At EBA d.o.o. (in this document also referred to as “we” and “us”) we take the protection of your personal data, which we process when you use the website https://ebadms.si/ (hereinafter: the “website”), seriously and responsibly.
In all processing of your personal data we act in accordance with the requirements of the General Data Protection Regulation (GDPR) and with the applicable regulations (the Personal Data Protection Act ZVOP-2, Official Gazette of the RS No. 94/07, and the GDPR) and other applicable national legislation in the field of personal data protection.
Who is the controller of your personal data
The controller of personal data processed in accordance with this privacy policy is EBA d.o.o., Litostrojska cesta 40, SI-1000 Ljubljana
Contact details of the controller of your personal data
For any questions related to the processing of your personal data and the exercise of your rights, you can contact us by e-mail by sending a message to info[at]ebadms.com
Minors
Our website is not intended for persons under the age of 16.
When and how we process your personal data
Purpose of personal data processing: contact forms
On our website we have published a contact form that you can use to get in touch with us. You can also contact us at our published e-mail addresses and by telephone.
If you contact us, we will process your personal data (first and last name, contact telephone number, contact e-mail address, content of the message) for the purpose of preparing and sending a reply.
The legal basis for the processing of your personal data in this case is our legitimate interest - Article 6(1)(f) of the General Data Protection Regulation.
We will not disclose your personal data to third parties. We will not transfer your personal data to third countries or international organisations. We will keep your personal data for 36 months from the date of your submission.
In connection with the processing of your personal data, you have the right to information, access, rectification, erasure (“right to be forgotten”), restriction of processing and objection.
Who can use the personal data you have provided to us
The users of your personal data are our employees who are authorised to process your personal data, contractual processors, and public authorities, other state bodies and holders of public authority to whom personal data is disclosed when required by applicable law. We take your privacy very seriously. We will disclose it to third parties only if there is a lawful legal basis for doing so.
Contractual processors process personal data on our behalf and for our account and are subject to contractual obligations as laid down in Article 28 of the GDPR.
Within the scope of their statutory powers, your personal data may be disclosed to:
- accounting services, law firms and other providers of legal and business advisory services;
- the website administrator and webmaster;
How we will protect your personal data
To protect your personal data, we will use all organisational, technical and other appropriate procedures and measures to prevent unauthorised destruction, alteration or loss of data and any unauthorised processing. The measures may include, among other things, internal personal data protection policies, additional employee training, internal audits of processing activities, etc. Other possible measures may include reducing the collection of personal data, pseudonymisation, transparency, enabling individuals to monitor the processing, and continuous improvement of security measures.
Information on transfers of personal data to a third country or international organisation
Personal data is not transferred to third countries or international organisations.
Information on automated decision-making
Automated decision-making is not carried out.
What are your rights in connection with the processing of personal data
We have already set out your rights in connection with the processing of your personal data above in relation to the specific processing, but we believe there is no harm in restating them in order to help you exercise your rights more easily and to provide you with additional information on this matter.
At any time you may request access to, rectification or erasure of your personal data, restrict the processing of your personal data, or object to the processing of your personal data. We will inform you if this request affects the ability of this website to continue operating or our business relationship. In certain cases you also have the right to data portability to another controller.
The latter depends on the legal basis for processing and on the technical capabilities and internal rules of the individual controller.
You may withdraw your consent to the processing of your personal data for the purposes of sending offers and news at any time, which does not affect the lawfulness of the processing of your personal data based on that consent for the period before withdrawal.
If you find that your personal data is not accurate and up to date, you can notify us at any time so that we can correct it. In the event of a personal data breach, we will notify you in accordance with the conditions laid down in the applicable legislation.
We will fulfil your request without undue delay and in any case within one month of receipt of the request. Should we, due to the complexity and number of requests, extend the deadline by up to two further months, we will inform you of this within one month of receipt of the request and state the reasons for the delay.
If you believe that we are not processing your personal data in accordance with applicable law, you may lodge a complaint with the Information Commissioner by e-mail at gp.ip@ip-rs.si or by post to the address of the Information Commissioner: Information Commissioner’s Office, Dunajska cesta 22, 1000 Ljubljana.
Final provisions
This privacy policy is published on the website https://ebadms.com/ and takes effect on 25 October 2024.
EBA d.o.o.