Privacy Policy

PROCESSING OF PERSONAL DATA

At PLASTA d.o.o., we are aware of how important the security of individuals’ personal data is. Therefore, we carefully respect and enforce applicable national and European legislation in this field. We process personal data to provide the best possible user and consumer experience in connection with our products and services, while also ensuring the highest level of care, security, and confidentiality in the storage and processing of your personal data. All our activities related to personal data are in accordance with the current data protection legislation. We ensure that your personal data is properly and carefully stored, that we maintain appropriate control over the purposes of processing your personal data, and that you can exercise all rights granted to you under applicable law. As an individual, you have the right to request:

  • information on which of your personal data we process and for what purposes;
  • restriction or deletion of your personal data from our databases;
  • correction of your personal data in case of inaccuracies in our database;
  • transfer of personal data from our database to another processor or controller;
  • objection in case the processing is intended for direct marketing, including the creation of user profiles, and we have the obligation to ensure that these rights are fulfilled.

You can read more about your rights regarding personal data protection below.

LEGAL BASES FOR PROCESSING

The company PLASTA d.o.o. processes your personal data only if it has a legal or other lawful basis for doing so. We process data on the following grounds:

  • Your explicit consent within the contact form and the use of web analytics;
  • For the performance of a contract concluded between us as the service provider and you as the service user;
  • For the implementation of measures prior to the conclusion of a contract;
  • Legitimate interest, mainly related to direct marketing of our services; and
  • Fulfilment of legal obligations, particularly in cases of non-compliance with contractual obligations and related sanctions.

DATA WE PROCESS AND OUR PURPOSE

Data obtained via the contact form and online purchase

The data we obtain through the contact form includes your name and surname, phone number, email address, and the service(s) you require. We collect them securely. They are used to respond to your inquiry, fulfil contractual obligations, and for continued business cooperation. This data is not used for marketing purposes unless you explicitly agree to it.

Data obtained based on a concluded contract

The data we obtain based on a concluded contract includes the company name, address, tax and registration number, and the name, surname, and email address of the contact person. We need this information to ensure smooth operation, issue invoices, and, if necessary, for debt collection purposes.

Data obtained from public records

The data we obtain from public records includes the company name, address, and tax number. We need this data to issue invoices. In our business practice, we do not collect data from databases for marketing purposes. We process personal data of individuals at the request of clients and under contract with them. It is the client’s responsibility to ensure that the data is collected lawfully. We obtain all necessary information to confirm that the data has indeed been lawfully acquired. For the purpose of marketing our services, we advertise on various platforms (Google Ads, Facebook Ads Manager), using data obtained through advertising tools. These tools do not give us access to specific personal data; rather, we can profile visitors to our site based on anonymized data. This ensures that our marketing reaches those interested in advertising services and that they receive relevant ads.

PROCESSING OF PERSONAL DATA WHEN VISITING THE WEBSITE WWW.PLASTA.SI

To ensure the best user experience on our website, we use advanced web analytics software, Google Analytics. The purpose is to ensure that the website functions smoothly and is optimized for all visitors. As a user, you have the right, upon visiting the homepage, to refuse the processing of such data. You can avoid processing by adjusting your cookie settings when visiting the website or by configuring your browser settings accordingly. If you later decide to consent to the use of web analytics, you can do so in the same way as when you disabled or refused them. You can change this setting on the homepage. If you consent to data processing (accept cookies), we obtain your anonymized IP address. This means that all your personal data is encrypted and unavailable to us.

RIGHTS OF INDIVIDUALS WHOSE PERSONAL DATA IS PROCESSED

Individuals whose personal data we process have the right to request from PLASTA d.o.o.:

  • access to personal data,
  • correction of personal data,
  • deletion of personal data from the personal data collection, and
  • restriction of processing of their personal data.

As an individual, you also have the right to object to processing and the right to data portability. You can exercise your rights by submitting a written request via email to info@plasta.si. We will decide on your request within one month of receipt. This period may be extended by up to two additional months in cases of complexity or a large number of requests, in which case you will be notified.

ACCESS TO YOUR PERSONAL DATA OR INFORMATION ABOUT PROCESSING

You always have the right to know whether personal data concerning you is being processed. If so, we provide access to your personal data and the following information:

  • the purpose(s) of processing;
  • types of personal data;
  • recipients to whom personal data has been or will be disclosed;
  • the anticipated retention period or, if not possible, the criteria used to determine this period;
  • if personal data has not been collected from you, any available information about its source.

Access to information about data processing is free of charge unless the individual’s requests are manifestly unfounded or excessive, particularly due to their repetitive nature. In such cases, the controller may: a) charge a reasonable fee considering administrative costs, or b) refuse to act on the request.

Right to rectification

As an individual, you have the right to have inaccurate personal data concerning you corrected and, considering the purposes of processing, to have incomplete personal data completed.

Right to erasure

You have the right to have your personal data erased where one of the following applies:

  • the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
  • you withdraw consent on which the processing is based and there is no other legal ground for processing;
  • you object to processing and there are no overriding legitimate grounds for the processing;
  • the personal data has been unlawfully processed.

Right to restriction of processing

You have the right to obtain restriction of processing where one of the following applies:

  • you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the data;
  • the processing is unlawful and you oppose erasure of the data and request restriction of its use instead;
  • we no longer need the personal data for processing purposes, but you require it for the establishment, exercise, or defense of legal claims;
  • you have objected to processing based on legitimate interests, pending verification of whether our legitimate grounds override yours.

If processing has been restricted, such data shall only be processed with your consent, except for storage, legal claims, or protection of another person’s rights. Before lifting the restriction, we are obliged to inform you.

Right to data portability

You have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format, and the right to transmit that data to another controller where processing is based on consent or is carried out by automated means. Upon request, and where technically feasible, personal data may be directly transferred to another controller.

Right to object

Where your data is processed based on legitimate interest for marketing purposes, including profiling, you may object to such processing at any time.

Right to lodge a complaint with the Information Commissioner
If we do not decide on your request within the legal timeframe or if your request is rejected, you have the right to lodge a complaint with the Information Commissioner.

PERSONAL DATA RETENTION PERIOD

We store data only as long as necessary to achieve the purpose for which it was collected or further processed, or until the expiry of limitation periods for fulfilling obligations or statutory retention periods. Data on clients or customers processed under the law is stored until full payment of services, but no longer than the limitation period for claims, unless a longer retention period is required by law. Other data obtained based on your consent is retained for the duration of cooperation and for an additional 2 years after termination, unless otherwise required by law. If a person who has consented to data processing does not enter into a business relationship with us, the consent is valid for 2 years from submission. As a VAT taxpayer, we are required to keep invoices for 10 years after the end of the year to which they relate. After the retention period expires, data is deleted, destroyed, blocked, or anonymized unless otherwise required by law.

DATA CONTROLLER INFORMATION

Your personal data is collected and processed by PLASTA d.o.o., located at Kamnje 41, 8232 Šentrupert, Slovenia. The Data Protection Officer appointed by the controller can be reached via email: info@plasta.si
.

FINAL PROVISIONS

If certain areas are not regulated by these terms of personal data processing, the applicable legislation shall apply instead. We reserve the right to amend these terms. You will be informed of any changes by publication on our official website or in another appropriate manner. The amendment will be published at least one month before taking effect on the official website.

These personal data processing terms are valid and applicable from 01.01.2022.