Privacy and Cookie Policy
The purpose of the Privacy Policy, including the personal data protection notice (hereinafter: the “Notice”), is to inform you which of your personal data we collect and for what purposes, what we do with it, how we ensure its security, and what rights you have and may exercise in relation to the processing of your personal data. We take the protection of your personal data extremely seriously and responsibly. We fully comply with our obligations regarding the lawful, fair, and transparent processing of personal data. We recommend that you familiarize yourself thoroughly with the contents of this Notice.
To ensure that this Notice remains compliant with applicable personal data protection regulations, Grad Negova reserves the right to amend or supplement it. We will inform you of any changes in a timely manner using the most appropriate means, e.g. by email or by publishing the changes on the website.
Controller Information
- MINISTRY OF CULTURE
- Maistrova ulica 10
- 1000 Ljubljana
- Slovenia
- E-mail: info@grad-negova.si
Hereinafter: Grad Negova.
What Personal Data Do We Process?
a) Basic contact information (first name, last name, telephone number, email address, address, city, town, street, country), where provided by the visitor;
b) Information about your use of our websites (link clicks, time spent) and information regarding your responses to our email communications (whether the message was opened and which links you clicked);
c) Server data (e.g. date and time of visits, pages visited, information you viewed or searched for, etc.);
d) Device data (information about the computer or mobile device you use to access the website, including the operating system, model, web browser, etc.);
e) Information about your use of our website;
f) Aggregated data for advertising and marketing purposes, such as pages viewed and other activities.
Legal Bases for the Processing of Personal Data
We collect your personal data only when it is strictly necessary or when you have provided your consent. We will not process your personal data unless the purpose or legal basis for such processing is appropriately justified under the applicable personal data protection regulations (the Personal Data Protection Act, Official Gazette of the Republic of Slovenia No. 94/07 – officially consolidated text (ZVOP-1); Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR); and the Electronic Communications Act, Official Gazette of the Republic of Slovenia Nos. 109/12, 110/13, 40/14 – ZIN-B, 54/14 – Constitutional Court Decision, 81/15 and 40/17 (ZEKom-1)).
Grad Negova will process your personal data on the basis of the following legal grounds:
By visiting our website, you have accepted and agreed to this Notice and entered into an agreement with Grad Negova, which serves as the legal basis for the processing of your personal data. The data is encrypted and transmitted to the server in a secure format. This system prevents unauthorized parties from intercepting your personal data.
Grad Negova also processes your personal data on the basis of a legal obligation:
on the basis of national legislation, including, among others, the Prevention of Money Laundering and Terrorist Financing Act (Official Gazette of the Republic of Slovenia, Nos. 68/16 and 81/19; ZPPDFT-1), the Personal Data Protection Act (Official Gazette of the Republic of Slovenia, No. 94/07 – officially consolidated text; ZVOP-1), the Copyright and Related Rights Act (Official Gazette of the Republic of Slovenia, No. 16/07 – officially consolidated text, 68/08, 110/13, 56/15 and 63/16 – ZKUASP; ZASP), etc., as well as on the basis of other international treaties and EU regulations that require Grad Negova, in certain cases, to provide individuals’ personal data to state authorities and other data controllers for the purpose of fulfilling its own or their legal obligations or exercising their legal powers.
Grad Negova may process personal data on the basis of legitimate interests, for example:
a) for statistical purposes and for collecting demographic data and information about visitors’ interests;
b) for identifying issues with the server and website;
c) for conducting business analyses;
d) for further developing our offerings;
e) for improving or personalizing services for individuals;
f) for assessing the effectiveness of promotional activities and advertising;
g) on the basis of other legitimate interests.
In certain cases, Grad Negova may process your personal data on the basis of your consent for marketing activities, such as sending the latest news and providing general information about our offers, new developments, benefits, events or prize draws, as well as informing you about service offerings tailored to your personal interests based on profiling conducted by Grad Negova for these purposes. Providing consent is entirely voluntary and is not a prerequisite for entering into a contract. In such cases, processing is carried out within the scope of the stated purpose and agreed methods of communication until you withdraw your consent.
Purposes of Personal Data Processing
We may use your personal data for one or more of the following purposes:
a) communicating with you regarding the provision of our services and responding to your inquiries;
b) marketing communications (sending emails and SMS messages);
c) pursuing any legal claims and resolving disputes;
d) advertising and marketing purposes on external websites.
Types of Cookies, Their Purpose and Duration: Cookies are small files that are downloaded to your computer. They help the website function more efficiently. The website uses the following cookies:
How Long Do We Retain Your Personal Data and What Happens to It Afterwards?
The retention period for personal data depends on the legal basis and purpose of processing for each category of personal data. Personal data is retained only for as long as prescribed or permitted and as long as necessary to achieve the purpose for which it was collected or further processed. Once the purpose has been fulfilled, we will retain only those personal data that we are required to retain by law or that we may need for evidentiary or defense purposes if there is a possibility of legal claims being brought. All other data will be deleted, destroyed, blocked, or anonymized, unless otherwise provided by law for specific types of personal data.
We retain your personal data processed for sending offers and informing you about new developments until you withdraw your consent or, in any event, for a maximum of five years from the date consent was provided. After this period, we will ask you to provide your consent again.
We retain data relating to issued invoices for 10 years from the date of issuance.
Upon expiry of the retention period, we will securely delete or anonymize your personal data, meaning that we process it in such a way that it can no longer be linked to or attributed to you in any way.
Voluntary Provision of Data and Consequences of Failure to Provide Data
Providing personal data is voluntary. You are not required to provide us with your personal data; however, if you do not provide it, you will not be able to enter into a contract with us (as we require the data to deliver your order). We will specify which data is subject to such consequences each time we collect personal data from you.
