Legal notice
- General information on personal data protection
- The right to privacy is one of the most important human rights. At Orto Bar, we are aware of the importance of personal data protection, which is why we handle your data in accordance with the regulations governing the protection of personal data. As a manager of personal data, Orto Bar enables individuals to be aware of all relevant information relating to their personal data.
- The organization KIR d.o.o., Grablovičeva 1, 1000 Ljubljana, VAT ID SI99568837, is responsible for the protection of personal data.
- Orto Bar obtains personal data of individuals from various sources. In most cases, they are provided directly to us by customers who choose our services, via an online order or in writing.
- Orto Bar stores and protects personal data so that there is no unauthorized disclosure of data to unauthorized persons. At Orto Bar, we undertake not to pass on, lend or sell personal data to a third party without prior notification and obtaining your consent, without corresponding suitable protective measures, and that we will only process personal data within the framework of legal legal bases and selected purposes.
- Orto Bar does not transfer collected personal data or does not transfer to third countries.
- Person responsible for data protection
- The person responsible for data protection can be reached at the email address info@orto-bar.com.
- Legal basis for processing personal data and purposes of processing
- 1. Processing of personal data for the needs of providing services
- Orto Bar processes collected personal data of individuals for the purposes of providing services and for monitoring customer satisfaction (including complaints) and managing contacts with individuals through various channels.
- 2. Processing of personal data based on the customer's consent
- The processing of personal data can also be based on the concrete consent of the individual, who allows Orto Bar to use his personal data for the purposes defined in the consent, namely for:
- receiving general news, namely news, benefits, offers, invitations to events, invitations to participate in sweepstakes, and invitations to participate in surveys and research.
- receiving customized offers of our products and services as well as other novelties, benefits, invitations to events, invitations to participate in prize games and invitations to services, namely for the implementation of segmentation.
- receiving personalized offers, namely Orto Bar will create your personality profile based on an individual analysis of shopping habits, past purchases, your interests and personal characteristics (especially analysis and evaluation, opening of electronic advertisements, clicks on the offered links, image material) and surveys and designed the service offer for you accordingly.
- In the event that an individual does not give consent for the implementation of the purposes of processing personal data listed above, gives it partially or withdraws consent (partially), Orto Bar will inform such an individual only in the cases and to the extent of the given consent, or in ways permitted by the applicable legislation (e.g. general information, fulfillment of obligations regarding information about the product or service used by the customer).
- The provision of services is not conditional on giving consent. Giving consent is voluntary and if the individual decides not to give it or cancels it later, this does not in any case reduce the rights arising from the business relationship or for the individual, this does not represent additional costs or aggravating circumstances.
- Orto Bar can also forward the data of individuals, if they have given their consent for the purposes defined in the consent, to other companies of the Orto Bar Group.
- Withdrawal of individual consent
- Consent is given for the purposes specified in the consent and is valid until revoked. When an individual partially or fully revokes his consent, Orto Bar will no longer use his data for the purposes for which he has given the revocation.
- If an individual wishes to revoke consent, they can do so by sending the revocation to Orto Bar online at info@orto-bar.com or in writing to Orto Bar. Revocation of consent does not affect the legality of processing personal data based on consent prior to its revocation.
- Individuals can always "unsubscribe" from receiving individual messages from Orto Bar and authorized partners, also through the communication medium on which they received a certain message. Link to unsubscribe or information on how to unsubscribe is in the message. The individual's request for cancellation will be recorded in the system and will start to be enforced immediately or no later than 15 days after receipt.
- Categories of users of personal data
- The users of personal data are employees, authorized partners and contractual processors of Orto Bar, who are obliged to respect and protect the personal data of individuals based on labor legislation, contracts on the processing of personal data or contracts on the protection of confidential data. More detailed information on categories of users, contractual partners and contractual processors can be obtained on request from info@orto-bar.com.
- Users access data in accordance with the assigned data access rights.
- Orto Bar also forwards personal data to third parties if such an obligation to provide or disclose is imposed by law (for example, the Financial Administration of the Republic of Slovenia, courts, police, etc.).
- Storage of personal data
- The retention period of personal data depends on the basis of processing and the purpose of processing each category of personal data. Personal data is kept only as long as it is necessary to achieve the purpose for which it was collected or further processed. Personal data are deleted, destroyed, blocked or anonymized after the purpose of the processing has been fulfilled, if there is no other legal basis or if this is necessary for the assertion, implementation or defense of legal claims.
- Customer rights
- Orto Bar provides the individuals whose personal data it processes with the possibility of exercising their rights, namely:
- rights of access to personal data collected in relation to him;
- rectification rights to have Orto Bar correct inaccurate personal data relating to him without undue delay;
- the right to erasure, that Orto Bar deletes personal data relating to him without undue delay, when one of the following reasons applies: (1) the personal data is no longer necessary for the purposes for which it was collected or otherwise processed, (2) the individual , revokes the consent on the basis of which the processing takes place and when there is no other legal basis for the processing, (3) the individual objects to the processing, and there are no overriding legal reasons for their processing, (4) the personal data were processed illegally, ( 5) if so stipulated by law.
- the right to limit processing when one of the following cases applies: (1) the individual contests the accuracy of the data, namely for the period that allows Orto Bar to verify the accuracy of the personal data, (2) the processing is illegal and the individual objects to the deletion of the personal data, and instead requests the restriction of their use, (3) Orto Bar no longer needs personal data for the purposes of processing, but the individual needs them to assert, implement or defend legal claims, (4) the individual has filed an objection regarding data processing until it is verified, whether the lawful reasons of the controller prevail over the reasons of the individual. When the processing of personal data has been limited in accordance with the previous paragraph, such personal data, with the exception of their storage, is processed only with the consent of the individual to whom it relates, or for the assertion, implementation or defense of legal claims or for the protection of the rights of other physical or legal persons. Orto Bar must inform the individual before canceling the restriction of processing.
- An individual can submit a request in a way that enables his identification, namely by verbal request on the minutes in the branch, written request or request submitted via e-mail.
- Received requests are handled by the person responsible for data protection. Orto Bar is obliged to respond to an individual's request without undue delay, or within one month at the latest.
- Orto Bar must provide the requested information to the individual free of charge. However, when an individual's requests are manifestly unfounded or excessive, particularly because they are repeated, Orto Bar may (1) charge a reasonable fee, taking into account the administrative costs of providing the information or message or implementing the requested action, or (2) refuse to act on the request.
- Objection in the event of an incomplete decision by the manager and the right to file a complaint with the supervisory authority
- If an individual believes that the personal data he received on the basis of a request to exercise his rights from the previous point of this General Information is not the personal data he requested or that he did not receive all the requested personal data, before filing a complaint with Orto Bar file a reasoned objection within 15 days. Orto Bar is obliged to decide on the objection within 5 working days.
- Against the controller's silence (i.e. if Orto Bar does not respond to the individual's request to exercise their rights within 1 month), the individual can file a complaint with the supervisory authority due to the silence.
- An appeal is possible against the controller's negative response, which is the responsibility of the supervisory authority. An individual can file a complaint with the administrator within 15 days of receiving the administrator's response.
- Use of the website
- When using the website, special conditions and cookies apply. You can find them on the /legal-notice tab.
- Other
- Orto Bar reserves the right to amend or supplement this General Information to ensure compliance with regulations in the field of personal data protection. Information is available on our website.
- More detailed information can also be obtained on request from the person responsible for data protection at the email address info@orto-bar.com.
- Ljubljana, May 2018