Privacy Policy and Cookies

The purpose of the Privacy Policy, including the Personal Data Protection Notice (hereinafter: the “Notice”), is to inform you which of your personal data we collect and for what purposes, what we do with it, how we ensure its security, and what rights you may exercise in relation to the processing of personal data. We take the protection of your personal data extremely seriously and responsibly. We fully comply with our obligations relating to the lawful, fair, and transparent processing of personal data. We recommend that you familiarise yourself in detail with the contents of this Notice.

To ensure this Notice remains compliant with personal data protection regulations, Avtodomar reserves the right to amend or supplement it. We will notify you of any changes in due time in the most appropriate manner, e.g. by email or by publishing them on the website.

Controller details

Hereinafter: Avtodomar.

Which personal data do we process?

a.) Basic contact details (first name, last name, phone number, email address, address, city, town, street, country);

b.) Data about the use of our websites (link clicks, time spent) and data regarding responses to our email messages (whether the message was opened, which links you clicked);

d.) Server data (e.g. date and time of visits, visited subpages, information you viewed or searched for, etc.).

e.) Device data (data about the computer or mobile device you use to access the website, including operating system, model, web browser, etc.).

f.) Data about the use of our website.

g.) Aggregated data for advertising and marketing purposes, such as products viewed and purchased and other activities related to the purchasing process.

Legal bases for processing personal data

We collect your personal data only when it is strictly necessary or when you have given your consent. We will not process your personal data if the purpose and/or legal basis for its processing is not properly justified under the applicable personal data protection regulations (Personal Data Protection Act, Official Gazette of the Republic of Slovenia No. 94/07 – consolidated text (ZVOP-1), Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR)) and the Electronic Communications Act, Official Gazette of the Republic of Slovenia 109/12, 110/13, 40/14 – ZIN-B, 54/14 – Constitutional Court decision, 81/15 and 40/17 (ZEKom-1)).

Avtodomar will process your personal data on the following legal bases:

By visiting our website, you have accepted and agreed to this Notice and entered into an agreement with Avtodomar, which serves as the legal basis for processing your personal data. Data is encrypted and transmitted to the server in a protected form. Such a system prevents anyone from intercepting your personal data.

Avtodomar also processes your personal data on the basis of a legal obligation:

under national legislation, including, among others, the Prevention of Money Laundering and Terrorist Financing Act (Official Gazette of the Republic of Slovenia Nos. 68/16 and 81/19; ZPPDFT-1), the Personal Data Protection Act (Official Gazette of the Republic of Slovenia No. 94/07 – consolidated text; ZVOP-1), the Copyright and Related Rights Act (Official Gazette of the Republic of Slovenia No. 16/07 – consolidated text, 68/08, 110/13, 56/15 and 63/16 – ZKUASP; ZASP), etc., as well as other international treaties and EU regulations that oblige Avtodomar, in certain cases, to provide individuals’ personal data to state authorities and other controllers in order to fulfil its or their legal obligations or competences.

Avtodomar may process personal data on the basis of legitimate interest, e.g.:

a.) for statistical purposes and for collecting demographic data and visitor interests,

b.) to identify problems with the server and the website,

c.) to carry out business analyses,

d.) for the further development of the offer,

e.) to improve or tailor services to the individual,

f.) to assess the effectiveness of promotional activities and advertising,

g.) on the basis of other legitimate interests.

In certain cases, Avtodomar may process your personal data on the basis of your explicit consent for carrying out marketing activities, such as sending current news and general information about offers, new features, benefits, events, or prize draws, as well as informing you about service offers tailored to your personal interests based on profiling used by Avtodomar for these purposes. Consent is entirely voluntary and is not a condition for entering into a contract. In these cases, processing is carried out within the scope of the purpose stated in your consent and the agreed communication methods, until consent is withdrawn.

Purposes of processing personal data

We may use your personal data for one or more of the following purposes:

a.) communicating with you regarding the provision of our services and responding to your enquiries;

c.) marketing communications (sending emails and SMS messages);

d.) to assert any legal claims and resolve disputes;

f.) for advertising and marketing purposes on external websites

Types of cookies, their purpose, and duration: Cookies are small files that we download to your computer. They help the website function faster. The website uses the following cookies:

How long do we keep your personal data, and what happens to it afterwards?

The retention period for personal data depends on the legal basis and purpose of processing for each category of personal data. Personal data is kept only for as long as prescribed or permitted and strictly necessary to achieve the purpose for which it was collected or further processed. Once the purpose has been fulfilled, we will retain only the personal data we are required to keep by law or that we may need for evidentiary or defence purposes if there is a possibility of legal claims being asserted. Other data is deleted, destroyed, blocked, or anonymised, unless the law provides otherwise for specific types of personal data.

