Privacy and Personal Data Protection Policy

General terms and conditions

The privacy and personal data protection policy applies to all users of the www.pirnar.com.kw website (hereinafter: the Website) controlled by Pirnar d.o.o., Bravničarjeva 20, 1000 Ljubljana, Slovenia (hereinafter: Pirnar).

Data controller

For any data provided by data subjects, the data controller is Pirnar d.o.o., Bravničarjeva 20, 1000 Ljubljana, Slovenia, its franchise and other partners involved in installing, servicing or other form of services required to perform business activities.

Personal data types and purpose of collecting

Pirnar respects and protects Website users’ privacy and is processing personal data responsibly and in line with the Personal Data Protection Act (ZVOP-1) and the Regulation (EU) 2016/679 of the European Parliament and of the Council, dated 27 April, 2016, on the protection of natural persons with regard to Processing of Personal Data and free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Customer data is processed by the data controller for the purpose of fulfilling its contractual obligations, individual identification, performing transactions, invoicing, shipment, solving complaints, and for other purchase-related communication.

The data controller collects and processes personal data of data subjects in case of purchase, registration, or when consent is given by individuals to receive our Newsletter. By participating in any of the abovementioned activities, the following personal data will be processed: name and surname, e-mail, password in encrypted form, place of residence, country of residence, telephone number, IP address, registration data, communication history, information about purchase and benefit utilisation (purchase date, purchase type, purchased goods, purchase amount, payment method, type of discount, etc.) and information about shipment and installation. Pirnar requires this information for the purpose of communication, preparing and sending offers and benefits customised to users’ interests.

Customer information is processed by the data controller for the purpose of fulfilling its contractual obligations, individual identification, performing transactions, invoicing, shipment, product installation or servicing, solving complaints and for other purchase-related communication.

On the basis of an individual’s consent, the data controller may process personal information for preparing and sending customised offers that customers are interested in. Notifications are sent through chosen communication channels. Communicating personal data is voluntary and may be terminated by data subjects at any time. Information is stored until revocation of data subject consent or until a request to delete such information is received.

The data controller may also process certain personal information (name and surname, address, e-mail, telephone number) for the purposes of direct marketing and assessing customer satisfaction or customer experience with provided services, on the basis of legal interest, if data subjects do not object to such processing.

Information requiring individuals’ consent is processed in line with existing legislation.

For what purposes is data collected and how is it used?

Pirnar collects personal data for the following purposes:

Improving the quality of Website content and services functionality;
Fulfilling purchases (performing transactions, invoicing, delivery, anything in relation to an order) and other purchase-related communication;
Preparing customised offerings and communicating offerings that individuals are interested in, only through selected communication channels;
Marketing research, with the aim of supply and cost optimisation and improving customer satisfaction;
Communicating Newsletters and other marketing materials;
Re-marketing with targeted ads on Google, Facebook, Linkedin and Bing marketing platforms;
Complaint solving.

Your data is carefully stored

Personal data in electronic form is appropriately stored and protected by Pirnar at its headquarters. Data processed for the purpose of fulfilling contractual obligations is kept until all the obligations are fulfilled, or a maximum of 5 years thereafter, by expiration of limitation periods related to individual claims. For the purposes of complying with tax legislation requirements, invoices are kept for 10 years from expiration of the year they refer to.

Data processed on the basis of an individual’s consent is stored by the data controller until the consent is revoked. Users may send a written request to revoke their consent for personal data use at any time to media@pirnar.si.

Protecting privacy is fundamental

Pirnar protects privacy by complying with all existing legislation requirements. Pirnar also provides all the required technical and organisational support for personal data protection and safekeeping against loss, alteration, theft and unauthorised access by third parties.

Cookies

The Website uses Cookies to provide unobstructed functionality.

Disclosing personal data to third parties

Pirnar may disclose some of your personal data to third parties in line with the purpose of processing:

An outsourced agency for marketing and online marketing activities on behalf of Pirnar. The agency performs its activities strictly on behalf, for the account of, following instructions and under the control of Pirnar, with the aim of Website technical and content optimisation, Google and Facebook marketing and re-marketing, and Website user experience optimisation;
An external online application, serving for communicating Newsletters and operating strictly on behalf and for the account of, following instructions and under the control of Pirnar;
When data is required by authorities for the purpose of conducting individual proceedings, by providing a written explanation.

