Privacy Policy

For subscribers to the e-newsletter, participants in events organised by the Operator, visitors to the website and purchasers of services and goods offered by Urša Terdin s.p.

Personal data controller

Urša Terdin s.p., Partizanska cesta 5, Maribor, 2000 Maribor, e-mail: info@ursaterdin.com, telephone +386 41 347 515.

Your data is in safe hands with us. Urša Terdin s.p. is aware of the importance of the secure processing of your personal data and we take all necessary measures to ensure fair, transparent and lawful processing of your personal data.

When you use our services, we collect personal data about you. This privacy policy explains why we collect your data, the form in which it is processed and your rights in relation to our processing of your personal data. We comply with all applicable laws and policies protecting the privacy of individuals, including the Personal Data Protection Act ZVOP-2 and the European General Data Protection Regulation 2016/679 (GDPR) and any amendments that would supplement or replace these laws and regulations.

What personal data do we collect, from which sources and for what purposes?

If you use our services: order products, register on the website, register and attend our professional events or otherwise use our services, you will be providing us with information that is defined as personal data under applicable data protection law. What personal data we collect depends on the legal relationship you enter into with us. If you only sign up to receive our newsletter, we will only collect your email address about you. However, if you sign up for any professional training that we organise, you will provide us with the information that is requested in the registration form as mandatory or that you yourself choose to provide (optional personal data). Please read more about the categories of personal data that we collect later in this notice. We collect your personal data from you - when you subscribe to our newsletter, or when you register for our seminars, workshops and training courses, or visit our website, when you take part in surveys, quizzes we organise or our prize draws, it is you or your actions that provide us with your personal data. We rarely receive your personal data from other sources, such as your employer. This happens if your employer registers you for our training courses. In this case, we assume that your employer had an appropriate legal basis for enrolling you and we do not check this.

We collect the following categories of your personal data: We collect only your email address for the purpose of subscribing to our newsletter (basis: consent) The categories of personal data we collect from you as a result of your participation in surveys, prize draws or quizzes are set out in each individual registration form for each of these events and in a separate privacy policy. The basis for the processing of this personal data is a contractual relationship (decision to participate in a quiz, survey,. ) or the law (e.g. processing of the IP of winners of a prize draw on the basis of the regulations governing tax business). In order to participate in the events we organise, we collect the following information about you: First name last name, interest in the product group, residential address, e-mail address, telephone number, the name of your employer or the company on whose behalf you are attending the event and your function at the employer or the company you are attending the event for. We process this data on the basis of a contractual relationship with you (your registration for the event) or at your request (i.e. contract negotiations). The events we organise are usually filmed and photographed. All participants of the event can therefore expect that their image may appear in photographs and/or videos of the event, and we will use these photographs and videos for our own promotional purposes, such as: posting on social networks in connection with the event or in connection with the promotion of our company, posting in the print media and on social networks and relevant web portals in connection with the event, as well as in connection with the promotion of Urša Terdin s.p. in our brochures and at internal events...

Footage and photographs may also be published more widely, on television, radio and the internet in general, and may be used by persons other than Urša Terdin s.p. authorised by Urša Terdin s.p., such as group companies. The possibility of photographing and filming cannot be excluded, nor will any objections be taken into account if an individual does not wish to be in a particular published photograph. However, we will endeavour to ensure that a designated area is set aside for photographing and taking close-ups of individuals, even if photographers and videographers are identifiable and you are able to move away from the lens appropriately, and we will try to take as many group shots as possible from the event itself that do not expose the individual.

In certain cases, we also collect personal data from you that we need to invoice you for the services you have ordered - the scope and purpose of the personal data processed depends on the services you have ordered. We also process this data on the basis of our legal obligation to bill correctly for services.

When you make an enquiry to us, we will process your name and contact information, including address, mobile number and email address; delivery and billing information, payment information and other information you provide to us in connection with the order or delivery of a product or service; information about your preferences and interests based on your use of the Company's website, on the basis of contract negotiations; other information that is relevant: customer surveys, advertising and marketing or offers, and/or other user-generated information that you have voluntarily shared through our website; information about interests and plans for future purchases.

If you are a payer of our services, we will process the following data for the purposes of billing and invoicing you for our services: payer details (name and address), tax number (if the payer is a sole trader or other legal entity). We will receive the number of your transaction account from which you will make the payment indirectly at the time of your payment. We do not need this information.

If you pay using a credit or debit card, your personal data will be processed by an external payment service provider. You can read about the processing of your personal data by this provider in their privacy policy. We aggregate the personal data collected into our guest address book.

When you use our services (attend an event organised by us in any form), we process your e- mail address when you provide it to us, including for the purpose of sending you our advertising messages and newsletters. You can unsubscribe from receiving all of these communications at any time by following the unsubscribe instructions in each individual communication. The legal basis for this processing of your personal data is Article 226, paragraph 2 of the Electronic Communications Act (Official Gazette of the Republic of Slovenia, No. 130/22 and 18/23 - ZDU-1O).

