Privacy statement

General

At Arko d.o.o., we respect your right to privacy and strive for the highest level of protection of your personal data. Therefore, when providing our services through this website or when conducting business through telecommunication means, we are obliged to act in accordance with the laws and regulations defining the protection of personal data, in particular in accordance with the EU General Data Protection Regulation (hereinafter referred to as “GDPR”) and with the applicable Personal Data Protection Act.

Controller of the personal data filing system

The controller of your personal data is Arko d.o.o. (hereinafter referred to as: “Arko” or “we”),Prešernova 25, 9240 Ljutomer, Slovenia, email address: arko@arko.si, telephone number: +386 (0)258 49 620.

The purpose of personal data processing

All personal data you provide to us shall be treated as confidential and shall be used solely for the purposes for which it was provided. If there is a need for further processing of your data for another purpose, you will be contacted in advance and asked for your consent.

The disclosure of your personal data is not required by law and is not part of a contractual requirement. This means that you do not need to submit your personal information. If you decide not to provide us with your personal data, this may affect your user experience on the website.

Visiting our website

Every time you visit our website, a web server log file is automatically stored on the web server (e.g. IP number – a number used to identify a specific computer or other device online, browser version, date and time of accessing our website, location information or the information about the Internet access point, etc.). We process this data for the purpose of analysis, allowing us to improve the content and user experience on our website and to manage statistics of visits to our website. We collect your personal data with the help of cookies. We will ask your permission before installing more invasive cookies.

The data collected in this way is processed separately and is not linked to other personal data of website users. By only using this data and considering the state of the technology, the visitor cannot be uniquely identified.

Sending enquiries and other communications with us

You can fill out an online contact form on our website to submit your enquiry regarding our products and services. You can also send us an enquiry at any time or contact us using the contact details published on our website.

For this purpose, we collect the following data from you, which you provide voluntarily:

full name,

company name,

e-mail address,

information about the nature of your enquiry or message.

All data collected through this website or otherwise communicated to us by means of telecommunications are collected for the purpose of conducting our core business, i.e. selling our products and services. We will process your data in order to prepare a response to your enquiry, inform you about our products and services, prepare and conclude an agreement and to implement the concluded agreement. Your data, which is provided to us based on your filled-out contact form, will be used solely for the provision of contractually agreed services and for the purpose of our internal administration and management of our operations.

Cookies

Our website uses cookies to distinguish you from other website users. They help us to provide you with a good user experience when you browse our website. They also allow us to improve our website.

A cookie is a small file that requires your permission to be installed on your computer’s hard drive and enables re-use. Cookies allow you to log in to our website, and they personalize the web content based on your interests. A cookie does not in any way grant us access to your computer or provide any information about you other than the information you choose to share with us. You can accept or reject cookies. Most web browsers automatically accept cookies, but you can usually change your browser settings if you want it to reject cookies.

The legal basis for the processing of personal data

The legal basis for data processing is Article 6, paragraph 1, point (b) of the GDPR (data required for the implementation of the agreement), and Article 6, paragraph 1, point (a) of the GDPR (data subject’s consent to data collection).

Data users

We undertake not to transmit your personal data to unauthorized third parties without your consent.

Your personal data may, in accordance with the purposes defined in this statement, be disclosed to the following data users:

  • accounting firms, law firms and other providers of legal and management consulting services;
  • providers of postal services
  • providers of IT services as part of software servicing and maintenance;
  • the administrator and webmaster;
  • cloud computing service providers and email marketing service providers (e.g. Mailchimp and others);
  • providers of customer relationship management (CRM) systems.

We will ensure that contractual data processors always act in accordance with Fe-s-ing’s instructions and that the appropriate level of personal data security and the method of processing is defined in the personal data processing contract. The contractual data processors shall be bound by an obligation of confidentiality, insofar as this does not contradict the law.

Information on the transfer of personal data to a third country or an international organization

The data shall be stored within the territory of the Republic of Slovenia and on the server of the e-mail provider – Gmail, which is located in the EU (Google Ireland Inc.).

Retention period for personal data

We will only store your personal data for as long as it is necessary to fulfil the purpose for which it is collected. When assessing the data retention period, we will take into account the purpose of collection, the nature of personal data, the possibility of violations and legal obligations regarding the storage of personal data. Once your personal data is no longer needed, it will be erased. Server log files are kept for 3 months.

How is your data protected

We are committed to protecting the personal data that you provide to us through the use of our website, through telecommunication channels or in any other way. We undertake to do everything in our power to protect personal data from any violations or misuse.

Once the requirement for data processing has ceased, i.e. the purpose for which the data was collected has been fulfilled, the data will be immediately, irretrievably and permanently deleted.

Your rights

Our company guarantees the exercise of all rights to which you are entitled with regard to the processing of your personal data. The data subject can, at any time, ask us to:

  • confirm whether the data related to him is being processed or not and allow access to personal data (i.e. examining and copying it);
  • provide information about the processing of his data (e.g. the purpose of processing, type of personal data, users to whom personal data has been or will be provided, expected data retention period, technical and organizational measures for data protection, etc.);
  • allow the correction of inaccurate personal data relating to him and the supplementation of incomplete personal data;
  • grant him the right to personal data erasure (the right to be forgotten),
  • grant him the right to restrict processing,
  • grant him the right to object to data processing if the processing is based on our legitimate interest, in which case we will continue to process the data subject’s personal data only if we can demonstrate compelling legitimate grounds for the processing of data that will prevail over his interests, rights and freedoms. You can object to the processing of personal data for direct marketing purposes without giving reasons;
  • grant him the right to data portability and provide him with data in a widely used and machine-readable format or transfer it directly to another data controller, whereby this shall only apply in the case of processing personal data on the basis of consent or a contractual relationship, and
  • grant him the right to revoke consent when personal data is processed on the basis of consent, whereby the revocation of consent does not affect the legality of the data processing that was carried out until its revocation.

 

If you wish to exercise any of the above-mentioned rights, you can contact us at any time using the contact details below.

The right to lodge a complaint with the supervisory authority

If you suspect that the processing of your data violates the legislation pertaining to personal data protection, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (address: Dunajska 22, 1000 Ljubljana, e-mail address: gp.ip@ip-rs.si, phone: 012309730, website: www.ip-rs.si).

Contact

If you have any questions about the confidentiality of your data, the method of data collection and processing, or if you wish to send a request to exercise the rights regarding your data, you can contact us at this email address: arko@arko.si.

Changes and additions

We reserve the right to occasionally adapt this privacy statement to the actual circumstances and the legislation pertaining to personal data protection. For this reason, we ask you to check the updated version before each transmission of personal data, so that you are aware of any changes and additions.

Any changes to this privacy policy come into effect on the day of publication on the company website www.arko.si.

The most recent policy change: 15.9 2023