We retain your personal data that we process for sending offers and updates until you withdraw your consent, and in any case for a maximum of five years from the date you gave consent. After this period, we will ask you for consent again.

We retain data on issued invoices for 10 years from the date of issue.

After the retention period expires, we effectively delete or anonymise personal data, meaning we process it in such a way that it can no longer be linked to you or attributed to you in any way.

Voluntary provision of data and consequences of not providing it

Providing personal data is voluntary. You are not obliged to provide us with personal data; however, if you do not provide it, you cannot enter into a contract with us (as we need it to fulfil the order). We will specify which data is such that failure to provide it results in the stated consequences each time we obtain personal data from you.

Who has access to your personal data that you have provided to us? Will we disclose your personal data to third parties or transfer it outside the EU?

We take your privacy very seriously. Your personal data is a trade secret of Avtodomar. Avtodomar employees process your personal data in accordance with their authorisations and our internal policies. Contract processors are obliged to protect confidential data and to respect individuals’ rights in the same way as Avtodomar employees.

We do not provide your personal data to, nor allow access to it for, third parties, except for those with whom we have a written agreement under which they carry out certain tasks related to data processing and are required to comply with personal data processing and protection legislation – so-called contract processors. Contract processors to whom we provide personal data include, for example:

a.) marketing service providers;

b.) email delivery service providers;

c.) software solution providers, etc.

Contract processors may process personal data only in accordance with our instructions and may not process personal data for their own purposes. They, together with their employees, are bound to protect the confidentiality of your personal data.

What are your rights regarding the processing of personal data?

At any time, you may request inspection of or access to your personal data, its rectification or deletion, restriction of its processing, or you may object to the processing. We will inform you if such a request affects the continued operation of this website. In certain cases, you also have the right to data portability of your personal data to another controller. This depends on the technical capabilities and internal policies of the individual controller.

You may withdraw your consent to the processing of personal data for sending offers and updates at any time. Withdrawal of consent does not affect the lawfulness of the processing of personal data based on that consent for the period before withdrawal.

Avtodomar assumes no responsibility for the authenticity, accuracy, and up-to-dateness of the personal data you provide. The user is obliged to ensure the accuracy and up-to-dateness of all provided data.

In the event of a personal data breach, we will notify you under the conditions determined by applicable legislation.

Procedure for exercising rights

You may submit your requests relating to the exercise of rights in connection with personal data in writing to any contact listed at the top of this document under Personal Data Controller and Contact Details.

For the purpose of reliable identification when exercising rights in connection with personal data, we may request additional information from you, and we may refuse to act only if we can demonstrate that we cannot reliably identify you.

We must respond to your request to exercise your rights in connection with personal data without undue delay and no later than one month after receiving your request.

Any changes to our personal data protection policy will be published on this website.

Right to lodge a complaint

At any time, you may lodge a complaint regarding the processing of personal data with the supervisory authority in Slovenia, i.e. the Information Commissioner, at Dunajska 22, 1000 Ljubljana.

Disclaimer of liability

Avtodomar is not liable for any damage incurred by you because you provided the provider with incorrect, false, incomplete, or outdated data.

You are obliged to notify us immediately of any suspected misuse of your personal data or data required to access certain parts of the website (username and password), or if you suspect unauthorised access to such data.

Where a contractual relationship is established between the provider and the user, in any case, the provisions governing that relationship (contract, general terms, etc.) apply with regard to the provider’s exclusions and limitations of liability.

Cookies

The basis for the cookie notice is the amended Electronic Communications Act, Official Gazette of the Republic of Slovenia 109/12, 110/13, 40/14 – ZIN-B, 54/14 – Constitutional Court decision, 81/15 and 40/17 (ZEKom-1), which entered into force at the beginning of 2013 and introduced new rules regarding the use of cookies and similar technologies for storing information or accessing information stored on the user’s computer or mobile device.

What are cookies?

A cookie is a small text file that is transferred to the user’s computer when they visit a website and usually contains the name of the server from which the cookie was sent, the cookie’s lifespan, and its value – a randomly generated unique number.

A cookie itself does not contain or collect information. However, if it is read by a server together with a web browser, it can help a website provide more user-friendly services, e.g. by remembering your username and password for future sign-in or by remembering previous purchases or account details. Only the server that sent the cookie can read and use that cookie. On a trusted website, cookies can therefore enhance your experience. However, cookies can also be used in ways that interfere with an individual’s privacy. Cookies are not harmful and are always time-limited.