Who Has Access to the Personal Data You Have Provided to Us? Will We Disclose Your Personal Data to Third Parties or Transfer It Outside the EU?
We take your privacy very seriously. Your personal data constitutes a business secret of Grad Negova. Employees of Grad Negova process your personal data in accordance with their authorizations and our internal policies. Data processors are bound to protect confidential information and respect individuals’ rights in the same manner as employees of Grad Negova.
We do not disclose your personal data to or provide third parties with access to it, except for those with whom we have entered into a written agreement under which they perform certain tasks related to data processing and are required to comply with legislation governing the processing and protection of personal data — so-called data processors. The data processors to whom we disclose personal data include, for example:
a) marketing service providers;
b) providers of email delivery services;
c) software solution providers, etc.
Contractual data processors may process personal data solely in accordance with our instructions and may not process personal data for their own purposes. They, together with their employees, are required to maintain the confidentiality of your personal data.
What Are Your Rights Regarding the Processing of Personal Data?
You may request access to your personal data, as well as its rectification or deletion, at any time. You may also request restriction of its processing or object to its processing. We will inform you if such a request affects the continued operation of this website. In certain cases, you also have the right to data portability, allowing you to transfer your personal data to another data controller. This is subject to the technical capabilities and internal policies of the respective data controller.
You may withdraw your consent to the processing of personal data for sending offers and informing you about new developments at any time. Withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent for the period prior to its withdrawal.
Grad Negova accepts no responsibility for the authenticity, accuracy, or currency of the personal data you provide. The user is responsible for ensuring the accuracy and currency of all data provided.
In the event of a personal data breach, we will notify you in accordance with the conditions prescribed by applicable legislation.
Procedure for Exercising Your Rights
You may submit your requests concerning the exercise of your rights regarding personal data in writing to any of the contact details listed at the beginning of this document under “Data Controller and Contact Details.”
For the purpose of reliable identification when exercising your rights regarding personal data, we may request additional information from you. We may refuse to take action only if we can demonstrate that we are unable to reliably identify you.
We must respond to your request concerning the exercise of your rights regarding personal data without undue delay and, at the latest, within one month of receiving your request.
Any changes to our personal data protection policy will be published on this website.
Right to Lodge a Complaint
You may lodge a complaint regarding the processing of your personal data with the supervisory authority in Slovenia at any time, namely the Information Commissioner, located at Dunajska 22, 1000 Ljubljana.
Disclaimer
Grad Negova shall not be liable for any damage you may incur as a result of providing the service provider with incorrect, false, incomplete, or outdated information.
You are required to notify us immediately of any suspected misuse of your personal data or data required to access certain parts of the website (username and password), or in the event of suspected unauthorized access to such data.
Where a contractual relationship exists between the service provider and the user, the provisions governing such relationship (the contract, general terms and conditions, etc.) shall in all cases apply with regard to the exclusions and limitations of the service provider’s liability.
Cookies
The legal basis for this Cookie Notice is the amended Electronic Communications Act, Official Gazette of the Republic of Slovenia Nos. 109/12, 110/13, 40/14 – ZIN-B, 54/14 – Constitutional Court Decision, 81/15 and 40/17 (ZEKom-1), which entered into force at the beginning of 2013 and introduced new rules regarding the use of cookies and similar technologies for storing information or accessing information stored on a user’s computer or mobile device.
What Are Cookies?
A cookie is a small text file that is transferred to a user’s computer when they visit a website. It typically contains the name of the server from which the cookie was sent, the cookie’s lifespan, and its value—a randomly generated unique number.
The cookie itself does not contain or collect information. However, when it is read by the server together with the web browser, it can help the website provide more user-friendly services, such as remembering your username and password for future logins or recalling previous purchases or account information. Only the server that sent the cookie can read and use that cookie. On a trusted website, cookies can therefore enhance your browsing experience. However, cookies can also be used in ways that may infringe on an individual’s privacy. Cookies are not harmful and are always subject to a defined retention period.
Purpose of Cookies
The purpose of cookies is to improve website functionality and the user experience when browsing websites. Cookies make the interaction between you and the website faster and easier. They enable the website to remember your personal preferences and settings. This saves time and makes browsing websites more efficient.
Grad Negova Cookies
We use only cookies on our website that are permitted under the ZEKom-1 Act. Only cookies that are strictly necessary for the operation of this website are used. To record website traffic statistics, we use a system that stores only a session cookie and does not track your subsequent behavior on the website or in connection with other websites. By continuing to use this website, you agree to the use of the cookies described below.
Some of the cookies we use are temporary, while others are stored on your device for a certain period of time, even after you have left our website. We use temporary cookies to measure the number of visitors to the website, which enables us to assess the effectiveness of content display and the relevance of advertisements and to continuously improve our websites. We use stored cookies to retain contact information for subsequent visits to the website, so that you do not have to log in again or so that the way content is displayed can be adapted to your device. We also use stored cookies originating from other websites, such as Facebook, Twitter, Google, and others. If you do not consent to their use, these cookies will not be installed.
In addition to the cookies listed above, we also use cookies to determine how you navigate our websites, which content interests you, and how long your visit lasted. Based on this information, we can organize the content of our websites and tailor it to your needs.
We process the data collected through cookies exclusively for statistical purposes and to collect demographic data and information about visitors’ interests (in a manner that does not allow your identity to be identified), to identify server issues, manage our websites and provide information about products, track users across different websites, tailor content to their interests, and for marketing and advertising purposes.
[Tabela s piškotki]
Final Provisions
We also recommend that you read the General Terms of Use published on the website, which, together with this Notice, constitute a binding agreement between you and Grad Negova.
