NOTICE TO INDIVIDUALS PURSUANT TO ARTICLE 13 OF THE GENERAL DATA PROTECTION REGULATION (GDPR) REGARDING THE PROCESSING OF PERSONAL DATA

Visitors and customers of the online store https://mlandia.com/

***

• Controller of personal data: MINETRADA, trgovina in storitve, d.o.o., Lokarje 31, 1217 Vodice, info@mlandia.com
• Contacts of the authorized person for personal data protection (DPO): e-mail address: info@mlandia.com

In the subject line, mark “PERSONAL DATA PROTECTION, for DPO”

• Purpose of personal data processing: We process your personal data to a lesser extent and only with your consent when you browse our website, based on cookies, which you agree to be downloaded to your computer or. device through which you browse our website. You can read more about cookies, which of your personal data we process on their basis and for what purpose and the period of storage of this data in the cookie notice published on our website. We also process your personal data in the following cases:
• to successfully complete the final purchase and deliver the goods, we process the following categories of personal data about you: e-mail address, telephone number, first and last name, street and house number, postal code and city, and data necessary for the successful payment of the goods (e.g. card number, etc.); data that is mandatory is marked with an asterisk (*) in the form; we need your contact information primarily for the purposes of the correct delivery of the purchased goods, whereby we forward this information to the delivery service so that it can contact you for delivery purposes.
• to send you news, we collect your e-mail address
• to create and manage a registration account, we keep all the data about you, as in the first indent, and you are also assigned a username and password, which you can change

In addition to the above purposes, we also process your personal data in the event of handling your inquiries, complaints with the aim of resolving complaints, as well as in the event that we need to protect our own legal, financial and other interests (e.g. to detect and prevent abuse and causing damage, to recover unpaid amounts, etc.). For these purposes, we process the categories of personal data listed above (taking into account the principle of minimal scope), as well as your IP address (to prevent abuse and causing damage to the website).

The controller will use your personal data to analyze visits to the portal and to improve the operation of the portal and its services. The system automatically records information about you, based on which the controller gains insight into the way you browse and use the website. This insight allows the administrator to conduct research and analysis for its own needs to improve the user experience and its services, as well as for security reasons and statistical processing. The information that the system automatically records about you is the websites visited, the web browser you use, and, from the personal data, the IP address of the device from which you use the portal.

• Legal basis for processing personal data:

◦ your consent (for sending newsletters) according to Article 6/1 a GDPR

◦ when processing is necessary for the fulfillment of our legal obligations, (e.g. fulfilling obligations in accordance with tax regulations as well as in accordance with the law governing electronic communications) according to Article 6/1 c GDPR

◦ when processing is necessary for the performance of a contract between us and you, or for the implementation of measures at your request prior to the conclusion of a contract (e.g. in connection with the processing of your order, managing your user account, processing your inquiries, etc.) according to Article 6/1 b GDPR

◦ legitimate interest of the controller (e.g. for the exercise and protection of our own legal interests, prevention of abuse and causing damage, etc.) according to Article 6/1 f GDPR

You must provide us with your personal data that we collect on the basis of our current or potential contractual cooperation (i.e. those personal data that we collect from you in order to be able to execute an order for you, or to respond to your inquiry), otherwise your we will not be able to accept and execute your order, nor respond to your inquiry.

The same applies to the personal data we collect from you in order to fulfill our legal obligations (i.e. obligations that we must fulfill by law). In this case too, our cooperation will not be possible if you do not provide us with the requested personal data.

Based on your consent, the controller will occasionally send you news and notifications about its activities, news and services related to the controller’s activities (direct marketing) to your e-mail address, which you will provide to the controller. In each message sent, you will have the option to unsubscribe from further receiving similar messages. In addition to your e-mail address, the controller will also process your IP address and the date and time of registration for the described purpose.

An e-mail address obtained by a company from its customer may, pursuant to paragraph 2 of Article 158 of the Electronic Communications Act (ZEKom-1), also be used for direct marketing of similar products/services of this company. In this case, the addressee is clearly given the option in the marketing message to request the cessation of the use of his e-mail address for this purpose.

