Cart

0
  1. Home /
  2. Page

Privacy Policy

PRIVACY POLICY

 

The entuziast.si Privacy Policy complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("General Data Protection Regulation") and the legislation of the Republic of Slovenia and includes the following information:

  • KSHAMA d.o.o.'s contact information and the contact details of the Data Protection Officer,
  • the legal bases and purposes for processing personal data,
  • the types of personal data collected,
  • the use of cookies and related technologies,
  • manage your privacy settings,
  • the provision of personal data,
  • retention periods for personal data,
  • protection of personal data,
  • the rights of individuals with regard to personal data, including the right to lodge a complaint,
  • changes to the privacy policy.

1. MANAGER AND CONTACT

The data controller is KSHAMA d.o.o., Crnekova ulica 7, Maribor, 2000 Maribor (hereinafter also referred to as "brandspot.si").

Your questions regarding this Privacy Policy, the confidentiality of your personal data, the manner of processing or your requests to exercise your rights in relation to personal data will be answered by the Data Protection Officer and/or Data Protection Officer of us. You can contact the Data Protection Officer via the above address or by email at info@brandspot.si.

2. LEGAL BASES AND PURPOSES OF PROCESSING

Brandspot.si collects, records, processes, stores, transfers and otherwise processes the personal data we hold about you on various legal bases and for the purposes set out below.

2.1 PROCESSING ON THE BASIS OF A CONTRACT

Brandspot.si processes personal data for the purpose of exercising the rights and fulfilling the obligations arising from the concluded contracts, namely:

  • contracts for the sale/purchase of products - personal data provided by customers in the online shop at brandspot.si (regardless of registration);
  • Service contracts - personal data of service subscribers (e.g. opening a user profile in the online shop, signing up to receive newsletters).

In the context of the exercise of rights and performance of contractual obligations, brandspot.si processes personal data of individuals for the purposes of identification of the individual, conclusion of the contract (although the contract for the sale of products between entuziast.si and the buyer in the online shop is concluded at the moment when brandspot.si sends an e-mail to the customer confirming the order received ("order confirmation"), the personal data provided in this case is deemed to be processed on the basis of the contractual legal basis also for the purpose of concluding the contract), for communication with you (to inform you of changes to the general terms and conditions, the new version of the website, changes to the terms and conditions of membership in the club, etc.), to inform you of changes to the general terms and conditions, changes to the website, changes to the terms and conditions of membership in the club, etc.), to provide support to users (e.g. to resolve technical problems) and, in the case of a purchase, to carry out the order (delivery, delivery of products, invoicing, settlement of any claims made by the customer (complaints, warranties)), to send notifications to individuals in connection with the execution of orders and for any other purposes necessary for the execution of the order, to store purchase history (registered users only), to carry out any recovery procedures and for our own accounting and tax purposes.

Preservation of the text of the contract and accessibility to the text of the contract

KSHAMA d.o.o. will NOT store the text of the contract between the seller and the buyer, and will NOT be accessible to the consumer at a later date. Contracts shall be concluded in Slovenian language only.

2.2 Processing based on legal obligations - purposes

Brandspot.si processes personal data on the basis of legal obligations applicable to the trade (e.g. in particular tax regulations, storage of invoices, storage of prize winners' data, etc.).

2.3 Processing based on legitimate interests - purposes

Brandspot.si may process personal data on the basis of the legitimate interests pursued by Brandspot.si, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data. Where further processing of data collected about a data subject is concerned, brandspot.si shall carry out an assessment in accordance with the General Data Protection Regulation. For example, such further use of data in pseudonymised or aggregated (aggregated) form constitutes a legitimate use of the data for marketing and other business or technical analyses of brandspot.si. As an additional measure for some forms of further processing of traffic data, the deletion of certain data may also be applied.

On the basis of legitimate interest, brandspot.si may process personal data to the extent strictly necessary and proportionate to ensure the functioning of the online services, in particular to prevent unauthorised access to your user account, the dissemination of malicious codes, to prevent fraud or other misuse of the website or mobile application, as well as to protect its intellectual property rights in relation to the online services.

On the basis of legitimate interests, brandspot.si may also process your personal data for the purposes of direct marketing (in the case of customers), preventing abuse, asserting claims or defending claims in administrative and judicial proceedings.

2.4 Processing based on consent - purposes

Brandspot.si processes personal data on the basis of the consent to the processing of personal data given by the data subject to the company for the following purposes:

  1. for direct marketing purposes - to receive notifications. The notifications contain current offers, benefits and/or invitations to events of the Manager and its business partners, invitations to participate in prize draws and competitions, as well as useful tips, news and reminders from the world of sport and healthy lifestyle;
  2. to carry out marketing analyses and customer segmentation, and to provide tailored product and service offers;
  3. for the purpose of entering prize draws.

