Privacy policy.
In the following, you will learn how your personal data is processed when you use our website. Unless otherwise stated in the following chapters, the legal grounds for processing your personal data are based on the fact that this processing is essential for accessing the functions of the website.
Accessing the Website
When you access the website, your browser downloads some data to the web server. The reasons for this transfer are technical, but it is also necessary to be able to retrieve the desired information. To ensure the security of our information system, we automatically collect information about your IP address, date and time of access, time zone difference to Greenwich Mean Time (GMT), the content of the request (specific page), the access status or HTTP status code, the amount of data transferred, the accessed website and about your browser (browser software version, language settings). You cannot use our website without providing your IP address, which is recorded on our blog.
We process the blog data for a maximum of 12 months, after which we delete the data if we have no other legitimate reason for further processing.
The mandatory processing of personal data in the form of a blog, which serves to ensure the security of our service, our network and our information, is based on Article 6, paragraph 1, point f, in conjunction with Article 49, preamble of the General data Protection Regulation (GDPR).
Use of cookies
By clicking on "Accept only functional cookies" or "Accept all cookies" button, I declare that I am at least 18 years old and that I voluntarily consent to the processing of my personal data.
Consent to the use of cookies is not required. You have the right to withdraw your consent to the use of cookies, if you have given it, at any time.
We process personal data collected on the basis of your consent to the use of cookies for a maximum period of 14 months, after which the data is anonymised or deleted.
The revocation of your consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
On any page of our website, you can delete cookies at any time by clicking on the “Cookies” link at the bottom of the website, thereby revoking your consent.
The personal data collected will be processed by our website administrators and IT security specialists.
The processing of personal data using cookies is based on Article 6(1)(a) of the General Data Protection Regulation (GDPR).
Contact data:
The data controller responsible for our databases:
Riko invest - the affiliated Škrabčeva Homestead
Hrovača 42
1310 Ribnica
The Data Processor’s data protection officer is Mr. Tomaž Lovšin, + 386 41 837 254, E-mail: tomaz.lovsin@riko.si
The right of erasure ("right to be forgotten")
As a data subject, you have the right to delete personal data concerning you without undue delay, and we have the obligation to erase personal data without undue delay where one of the following grounds applies:
· the data subject objects to the processing of personal data concerning him or her (see Right to object);
· the data subject withdraws consent on which the processing is based;
· the personal data have been unlawfully processed;
· the personal data have to be erased for compliance with a legal obligation.
Personal data will not be erased if the processing is necessary:
· for compliance with a legal obligation which requires processing by law;
· for the establishment, exercise or defence of legal claims.
If you, as an individual, wish us to delete your personal data, you may request this in writing. You may only exercise the right of erasure in the limited cases listed above.
Right to rectification
As a data subject, you have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you.
Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to object
Where processing is necessary for the purpose of the legitimate interests pursued by us as controller, you as data subject have the right to object at any time to the processing of personal data concerning you, on grounds relating to your particular situation.
In our role as data controller, we will not stop processing personal data collected in the blog because we have legitimate grounds for processing to ensure the security of our information system in accordance with paragraph 49 of the preamble to the General Data Protection Regulation (GDPR), which override your interests, rights and freedoms as a data subject. In addition, the processing of your personal data will not cease for the purpose of ascerting, exercising or defending legal claims.
Right to restriction of processing
As data subject, you have the right to obtain from us restriction of processing where one of the following applies:
· you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data;
· the processing is unlawful and you as data subject, oppose the erasure of the personal data and request the restriction of their use instead;
· we no longer need the personal data for the purpose of the processing, but you require them as data subject for the establishment, exercise or defence of legal claims;
· you, as the data subject, have objected to processing pendng the verification whether whether our legitimate grounds as controller override your grounds as an individual.
If you as data subject have requested a restriction for the grounds given above, then we can only store the data and carry out other processing:
· with your consent as the individual to whom they relate;
· to pursue, pursue or defend legal claims,
· for the establishment, exercise or defence of legal claims or
· for the protection of an important public interest of the Union or of a Member State.
In our role as data controller we shall inform you as data subject before lifting (i.e. terminating) the restriction of the processing of your personal data.
If we have refused your request to erase the data or if you simply wish to restrict the processing of your personal data, you may request in writing that we restrict the processing of your personal data. You may exercise the right to restriction only in the limited cases listed above.
The right to an effective judicial remedy aganst a supervisory authority
Without prejudice to any available administrative or non-judicial remedy, as a data subject you have the right to an effective judicial remedy against a legally binding decision of a supervisory authority concerning them, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the General Data Protection Regulation.
The supervisory authority with which the appeal has been lodged will inform you as appellant about the status of the case and the decision on the appeal, including the possibility of filing the appeal under Article 78 of the General Data Protection Regulation.
As the data subject, you have the right to file the appeal at the following address:
Republic of Slovenia, Information Commissioner, Zaloška 59, 1000 Ljubljana, T: 01 230 97 30 , E-mail: gp.ip@ip-rs.si
The Information Commissioner will keep you informed about the progress of the procedure and about the decision on the appeal in accordance with the rules.