Your control over our diligence

Individuals have the following rights regarding personal data processing:

Right of access to data;
Right of rectification;
Right of cancellation (“right to be forgotten”);
Right to restriction of processing;
Right to data portability;
Right of objection.

Data subjects may exercise the aforementioned rights by sending a request by email at media@pirnar.si. Pirnar will reply within 15 days of receiving such a request.

Always accessible data

Data subjects have the right to obtain confirmation from the data controller, whether their personal data is being processed, and if so, they have the right to access their personal data and the following information:

Purposes of processing;
Types of personal data;
Users or user categories to whom the personal data has been or will be disclosed, including users in third countries or international organisations;
If possible, the foreseen period of personal data storage, and if not possible, the criteria used to define such a period;
Existence of a right to request from the data controller to rectify or delete personal data, or to restrict personal data processing related to data subjects, or existence of a right to object to such processing;
Right to file a complaint with a supervisory authority;
Any available information regarding the source of data, when personal data is not obtained from data subjects;
Existence of automated decision-making, including profiling, and reasonable information about the reasons for it, as well as the meaning and foreseeable consequences of such processing for the data subject.

Pirnar provides data subjects with a copy of the personal data that is being processed. If data subjects provide their request through electronic means of communication and do not request otherwise, information is provided in electronic form.

You can always amend your data

Data subjects have the right to obtain from Pirnar, amendment of their incorrect personal data without undue delay. Considering the purpose of processing, data subjects have the right to supplement incomplete data, including by submitting additional declarations.

You can always delete your data (“right to be forgotten”)

Data subjects have the right to obtain from Pirnar, deletion of their incorrect personal data. Pirnar is obliged to delete the data in the following cases:

Personal data is no longer needed for the purposes for which it has been collected or otherwise processed;
Data subjects revoke given consent representing the basis for data processing, while no other legal basis for data processing exists;
Data subjects object to processing on the grounds of data controller legal interest, while no prevailing legitimate reasons exist for data processing, or when a data subject objects to processing;
Data subjects object to processing for the purposes of direct marketing;
Personal data is processed unlawfully;
Personal data needs to be cancelled to fulfil legal requirements, pursuant to EU or Slovene legislation.

You always have the right to restrict data processing

Data subjects have the right to obtain from Pirnar, restriction of processing their personal data in the following cases:

Data subjects object to data accuracy (for the period allowing the data controller to check data accuracy);
Processing is unlawful and data subjects request restriction of data use instead of its deletion;
Data is no longer needed for the purposes of processing; however, data subjects may require it to exercise, implement or defend legal claims;
Data subjects have filed a complaint regarding the processing - until it is verified whether legitimate reasons of the data controller prevail over the reasons of the data subject.

When personal data processing is restricted following Article 1, such personal data is processed only with consent of the data subject, excluding its storage, either to exercise, implement or defend legal claims or to protect rights of other natural or legal person, or due to important public interest of EU or a member country.

You always have the right to transfer your right

Data subjects have the right to receive data they have provided to the data controller in a structured, generally used and machine-readable form, and the right to send such data to a different data controller (when technically feasible) in the following cases:

Processing is based on data subject consent or agreement, and
processing is performed by automated means.

You always have the right to object

Data subjects have the right to object to personal data processing at any time, when the processing is based on the legal interests of the data controller. Pirnar will stop processing personal data, unless it proves that urgent legitimate reasons for processing prevail over interests, rights and liberties of data subjects, either to exercise, implement or defend legal claims.

Data subjects have the right to object to personal data processing for the purpose of direct marketing and profiling at any time, to the extent that the processing is related to direct marketing. In this case, personal data is no longer processed for such purposes.

You always have the right to file a complaint concerning personal data processing

Data subjects may send any complaints concerning personal data processing to media@pirnar.si.

When data subjects believe their rights concerning personal data processing have been breached, they also have the right to an effective remedy and by filing a complaint with the Information Commissioner.

Other

Persons under 15 years old may provide their data through the Website only with the explicit consent of their parents, foster parents, or guardians.

Authorised for personal data protection in Pirnar d.o.o., is the PR Department.

Final provisions

Pirnar reserves the right to amend and supplement these General terms and conditions. Website users shall be notified of any General terms and conditions changes through the Website.