Depending on the personal data you provide, you may receive notifications and personalised offers by SMS, MMS to the mobile phone number you provide, by email to the email address you provide or in hard copy to the address you provide.

You can withdraw or change your consent at any time in the same way as you gave it: by clicking on the 'unsubscribe' button at the bottom of the email.

Where consent involves direct marketing based on an individual's profile, brandspot.si may carry out segmentation of individuals based on their use of the entuziast.si website for the purposes of personalised offers of services and products.

3. PERSONAL DATA WE COLLECT

Brandspot.si collects a variety of information about you, including personal information that can be used to directly or indirectly identify you, if you or others choose to share this personal information with entuziast.si. We receive information in a number of ways, including when you shop in our online store, sign up for our newsletter (direct marketing), register for a user profile in our online store, visit our website. Brandspot.si collects information about your use of the services we offer.

Personal data we collect:

  1. basic personal data such as: first and last name, date of birth, email address, residential address (street, street number, postcode, city, country), delivery address (street, street number, postcode, city, country), telephone number and password to ensure the security and use of our services;
  2. Online shop user account data, when you choose to provide your data via your online profile, in addition to the basic personal data you provide to us when you register, we also collect personal data such as content and data (information) that you upload to your user account or post, send, forward or otherwise share using the online shop (e.g. comments, etc.);
  3. details of your purchase and how to pay;
  4. We collect technical information from your browser, computer or mobile device when you access the brandspot.si services.

4.

Cookies are placed on your computer when you use our online services. In general, cookies and related technologies work by assigning a unique number to your browser or device that has no meaning outside of brandspot.si.

Brandspot.si uses these technologies to personalise your experience and to help deliver content that is specific to your usage.

A list of cookies used by the website can be found at at this link.

You can use the settings on your browser or mobile device to manage the collection of information through cookies or related technologies. Brandspot.si is committed to enabling you to manage your privacy and sharing, but assumes no responsibility for missed "Do Not Track" signals via your web browser. Rejecting cookies may result in some features of the services offered not being available to you.

5. RETENTION PERIODS FOR PERSONAL DATA

We keep personal data for as long as is necessary to provide our services or longer if there are legal obligations.

The personal data associated with your user account will be kept until you request deletion, in which case the data relating to the purchase made by the user in the online shop will be retained. You can close your user account yourself in your account settings or ask us to delete it. It may take up to 10 working days from the time of the complete request to close the user account and delete your personal data. Please note that we may retain certain information from closed accounts to comply with the law, to prevent fraud, to collect debts, to resolve disputes, to troubleshoot problems, to assist in investigations by competent authorities, to enforce the Terms of Service, and to take other actions permitted by law. The information we retain will be treated in accordance with this Privacy Policy.

For the purpose of fulfilling contractual obligations, data relating to the payment of purchases in the online shop and related contact details of individuals may be stored until full payment for the services or until the expiry of any limitation period relating to the individual claim, which may be up to five years under the law. In accordance with the tax rules, invoices shall be kept for 10 years after the end of the year in which the invoice is issued.

Personal data obtained on the basis of consent will be retained until the consent is withdrawn, up to a maximum of 10 years.

We may anonymise information about you that is no longer necessary for the purposes for which it was collected or otherwise processed and combine it with other non-personally identifiable information to provide insight into statistical information that is commercially useful to brandspot.si, such as statistics on the use of the services we offer. This personal data is anonymised and does not offer a link to an identifiable individual.

6. PROTECTION OF PERSONAL DATA

We implement a number of technical and organisational measures to ensure the security of personal data during collection, transmission and storage. Brandspot.si endeavours to adequately protect your personal data, but we do not guarantee the complete security of the personal data you provide to us and we are not liable for any theft, destruction, loss, intentional or accidental disclosure of your personal data or information about you. Brandspot.si adheres to generally accepted standards for the protection of information received both during transmission and after receipt, but no method of electronic transmission or storage guarantees 100 % security, and brandspot.si cannot guarantee complete security. Brandspot.si uses SSL (Secure Sockets Layer) technology to provide encryption of personal and credit card information. Brandpot.si works with a company that ensures the security of our services and your personal information. The brandspot.si servers are further protected by the use of firewalls and other technologies to ensure data security.

