Privacy Protection

When you access our website, your browser transfers certain data to our web server. The reasons for this transfer are technical in nature and necessary for you to access the desired information. To ensure the security of our information system, we automatically collect data about your IP address, the date and time of access, the time zone difference relative to Greenwich Mean Time (GMT), the content of the request (specific page), HTTP status/access code, amount of data transferred, the web page requesting access, and about your browser (browser software operating system version, language settings). Without at least providing your IP address, which we will record in the web log, you cannot use our website. The collected data will be used for the purpose of ensuring the security of network and information to prevent accidental events or unlawful or malicious actions. The processing is therefore necessary for our legitimate interests and is based on Article 6(1)(f) of the General Data Protection Regulation (GDPR). Personal data from the web log will be processed for a maximum of 6 months, after which the data will be deleted unless we have another legitimate reason for further processing.

Contact Information The controller of personal data is: Artana d.o.o., Tartinijev Square 15, 6330 Piran-Piran, Slovenia. Collected personal data will be processed by our employees and processors involved in operating the website.

Right to Access Data You have the right to verify whether we collect personal data about you and, in such cases, you also have the right to access this data. If you, as an individual, want to verify whether we collect personal data about you, you can request this in writing via email or postal mail.

Right to Erasure (“Right to be Forgotten”) You have the right to have us erase your personal data related to you without undue delay, and we as the controller have an obligation to erase your personal data without undue delay in the following cases:

• Erasure is not performed if the processing of personal data is necessary:
  • if you object to the processing (see the right to object),
  • we processed your personal data unlawfully,
  • we need to delete your personal data to comply with legal requirements,
  • for compliance with a legal obligation that requires processing by Union or Member State law,
  • for the establishment, exercise, or defense of legal claims. If you, as an individual, want us to erase your personal data, you can request this in writing via email or postal mail. The right to erasure can only be exercised in the limited cases listed above.

Right to Rectification You have the right to have us correct inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement. If you, as an individual, want us to correct your personal data, you can request this in writing via email or postal mail.

Right to Restriction of Processing You have the right to obtain from us restriction of processing of your personal data in the case of:

• if you contest the accuracy of the data, for a period enabling us to verify the accuracy of the personal data,
• the processing is unlawful and you oppose the erasure of personal data and request the restriction of their use instead,
• we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise, or defense of legal claims,
• you have objected to processing pending the verification whether the legitimate grounds of the controller override those of yours.
• with your consent,
• for the establishment, exercise, or defense of legal claims,
• for the protection of the rights of another natural or legal person or
• for reasons of important public interest of the Union or of a Member State. Before lifting (i.e., ending) the restriction of processing personal data, we must inform you about the lifting of the restriction. If we have denied your request for data deletion or you just want to restrict the processing of your personal data, you can request via email or postal mail that we restrict the processing of your personal data. The right to restriction can only be exercised in the limited cases listed above.

Right to Data Portability You can transfer the data you have provided to us and which we have collected during your use of the service. You can request the data in a portable format in person at our headquarters.

Right to Lodge a Complaint with a Supervisory Authority Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place where the alleged infringement occurred, if you consider that the processing of personal data relating to you infringes the General Data Protection Regulation. The supervisory authority with which the complaint has been lodged will inform you of the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the General Data Protection Regulation. As an individual to whom the personal data relates, you have the right to lodge a complaint at: Republic of Slovenia, Information Commissioner, Zaloška 59, 1000 Ljubljana, phone: 01 230 97 30, email: gp.ip@ip-rs.si The Information Commissioner will inform you of the status and decision of the complaint in accordance with the regulations.

Processors of Personal Data Hosting of the website is provided by our processor.

Transmission of Personal Data We will not transmit personal data to third parties or to third countries, except in cases specified by law, which mainly refers to cases where the data would be required by duly authorized persons or bodies.