Policy on the protection of personal data and cookies
With this Policy on the protection of personal data and cookies, we want to inform you about the processing of data in connection with our website www. folio.si (“website “) and its online store. The processing of personal data takes place exclusively within the framework of applicable data protection regulations, in particular the General Data Protection Regulation, EU 2016/679 (“GDPR”) and the Electronic Communications Act (“ZEKom-1”).
• General information
• Personal data
By paragraph 1 of Article 4 of the GDPR, “personal data” means any information relating to a specific or identifiable individual (hereinafter “individual”); an individual is considered to be directly or indirectly identifiable in particular by identifiers such as a personal name, identification number, location data, online identifiers or one or more specific characteristics that express the physical, psychological, genetic, economic, cultural or social identity of this natural person.
• Manager
The controller of personal data in the sense of paragraph 7 of article 4 of the GDPR and therefore the person responsible for your data is:
Folio d.o.o.
Šeškova Ulica 3b
1330 Kočevje
E-mail: info @folio.si
• Collection and processing in connection with our website
• Automatic data processing during the visit
Each time you access our website, your browser automatically downloads data that is stored in server log files. This includes the following data (hereinafter referred to as “log file data”):
• Information about the type and version of the browser
• Information about the user’s operating system
• Information about the user’s Internet service provider and IP address; and
• Date and time of access
The data from the log files are evaluated anonymously for continuous improvement of the website, adaptation of the website to the interests of our users, and quick elimination of errors. For these purposes, we have a legitimate interest in data processing by point (f) of paragraph 1 of Article 6 of the GDPR.
In non-anonymized form, data from log files is used solely for error detection and system security purposes, including detecting and tracking improper access and fraud and abuse attempts. Data is kept for 7 to 14 days and then deleted. Data from log files, the further storage of which is required for evidentiary purposes, shall not be deleted until the incident in question has been finally clarified. In individual cases, the aforementioned data may be forwarded to investigative authorities.
• Data processing when using the online store
If you actively provide us with data, for example by registering in our online store or placing an order, we will process the data you have provided.
When logging in/registering to our online store (member of the online store) or when using the online store (guest of the online store), we collect and process the following data:
• title;
• first and last name;
• email address;
• address;
• phone number;
• password;
• country of residence;
• time and date of registration and
• order history.
When ordering, we also process the following data:
• ordered goods;
• delivery address, if it is different; and
• account and payment information.
We process the above data to manage your registration and to process your orders. The legal basis is point (b) of paragraph 1 of Article 6 of the GDPR.
The data you provide when you log in/register to the online store will be kept until you delete your account. You can do this by writing to us at info@folio.si and requesting deletion. We keep the data collected in the phase of concluding the contract until the expiry of the statutory or any contractual guarantees and guarantees from warranty liability. After these deadlines have expired, we keep the data required by tax legislation for the legally prescribed periods for audits by tax authorities.
Your payment information will be forwarded to the relevant payment service provider for payment processing.
The delivery address will be provided to our delivery contractor who may contact you to coordinate a delivery date. In case of delivery problems, we will forward your e-mail address and, if necessary, your telephone number to the delivery contractor. The data is transmitted exclusively for the stated purposes and is deleted after delivery.
• Commercial messages
If you did not unsubscribe from receiving commercial messages when purchasing through our online store, we will use your email address and phone number to inform you about news and products that may be of interest to you. The real basis is point (f) of paragraph 1 of Article 6 of the GDPR and Article 158 of ZEKom-1. You can unsubscribe from receiving such messages at any time.
• Contact and customer support
• Contact us
Our website lists how you can contact us. You can also contact us via social networks (e.g. Facebook or Instagram). If you use this option and e.g. contact us via e-mail, we will process the data you have provided to us to respond to your request.
We have a legitimate interest in answering your questions. The legal basis for data processing is point (f) of paragraph 1 of Article 6 of the GDPR. If you contact us to conclude a contract, the legal basis is point (b) of paragraph 1 of Article 6 of the GDPR.
The data you provide to us when contacting us will be deleted after the purpose for which you contacted us has been fulfilled, provided that we are not obliged to keep it for reasons based on contractual or tax law.
• Customer support
You can contact customer support in several ways, e.g. by phone or email. In this case, we will process the data you provide us with your request. To the extent necessary to provide customer support, e.g. to receive the device from you, to perform a repair, or process a guarantee or warranty claim, your data will be forwarded to our service contractors.
The legal basis for processing your data in the context of providing customer support services is point (b) of paragraph 1 of Article 6.
Data provided to us as part of the provision of customer support services will be deleted at the end of the guarantee or warranty period unless we are obliged to store them for a longer period according to the provisions of the contract or tax law.
• Cookies
On our website, we also use cookies or similar technology (hereinafter referred to as “cookies”). Cookies are small text or image files that your browser stores on your device. The next time you visit our website with the same device, the information stored in cookies will either be returned to our website (hereinafter referred to as “own cookies”) or to another website (hereinafter referred to as “third-party cookies”).
The information stored in cookies tells the website that you have already visited it. This allows you to display the website in the best possible way, according to your preferences. Only cookies are recognized on your terminal. In addition, personal data will only be processed with your consent or if this is necessary for the use of the offered service that you request.
You can also disable some cookies on our cookie settings page. You can also generally prevent the storage of cookies by setting up your browser. In this case, you may not be able to use all the functionalities of our website in full.
We inform you in advance about the use of cookies with a notice in the banner.
Analysis and targeting tools
Google services
On our website, we use various services provided by Google 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”).
For more information about Google services, please visit HTTP:// www.google.com/privacy/ads/.
