Privacy policy

In the company AIRFUN PRODUCTS proizvodnja in storitve, d.o.o., Ljubljanska cesta 45, 1241 Kamnik, registration number 5640989000 (hereinafter: the company), we are aware of the importance of protecting personal data. As a controller of personal data, we handle collected personal data responsibly and in accordance with applicable regulations in the field of personal data protection, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals in the processing of personal data and on free flow of such data and on the repeal of Directive 95/46/EC (hereinafter: General Data Protection Regulation) and with our internal acts. In order to implement the principle of fair and transparent processing, the company has prepared a Personal Data Protection Policy that enables individuals to obtain all relevant information relating to their personal data in one place.

INFORMATION ABOUT THE MANAGER

The controller of personal data is the company AIRFUN PRODUCTS proizvodnja in storitve, d.o.o., Ljubljanska cesta 45, 1241 Kamnik, registration number 5640989000.

CONTACT PERSON FOR THE PROTECTION OF PERSONAL DATA

For all questions and assistance in asserting the rights of individuals, the company has designated a contact person for the protection of personal data, who can be reached at the email address Info@nubis-physio.com or via standard mail at the company's address: AIRFUN PRODUCTS proizvodnja in storitve, d.o.o., Ljubljanska cesta 45, 1241 Kamnik with the annotation 'Personal data protection'.

TYPES OF PERSONAL DATA, LEGAL BASIS AND PURPOSE OF PERSONAL DATA COLLECTION

The company collects data from various sources. The company collects and processes personal data for the purpose of implementing contracts and measures prior to the conclusion of contracts. In the context of concluding and implementing contracts, the controller processes the personal data of contractual parties (e.g. employment contracts, work contracts, business contracts, sales contracts, etc.). In addition, the company also collects and processes personal data of contracted external employees. On the basis of the contractual legal basis, personal data (in particular data on date of birth, gender, tax number, contact data, data on residence, data on transaction account, profession, education, social security number, data on submitted personal documents and other submitted documents) are collected exclusively to the minimum extent permissible for the individual purpose. The said data is also collected and processed during the phase of concluding contracts, negotiations, after receiving an offer or individual demand. The company keeps several records of personal data processing activities, which show the types of personal data, purposes of their processing, basis for collection and processing, retention periods, access to data, etc. The company collects and processes personal data also based on the individual's consent for the purpose of direct marketing of the company's services and products, e.g. for informing about new services and products that it markets, inquiries, preparing an offer or reply and establishing communication via e-mail, telephone or regular mail. The processing of personal data in this case takes place until the cancellation of the individual. The individual's consent is voluntary, and in case of refusal or cancellation, no harmful consequences arise for the individual. The company also processes personal data on a legal basis, for example on the basis of the Employment Relations Act, for the purpose of exercising rights and obligations from the employment relationship, and on the basis of other regulations that require the company to provide personal data of individuals in certain cases

to state authorities and other administrators to fulfill their or their legal obligations or powers. On this basis, the company processes those personal data and for those purposes, as imposed on the company by applicable regulations. The company also collects the personal data of individuals when they visit the company's website, through cookies, for the purpose of ensuring better functionality and user experience, security, smooth operation of the website and tracking users on the website. The user of the online store can register in the online store, as a result of which he can make the purchase faster and without having to provide the personal data that the manager needs to make the purchase each time. A registered user can track past purchases in the operator's online store. In such a case, in addition to the registration data, the operator also processes data on the date of registration, the date of the last visit, and in the case of an online purchase, also data on past purchases, opinions, if provided, and wishes, if a product is entered on the wish list. Personal data is processed only for the purpose of managing the user profile.

PROCESSORS AND USERS OF PERSONAL DATA

In addition to the company, the personal data of individuals is also processed by external processors, especially accounting. For such a case, the company concluded an appropriate written contract on the processing of personal data, or an agreement with the same content.

The company transmits the personal data of an individual to other users if it is required to do so by law, if there is a legitimate interest in doing so or if it has the consent of the individual. The company does not transfer collected personal data to third countries. In the event that the company transfers an individual's personal data to third countries, it will take care to ensure and implement appropriate measures to ensure the security of personal data and the fundamental rights and freedoms of individuals, in accordance with applicable regulations.

RIGHTS OF INDIVIDUALS

An individual can send a written request to the Company's contact addresses listed above for the provision of the following information regarding the collection and processing of his personal data, namely the individual has the following rights:

- the right to access your personal data collected and processed by the company,

– the right to correct incorrect data,

- the right to delete data, taking into account the restrictions set by applicable regulations,

– the right to limit data processing,

– the right to object.

Upon written request, the company will provide the individual with the requested information without undue delay and in any case within one month of receiving the request. If necessary, this deadline can be extended by a maximum of two additional months, taking into account the complexity and number of requests. The company shall notify the individual to whom the personal data relates of such an extension within one month of receiving the request together with the reasons for the delay. The data provided in this way is provided to the individual free of charge. Where the data subject's requests are manifestly unfounded or excessive, particularly because they are repeated, the company may charge the individual a fee or refuse to act on the request.

RIGHT TO COMPLAINT WITH THE SUPERVISORY AUTHORITY

If an individual believes that his personal data is being processed in violation of the applicable regulations governing the protection of personal data, he has the right to file a complaint with the Information Commissioner of the Republic of Slovenia (Information Commissioner, Dunajska cesta 22, 1000 Ljubljana, Slovenia, e-mail: gp. ip@ip-rs.si) or to another supervisory authority determined by the applicable regulation.

WITHDRAWAL OF CONSENT OF AN INDIVIDUAL

When the processing of personal data takes place on the basis of consent, the individual can revoke the given consent permanently or temporarily, in whole or in part, with a written request sent to the email address Info@nubis-physio.com or

by regular mail to the company's address: AIRFUN PRODUCTS proizvodnja in storitve, d.o.o., Ljubljanska cesta 45, 1241 Kamnik with the note 'Privacy of personal data';.

The revocation of consent does not affect the legality of the processing that was carried out on the basis of consent until its revocation.

STORAGE OF PERSONAL DATA

The retention period of personal data depends on the basis of processing and the purpose of processing each category of personal data. Personal data is kept only as long as it is necessary to achieve the purpose for which it was collected or further processed. Personal data are deleted, destroyed, blocked or pseudonymized after the purpose of processing has been fulfilled, unless the applicable regulations stipulate otherwise.

CHANGES TO THE PRIVACY POLICY

The company reserves the right to make changes and/or additions to this Personal Data Protection Policy. Changes and/or additions to this Personal Data Protection Policy come into effect one day after they are published on the company's website, but the company does not specifically inform about the publication and entry into use. The history of changes and additions to the Personal Data Protection Policy is available in writing at the above contact addresses.