It is also the user's responsibility to protect their data by ensuring that their mobile device or computer is properly secured, as well as by protecting their username, password and the appropriate software (anti-virus) protection for their electronic device. To ensure that these measures are effective in preventing unauthorised access to your personal data, you should be aware of the security features available to you through your browser. Use a browser that allows you to set security features before you transmit your personal or credit card information over the Internet. Please be aware that if you are using a browser that does not support the use of SSL technology, such transmission of personal information may be risky.

Most browsers allow you to be notified if you are on a website that does not provide a secure connection, or if you are sending data over an insecure connection. Brandspot.si recommends that you enable these features on your browser to help keep your personal information secure. You can also track the address you are at (URL). Secure web addresses start with https:// instead of http://, together with the secure link symbol used by your browser (usually a padlock at the beginning of the web address). This symbol indicates the use of secure communication with the server. Please also check the details (validity) of the security certificate of the website you are visiting.

7. LIMITATION OF LIABILITY

Brandspot.si is committed to protecting your personal data and information, but no connection to the Internet is 100 % secure and we cannot guarantee the complete security of the information you provide to us. You provide us with your personal information at your own risk.

8. INDIVIDUAL RIGHTS

Brandspot.si ensures the exercise of data subjects' rights. Requests by an individual concerning the exercise of rights shall be sent to the following e-mail address info@brandspot.si or by post to KSHAMA, trade, brokerage, information and other services, d.o.o., Crnekova ulica 7, Maribor, 2000 Maribor. 

The individual is obliged to provide proof of identity and/or address to a request that is not made from the registered user's e-mail address. Brandspot.si will respond to your request in accordance with applicable law.

The data subject has the following rights in relation to personal data:

8.1 Right of access to data

The data subject may, at any time, request that brandspot.si confirm whether or not data relating to him or her are being processed and, if so, provide access to personal data and information concerning the processing of his or her personal data (e.g. the purpose of the processing, the type of personal data, the users to whom the personal data have been or will be disclosed, the envisaged period of retention of the data, the technical and organisational measures to safeguard the data, etc.).

8.2. Right to rectification

The data subject may at any time request that entuziast.si provide him or her with the opportunity to correct any inaccurate personal data concerning him or her and to complete any incomplete personal data.

Logged-in users can do this via their user profile settings in the online shop.

8.3 Right to erasure

In accordance with the terms and conditions as further specified by the applicable regulations, the data subject may at any time request that brandspot.si grant him or her the right to erasure of personal data (the so-called right to be forgotten).

8.4 Right to restriction of processing

In accordance with the terms and conditions as further specified by the applicable regulations, the data subject may at any time request that brandspot.si grants him or her the right to restrict the processing of personal data. Registered users of the online services can do so in the settings of their user profile.

Please note that if we restrict the processing of certain personal data, we may not be able to provide a complete service.

8.5 Right to data portability

The data subject may, at any time, request that brandspot.si allow him or her to transmit the personal data in a structured, commonly used and machine-readable format to the data subject or to a controller of the data subject's choice (if technically feasible), under the terms and conditions set out in more detail in the applicable regulations.

8.6 Right to object

If brandspot.si does not process personal data on the basis of legitimate interests as outlined above, the data subject may object to such processing in certain cases. Brandspot.si will cease processing such personal data unless it deems that it has compelling legitimate grounds for continuing to do so or if the processing is necessary for legal reasons.

You can also object to the processing of personal data for direct marketing purposes by withdrawing your consent to receive notifications by clicking on the 'unsubscribe' button at the bottom of the email or by following the instructions in each notification sent.

8.7 Revocation pending consent

The individual may withdraw consent at any time, in cases where he or she has given consent for a specific purpose for the processing of your personal data.

Logged-in users can revoke consent in their user profile settings.

Withdrawal of consent shall not affect the lawfulness of the processing of personal data carried out until the withdrawal of consent.

8.8 Right of appeal to the supervisory authority

The individual has the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia if he or she considers that his or her personal data are being processed in breach of the applicable regulations governing the protection of personal data. The procedure for lodging a complaint with the supervisory authority is published at website the supervisory authority.

9. CHANGES TO THE PRIVACY POLICY

Brandspot.si reserves the right to change its privacy policy in the light of the situation and legislation in the field of personal data protection. Please review it from time to time.

We will inform you in advance of any changes to the processing of your personal data and/or changes (updates) to the Privacy Policy. Changes to the Privacy Policy will also be published on our website in due time.

If you do not agree to this Privacy Policy, please stop using our online services and close your user profile or withdraw your consent.

KSHAMA d.o.o.
Crnekova ulica 7
2000 Maribor

Maribor, 11 October 2024