Privacy Policy

Radgonske gorice Gornja Radgona d. o. o. with the registration number 5129494000 and tax number 50521217 (hereinafter “the supplier” / “owner”) describes the personal data protection policy, states the types, duration of storage, purpose, and rights of individuals in relation to personal data and their processing, and complements the Terms of Business of the company Radgonske gorice Gornja Radgona d. o. o. in order to protect the privacy of individuals who use its services (“hereinafter customers”) and other persons whose data it processes (hereinafter “individuals”) by these data protection conditions in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and the Personal Data Protection Act. These Terms and Conditions apply to all cases where the company Radgonske gorice Gornja Radgona d. o. o. acts as the controller of personal data of individuals.

 

1 Processing of personal data

The provider processes the personal data of individuals based on law, contract, and legitimate interest and/or based on the individual’s voluntary consent.

The provider processes the following data of customers for the purpose of providing services: name and surname of a natural person or company and legal forms of organization; address/registered seat of the individual and a telephone number; at the individual’s request his/her academic, scientific or professional title; the name of his/her website and other types of personal contacts; email address; tax number for a natural person and tax and registration number for a legal entity; address for sending invoices – if different from permanent address (street or settlement, number, postcode, city); IBAN number for individuals; and based on the customer’s payment even additional information – if the customer wishes and if these do not interfere with the rights of third parties.

The provider will process and store the personal data referred to in the previous paragraph until the full payment of services. If the tax legislation area determines, some data will be kept until the expiry of the 10-year storage period.

Based on the express consent of individuals, the provider collects, stores, uses and segments the name and surname, address, email address, telephone number, customer number, traffic data, location data other than traffic data for the purpose of (i) targeted notification about the offer and benefits of any new services, but not longer than for 10 years, via SMS and MMS messages, email, post, and telephone; and/or (ii) notification of prize games organized by the provider or its partner companies in cooperation with the provider, via SMS and MMS messages, email, post, and telephone; and/or (iii) customer satisfaction surveys and additional services of the provider via SMS and MMS messages, email, post, and telephone. The provider keeps and uses the personal data specified in this paragraph for as long as it is necessary to achieve the purpose for which the data were processed or until the withdrawal of the individual’s consent.

It is in the legitimate interest of the provider to use the personal data of individuals in order to improve, adapt, change, personalize or otherwise improve its services, to detect and prevent fraud, to improve the security of the website provider, to send messages that will benefit the individual, and to analyze the effectiveness of marketing communication.

 

2 Transmission of data to third parties

If necessary for the implementation of the contractual obligations of the provider, the provider may send personal data of individuals to external service providers and suppliers of goods, including related companies of the provider. The third parties referred to in this paragraph have concluded an appropriate contract with the provider for the processing of personal data.

 

3 Rights of individuals

This article summarizes the rights that individuals have in relation to the processor and is determined by the applicable law and these Terms. Some of the rights cover specificities that are not included in this summary and are found in the main legal basis. Under the conditions laid down by the applicable law and these Terms the individual has the right to: (a) access personal data (b) correct personal data, (c) deletion, (d) restrict processing, (e) oppose processing for a specific purpose, (f) transferability, (g) complain to the supervisory body, (h) withdrawal of consent to the processing.

Insight

The individual has the right to confirm whether or not personal data are processed and, in the event that personal data are processed, the right to access personal data together with certain additional information. Additional information includes details of the purpose of the processing, the categories of personal data being processed, and the recipients of the personal data. If that this does not affect the rights and freedoms of third parties, the provider will provide the individual with a copy of his personal data.

Correction

The individual has the right to correct inaccurate personal data and, if appropriate to the purpose of the processing, to supplement incomplete data.

Deletion

In certain circumstances, the individual has the right to delete personal data without undue delay, in the event that: (i) the personal data are no longer necessary for the purpose for which they were collected or otherwise processed; (ii) the individual withdraws consent to the processing of personal data for data processed on the basis of consent; (iii) the individual objects to the processing of personal data for the purpose of direct marketing based on the legitimate interest of the processor; (iv) if the processing of personal data takes place without an appropriate basis. Notwithstanding the request for deletion, the provider is not obliged to delete personal data if the processing of such personal data is necessary to exercise the right to freedom of expression and reception, to ensure compliance with legal obligations or when processing is necessary to establish, enforce or defend legal claims.