• Explanation of legitimate interests[1]: Safety of people and property and protection of the controller’s legal interests – we process personal data of individuals when there is a breach of contract by the individual or when there is a misunderstanding regarding the implementation of the contract between the controller and the individual. In this case, the Controller processes the personal data of the individual in order to protect its property and to enforce (protect) its legal interests. We also collect your personal data in order to more effectively fulfill our legal obligations, such as fulfilling our obligations under tax regulations in individual cases. The Controller processes personal data on the basis of its legitimate interests, which the Controller pursues, except where such interests are overridden by the interests or fundamental rights and freedoms of the individual to whom the personal data relate, which require the protection of personal data. The controller shall carry out a legal impact assessment (LIA) before processing personal data on the basis of legitimate interest

Users or categories of users[2] of personal data, if any: In order to optimise its operations, the controller also cooperates with individual contractual processors who, in the context of providing services to the controller, also process your personal data to a certain extent. Such contractual processors are programmers, website editors, IT consultants, external accountants, legal advisors, cloud and email service providers, payment institutions (banks) and other intermediaries with whom the controller cooperates in connection with enabling online payment services, delivery services, etc.

All of these persons have concluded a personal data processing contract with the controller, which means that they can process the entrusted data exclusively on behalf of the controller, within the limits of its authorization/instructions (as defined in the contract or other legal act) and in accordance with the purposes defined in this privacy policy and the contract between the controller and the individual contractual processor.

In order to fulfill its own legal obligations, the Controller also provides your data to the prescribed extent to state authorities and institutions (e.g. the Financial Administration of the Republic of Slovenia).

The Controller will not provide your personal data to unauthorized third parties.

• Information on transfers of personal data to a third country or international organization: no output

Period of retention of personal data or, where this is not possible, the criteria used to determine this period:

We will process your personal data only to the extent necessary to achieve the purposes of the processing and for as long as necessary to achieve the realization of these purposes.

We process personal data until the purpose for which they were collected is fulfilled, in particular when the processing of personal data is necessary for or in connection with a contract concluded with us, which in this specific case is 5 years from the termination of the contractual relationship, unless there is further processing on another legal basis (e.g. to protect our legal interests) and except in cases where the retention period for personal data is prescribed by law. In these cases, we store your personal data in accordance with the legal provisions or. up to 5 years after the expiration of the purpose for which we further processed them.

Personal data that we collect and further process solely on the basis of your consent will be stopped processing upon withdrawal of consent.

Unless otherwise specified in this privacy policy or other legal, regulatory or internal acts, the purpose of processing personal data is considered to be achieved when the maximum limitation period for asserting or defending claims arising from an individual factual situation expires (the general limitation period is 5 years, exceptionally shorter – 1 or 3 years, or longer – 10 years).

• Information on the existence of the individual’s rights to request access to personal data and correction or deletion of personal data or restrictions, or the existence of the right to object to processing and the right to data portability: By a written request sent to the Controller’s address or by e-mail to info@mlandia.com, the individual may request access, completion, correction, blocking or restriction of processing or erasure of personal data, objects to the processing of data concerning him or her and requests the transfer of data. The controller will decide on the individual’s request in accordance with the legal basis on which the processing of the individual personal data was based. Information on the right to withdraw consent when the processing is based on consent: You may withdraw consent at any time without affecting the lawfulness of the data processing carried out on the basis of consent until its withdrawal.

• Information on the right to lodge a complaint with a supervisory authority: You can file a complaint with the Information Commissioner (address: Dunajska 22, 1000 Ljubljana, e-mail: gp.ip@ip-rs.si, telephone: 012309730, website: www.ip-rs.si).
• Information on the existence of automated decision-making, including profiling, and at least in such cases, meaningful information about the reasons for it, as well as the significance and envisaged consequences of such processing for the data subject: N/A