Protection of personal data
We shall protect your personal data with due diligence and in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC) (hereinafter: GDPR) and other legal provisions governing the protection of personal data.
What personal data do we collect?
Dana collects and process the following personal data based on natural person consent:
Data contained in certain cookies. Learn more about cookies and how to manage them at the Cookies website.
Only personal data that is indispensable to achieve a particular purpose.
The purpose of the processing of personal data
Dana processes data based on the consent and for the purpose, for which the consent was given. The data subject may withdraw the given consent for each specific purpose at any time in a simple and easily accessible manner.
Dana uses personal data for:
Online advertising and social networks;
For other purposes, with which you specifically agree in cooperation with Dana.
In order to analyse data and send e-mails, we use web tools such as Google Analytics, Facebook and MailChimp, etc. which in their General Terms and Conditions and Privacy Policies ensure compliance with the rules of the General Data Protection Regulation (GDPR) and confirm that they have acquired the EU-US Privacy Shield Framework certificate. We do not use personal data in Google Analytics, but merely anonymised data and masked IP addresses.
We also process your personal data when this is required by law. An example of the purpose of such processing is the processing of your personal data for the purposes of court or administrative proceedings.
Users and processors of personal data
Only Dana employees and directly empowered personal data processors may access your personal data.
Dana cooperates with the advertising agency Futura d.o.o., Poljanski nasip 6, 1000 Ljubljana for the purposes of processing and storing personal data. Dana shall not communicate your personal data to unauthorised third parties.
Personal data, which you have entrusted to us based on your personal explicit consent and submitted in an electronic message or by any other means, shall be kept in accordance with the retention periods. You may withdraw your consent regarding the collection and processing of personal data at any time. The withdrawal of the consent shall not affect the legality of the collection and processing of data before the withdrawal. All other personal data in the context of contractual cooperation shall be kept in accordance with the applicable legislation.
Personal data is stored in digital form. Our computer systems are protected by technical and organisational measures that prevent accidental or unlawful destruction, loss, alteration and unauthorised disclosure or access to your personal data.
The data we collect is stored on secure servers until your withdrawal, but not longer than the maximum retention period.
We are pleased to inform you of your rights as a “natural person” set out in the General Regulation (GDPR). Pursuant to the General Regulation, you as a natural person have the following rights with regard to the protection of personal data:
Right to access data (paragraphs 1 and 2 of Article 15 of GDPR);
Right to correction (Article 16 of GDPR) or the right to erasure (Article 17 of GDPR);
Right to limit processing (Article 18 of GDPR);
Right to data portability (Article 19 of GDPR);
Right to object (Article 21 of GDPR);
Right to withdrawal (Paragraph 3 of Article 7 of GDPR);
Right to lodge a complaint with the supervisory authority (Article 77 of GDPR).
Right to access data
You have the right to receive confirmation that Dana is processing your personal data and, if so, you have the right to gain access to your personal data and the following data regarding the processing of personal data:
Purposes of processing;
Types of personal data;
Users or user categories, to whom your personal data have been or will be disclosed, in particular users in third countries or international organisations;
Where possible, the estimated period of retention of personal data;
The existence of the right to request the administrator to correct or delete personal data or limit the processing of personal data in relation to the data subject or the existence of the right to object to such processing;
Right to lodge a complaint with the supervisory authority;
Where personal data are not collected from the user, all available information regarding the source;
The existence of automated decision-making, including the shaping of profiles, and meaningful information on the reasons for it, as well as the significance and predicted consequences of such processing for the user.
Based on your request, Dana shall provide one free of charge copy of your personal data, which is being processed. For any additional copies of the data you would require, Dana shall charge you a reasonable fee, considering administrative costs.
Right to correction
You have the right to require that Dana corrects inaccurate personal information relating to you without undue delay. Having regard to the purposes of the processing, you have the right to complete incomplete personal data, including the submission of additional declaration.
Right to erasure (“Right to be forgotten”)
You have the right to request that personal data in relation to you are erased without undue delay; Dana is to erasure your personal data without undue delay in the following cases:
Where personal data is not needed for the purposes for which it was collected or otherwise processed;
When you withdraw the consent being the basis for the processing of your personal data, and there is no other legal basis for the processing;
When you object to the processing based on the legitimate interest of the controller, and there are no overriding legitimate reasons for the processing;
When you object to the processing for the purposes of direct marketing;
When personal data is to be deleted for the compliance with a legal obligation in accordance with the EU or Slovenian law.
When pursuant to the Policy, Dana publishes your personal data, it adopts reasonable measures, including technical ones, to notify the controllers processing your personal data that the data subject requests them to delete any links to this personal data or copies thereof.
Right to limit processing
You have the right to require that Dana limits the processing of your personal data in one of the following cases:
When you dispute the accuracy of the data, namely, for a period allowing the controller to verify the accuracy of your personal data;
When processing is illicit and you oppose to deletion of personal data and, instead, request a restriction on its use;
When Dana no longer needs personal data for processing purposes, and you need it to enforce, execute or defend legal claims;
When you have filed an objection concerning the processing, namely, until it is verified whether the legal reasons of the controller prevail over your reasons.
Right to data portability
You have the right to receive personal data relating to you, in a structured, widely used and machine-readable form, and the right to forward this data to another controller without being obstructed, when:
Processing is based on your consent or contract;
Processing is carried out using automated means.
Right to object and withdrawal
For reasons related to your particular situation, you have the right to object to the processing of personal data at any time if the processing is based on the legitimate interests pursued by Dana or a third party. Dana shall stop processing personal data unless you provide the necessary processing grounds that prevail over your interests, rights and freedoms, or for the enforcement, execution or defence of legal claims. When personal data is processed for direct marketing purposes, you have the right to object to the processing of your personal data for the purposes of such marketing at any time, including profiling, if it is linked to such direct marketing. If direct marketing is based on consent, the right to object can be made by withdrawal of the given personal consent.
Any right under the General Data Protection Regulation may be enforced at any time in writing. For the purposes of reliable identification in the event of the exercise of your rights in connection with personal data, Dana may require additional data, necessary to confirm your identity, and may refuse to act in line with this section only if it proves that you cannot be reliably identified.
If your requests under this section are manifestly unfounded or excessive, especially as they are repeated, Dana may:
Charge a reasonable fee, considering the administrative costs of transmitting information or communication or implementing the requested measure;
Refuse to act on the request.
Please send your request to email@example.com or by ordinary mail to Dana, proizvodnja in prodaja pijač, d.o.o., Glavna cesta 34, 8233 Mirna.
Right to file a complaint regarding the processing of personal data
If you have any complaint regarding the processing of your personal data, you can send it to firstname.lastname@example.org or by ordinary mail to Dana, proizvodnja in prodaja pijač, d.o.o., Glavna cesta 34, 8233 Mirna.
You have the right to lodge a complaint directly with the Information Commissioner if you believe that the processing of personal data in connection with you violates Slovenian or EU regulations in the field of personal data protection.