Restriction of processing

An individual has the right to restrict the processing of personal data (i) for which he exercises the right to change the data, (ii) which are processed without an appropriate basis, but the individual does not request their deletion, (iii) if the provider does not process personal data for the purposes mentioned in the article (ii), but the individual needs such information to establish, enforce or defend legal claims. In such cases, the provider will store personal data but will not process them otherwise, except with the express consent or for purposes when processing is necessary to establish, enforce or defend legal claims or protect the rights of a third natural or legal person or for reasons of overriding public interest.

Opposition to processing

The individual has the right to prevent the processing of personal data for reasons relating to the individual’s special circumstances, but only if the basis for the processing of personal data is the processing of personal data for the purpose of exercising public interest or exercising public authority or exercising public interest or third parties. In the event of a request to prevent processing, the provider will terminate the processing, unless it demonstrates a predominant legitimate interest in the processing, which prevails over the interests, rights or freedoms of the individual or if the purpose of processing is to establish, enforce or defend legal claims. The individual has the right to object to the processing of personal data for the purpose of direct marketing. If so, the provider will immediately stop processing for such purpose. The individual has the right to prevent the processing of personal data for reasons relating to the individual’s special circumstances, including in the case of processing for research, scientific or statistical purposes, except where processing is necessary for a purpose in the public interest.

Transfer of personal data

Where the basis for the processing of personal data is the express consent of the individual or the processing is necessary for the performance of contractual obligations between the provider and the subscriber, or the process of concluding such a contract is underway, and in all such cases the processing is automatic, the individual has the right to receive his personal data in a structured, commonly used format that is machine-readable. This right of an individual does not apply in cases where the exercise of such a right would infringe the rights and freedoms of third parties.

Complaint to the supervisory body

An individual has the right to lodge a complaint with the supervisory body for the protection of personal data in the EU country where the individual is domiciled, employed, or with the authority of the country where he or she alleges the violation.

Withdrawal of express consent to the processing of personal data

If the basis for the processing of personal data is the express consent of such an individual, the individual has the right to withdraw such consent at any time. The withdrawal of the consent does not affect the lawfulness of the processing of personal data prior to withdrawal, nor does it affect the validity of express consent to the processing of personal data.

 

4 Legal persons

A customer who is a legal person, is self-employed or any other organization that does business with the provider on its own behalf and the actual individual of services is a member of such an organization or uses the services under the authorization of such an organization (hereinafter: “organization”), is obliged to inform all individuals, who use the provider’s services, of these Rules and for what purposes the provider and their contractual processors will process their personal data. The organization that has concluded a contract with the provider for the services provided, and if necessary, is obliged to provide all necessary consent of individuals who use the provider’s services and the provider needs to process personal data in fulfilling the contract. The organization is thus obliged to obtain the consent of the individual who uses the provider’s services to send certain personal data to the organization, processing traffic data and location data that are not traffic data and are necessary for additional services and all other necessary consents. The organization, which is a customer of the provider’s services, gives the provider insights of all the consents of individuals that the provider needs to process personal data.njihovi pogodbeni obdelovalci obdelovali njihove osebne podatke. Organizacija, ki je s ponudnikom sklenila pogodbo za izvajanje storitev, in če je to potrebno, je dolžna zagotoviti vsa potrebna privoljenja posameznikov, ki pri njej uporabljajo ponudnikove storitve in jih ponudnik potrebuje za obdelavo osebnih podatkov pri izpolnjevanju pogodbe. Organizacija je tako dolžna zagotoviti privoljenje posameznika, ki pri stranki uporablja ponudnikove storitve za pošiljanje nekaterih osebnih podatkov posameznika k organizaciji, obdelavo prometnih podatkov in lokacijskih podatkov, ki niso hkrati prometni podatki in so potrebni za izvajanje dodatnih storitev ter vsa druga potrebna privoljenja. Organizacija, ki je stranka ponudnikovih storitev, zagotavlja ponudniku vpogled v vse privolitve posameznikov, ki jih ponudnik potrebuje za obdelavo osebnih podatkov.

 

5 Contact details for the protection of personal data

Contact details of the provider for all the claims related to the protection of the rights of individuals from Article 4. of these Terms of Data Protection.

E-mail: info@winebiking.com

Address: Radgonske gorice Gornja Radgona d.o.o., Jurkovičeva ulica 5, 9250 Gornja Radgona, Slovenia.

Gornja Radgona, 7. 6. 2021