Google Analytics
Our website uses Google Analytics for targeted planning and website improvement. Google Analytics uses so-called cookies, which are stored on your terminal and enable the analysis of your use of the website. The information generated by the cookie is usually transferred to a Google server in the USA, where it is stored. On this website, we use an IP anonymization plugin (called IP masking), i.e. Google shortens your IP address within member states of the European Union or in other countries that are parties to the Agreement on the European Economic Area. Only in exceptional cases will the entire IP address be sent to a Google server in the USA and shortened there.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, prepare reports on website activity, and provide other services related to website activity and internet usage for the website operator.< /p>
The legal basis for data processing is point (f) of paragraph 1 of Article 6 of the GDPR.
Google services also include reporting on the effectiveness of our advertising efforts (including across devices), the demographics and interests of our users, and features to ensure tracking of connected devices in online advertising when you have a Google Account and personalized advertising (hereinafter referred to as “personalized ads”). In this case, the legal basis for data processing is the consent you have given to Google (point (a) of paragraph 1 of Article 6 of the GDPR).
You can object to the collection or processing of your data by Google Analytics by downloading and installing the browser plug-in available at the link: https://tools.google.com/dlpage/gaoptout.
Data sent by us and associated with cookies, user identifiers (i.e. user identification number) or advertising identifiers will be automatically deleted after fourteen months.
For more information about the Google Analytics Terms of Service, please visit: http://www.google.com/analytics/terms/
Google Readvertising Features
Google’s re-advertising function allows us to show our users ads based on their interests on our other websites within the Google Ads Network (so-called “Google ads” or ads on other websites). For this purpose, user interaction on our website is analyzed so that users can be shown targeted advertising on other pages even after users leave our website. Google stores the number in the browsers of users who visit certain Google services or websites on the Google display network. This number, called a “cookie”, records the visits of these users. This number is used to uniquely identify the web browser on a particular computer and not for the purpose of identifying a person. Personal data is not stored.
The legal basis for data processing is point (f) of paragraph 1 of Article 6 of the GDPR.
You can disable Google cookies by downloading the plug-in available at the link: www.google.com/settings/ads/plugin.
Google Conversion Tracking
We also use Google conversion tracking in this context. When you click on an ad offered by Google, a thirty-day conversion tracking cookie is placed on your device. These cookies are not intended for personal identification. The data collected by the conversion cookie is used for statistical analysis of conversion data by Google Ads advertisers.
The legal basis for this data processing is point (f) of paragraph 1 of Article 6 of the GDPR.
You can disable Google interest-based ads on your browser by turning them off http://www.google.com/settings/ads or opting out http://www.aboutads.info/choices/.
• Plugins for social media
Our website uses the following social network plugins: Facebook, Instagram and Twitter. We have no influence on the collection and processing of data via plug-ins. We also have no knowledge of the full scope of the collected data, the purpose of the processing and the retention period.
Additional information about Facebook’s privacy policy can be found at the following link www.facebook.com/policy.php. Additional information about Instagram’s privacy policy can be found at the following link https://help.instagram.com/519522125107875.
Facebook can obtain information that you have accessed our services on our website and interacted with the Facebook plug-in and/or the Instagram plug-in. By activating the plugin, they will be your personal data stored and sent to Facebook in the USA. The same applies to the Twitter plugin.
Facebook or Twitter stores the data collected about you by creating profiles and uses it for the purposes of advertising, market research and/or custom website design. Such treatment is carried out in particular (maybe also for unregistered users) with the purpose of displaying advertising according to needs and with the purpose of informing other users of the social network about your activities on our website. You have the right to object to the creation of such user profiles, and you must exercise this right in relation to Facebook or Twitter.
Through plugins, we offer you the opportunity to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-in is point (f) of paragraph 1 of Article 6 of the GDPR.
You can completely prevent the loading of plugins by using add-ons for your browser, i.e. script preventers.
• Transmission of personal data
Within the scope of the data processing described in this policy, it is possible to forward personal data to the following categories of recipients (in addition to the recipients specifically mentioned in this policy on the protection of personal data and cookies):
• authorized agents and other consultants (e.g. legal, tax consultants);
• IT service providers;
• marketing service providers;
• government bodies.
The service providers will use the data exclusively according to our instructions. We pass on personal data to third parties only if this is necessary to fulfill a contractual obligation, if we or our contractual party has a legitimate interest in the processing of personal data, or if your consent to the transfer has been given. Furthermore, we pass on personal data to third parties if and to the extent that we are obliged to do so by applicable legislation, a measure of an administrative authority or a court order.
• Rights of individuals
Individuals have various rights under the GDPR, namely the following in particular:
• Right of access: you can request confirmation as to whether we are processing your data. If such processing is carried out, you can ask us for additional information regarding the processing.
• Right to rectification: you have the right to correct and/or supplement your data if your data is incorrect or incomplete.
• Right to restriction processing: you can request that the processing of your personal data be restricted.
• Right to deletion: in certain cases you have the option to request the deletion of your stored personal data.
• Right to data portability: the personal data you have provided to us , you can receive it in a structured, commonly used and machine-readable format and transfer this data to another controller.
You can exercise your rights by contacting us at info@folio.si.
• Right to appeal
You have the right to complain to the authority for the protection of personal data regarding the handling of your personal data. In Slovenia, this is the Information Commissioner (www.ip-rs.si).
• Right to object
If your personal data is processed on the basis of a legitimate interest, taking into account point (f) of paragraph 1 of Article 6 of the GDPR, you have the right to object to the processing of your personal data, assuming that there are reasons for this arising from your specific position or if you object to the processing of your personal data for direct marketing purposes.
You can exercise your right to object by contacting us at info@folio.si.