or otherwise processed;
when you revoke the consent on the basis of which the processing is implemented and there is no other legal basis for the processing;
when you object to the processing and there are no overriding legitimate reasons for the processing;
personal data has been processed illegally.
Right to the restriction of processing
You have the right to restrict the processing of your personal data when one of the following cases applies:
when you dispute the accuracy of the data, for a period that allows us to verify the accuracy of the personal data;
the processing is illegal and you oppose the deletion of personal data and instead request a restriction on its use;
we no longer need your personal data for the purposes of processing, but you need it to enforce or defend legal claims;
if you have filed an objection to processing based on our legitimate interests until it is verified that our legitimate reasons outweigh your reasons.
If the processing of personal data has been restricted, it is processed only with your consent with the exception of their storage, or for the purpose of asserting, enforcing or defending legal claims or for the protection of the rights of another natural or legal person.
We are obliged to inform you before the restriction on the processing of your personal data is lifted.
Right to data portability
You have the right to receive your personal data provided to us in a structured, commonly used and machine-readable form, and the right to pass this data to another operator when the processing is based on your consent or the processing is implemented by automated means. At your request, where technically feasible, personal data may be transferred directly to another operator.
Right to objection
When we process your data on the basis of a legitimate interest for marketing purposes, including profiling, you may object to such processing at any time.
The right to file a complaint with the Information Commissioner
If we do not decide on your request within the legal deadline or reject your request, you have the option of filing a complaint with the Information Commissioner.
Period of storage of personal data
We keep the data for no longer than is necessary to achieve the purpose for which it was collected or further processed or until the expiry of the statute of limitations for the fulfilment of obligations or the legally prescribed storage period.
Data on subscribers or customers the processing of which is based on the law after the termination of the service relationship is kept until full payment of services, but no longer than the expiration of the statute of limitations for their receivables for services or contract performance, except when the law provides a longer storage period.
Other data obtained on the basis of your consent is kept for the duration of the cooperation and for 2 years after the termination, unless the law provides for a longer storage period. If the customer who gave consent to the processing of personal data has not entered into a business relationship with us, his consent is valid for 2 years from its submission. As a taxable person under the law governing value added tax, we must ensure the storage of invoices for a further 10 years after the end of the year to which the invoices relate.
At the end of the storage period, the data shall be deleted, destroyed, blocked or anonymised, unless otherwise provided by law for an individual type of data.
Your personal data is collected and processed by the company OSIKRO d.o.o., with its registered office at Lokarje 19, 1217 Vodice, Slovenija, registration number: 8105499000. The authorised person for personal data protection appointed by the operator is accessible via e-mail: firstname.lastname@example.org.
If certain areas are not regulated by these conditions for the processing of personal data, the applicable legislation shall apply instead.
We reserve the right to change these conditions of processing. We shall inform you about the change by publishing it on the official website or in another appropriate way. The change shall be published on the official website one month before its entry into force.
The subject processing conditions are valid and applicable from 01.01.2021.