As an attendee at the conference (i.e. a customer of our services), we will directly enter your data that we receive from your event registration into our CRM system, which means that you may be contacted by our sales team at some point in the future.

In exceptional cases, we process personal data about visitors to our website, such as IP address, but only on the basis of your consent and through cookies. You can read more about this in our cookie notice. Where a service we provide requires your consent, we will always ask you directly for your consent for that service and for the processing of your personal data. For example, we will ask for your consent if you wish to subscribe to one of our newsletters. When giving your consent, you will be asked to confirm that you have read this Privacy Policy and that you consent to the processing of your personal data as described in it. Where the processing of your personal data is based on the conclusion or negotiation of a contract (e.g. sending you enquiries about our services) or we need your personal data to comply with our legal obligations, then you must provide us with that personal data if you want us to provide the service you have requested. If you do not provide us with the information, we will not be able to provide the requested service to you. ** Legal bases and time limits for the retention of personal data**

We will only process your personal data to the extent necessary for the purposes of the processing and for as long as necessary to achieve those purposes.

We process personal data until the purpose for which they were collected has been fulfilled, in particular where the processing of personal data is necessary for or in connection with a contract concluded with us, except in cases where the retention period of personal data is prescribed by law. In these cases, we will keep your personal data in accordance with the legal provisions.

Unless otherwise provided for in this Privacy Policy or in other legal, regulatory or internal acts, the purpose of the processing of personal data shall be deemed to have been achieved when the maximum limitation period for asserting or defending claims arising out of a particular factual situation has expired (the general limitation period is 5 years or longer - 10 years). In the absence of special circumstances justifying longer retention of your personal data (e.g. asserting and/or defending legal claims).

In the case of processing your personal data for the performance of a contractual relationship (e.g. the execution of your purchase order), we keep your personal data for 10 years from the last purchase.

The company will take all reasonable steps to ensure that your personal data is processed and stored securely. Your personal data will not be kept for longer than permitted by law. In this respect, it should be noted that for tax-law reasons, the retention of contracts and other documents from our contractual relationship is generally required for a period of ten years (Articles 32, 125 and 126 of the Tax Procedure Act - ZDAVP-2). Where we process your personal data on the basis of your consent, we may also stop processing your personal data if, prior to your withdrawal, the purpose for which we processed the data ceases (e.g. we stop sending you newsletters).

After the processing of your personal data has ended, we will delete or anonymise your data so that it can no longer be used to identify you as an individual.

We process your personal data on various legal bases, namely: our contractual relationship (actual or potential), to comply with our legal obligations, our legitimate interest, your consent and your vital interest. Which personal data we process on which basis is set out in this document.

You must provide us with the personal data that we collect about you on the basis of our current or potential contractual relationship (i.e. the personal data that we collect from you in order to, for example, provide you with a particular service that you wish to order or to respond to an enquiry about a particular service that we provide), otherwise we will not be able to provide you with the service or respond to your enquiry. The same applies to personal data that we collect from you in order to comply with our legal obligations (i.e. obligations that we are required to fulfil by law). Again, our cooperation will not be possible if you do not provide us with the personal data requested.

In certain cases, we process your personal data on the basis of our legitimate interests, such as the protection or pursuit of our legal interests, as well as the taking of photographs and videos of event attendees and contact by our sales team, all of which fall under Article 6(1)(f) of the GDPR.

The Controller shall process personal data on the basis of its legitimate interests pursued by the Controller in individual cases, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data. The Controller shall carry out a Legitimate Interest Impact Assessment (LIA) before processing personal data. In exceptional cases, we may also process your personal data on the basis of your vital interest (e.g. in the case of a medical emergency), but only if you are unable to take care of your own health at a given moment and only for as long as your condition persists.

Users of personal data

We will only share your personal data to the extent necessary for the performance of the specific service with photographers, videographers, external accountants who issue invoices for services rendered, payment service providers, insurance companies, state authorities, local authorities, law enforcement authorities, courts and other entities (e.g. external collaborators - drivers, event organisers if they are external collaborators, etc.) for the purpose of establishing your identity.

In some cases, your personal data is transferred to third countries, but always with the adoption and observance of all applicable security measures. These third countries are the UK and the USA, which are on the list of so-called "third countries". "The other countries are Cyprus and India. We primarily transfer your individual contact details to these countries for the purposes of training you or providing technical support (which we do primarily on the basis of your consent, but in rare cases as a condition of entering into a contract -e.g. where the purchase of a device is conditional on training in the correct handling and use of that device).

** Information about the individual's right to withdraw consent and other rights**

Where we process personal data on the basis of your consent, you may withdraw your consent in whole or in part at any time by contacting the data controller at our contact address below. Withdrawal of consent does not affect the lawfulness of the processing of personal data carried out prior to the withdrawal. You have the right to access and review your personal data processed by us at any time and, in certain cases, to have it rectified and/or erased. In addition, in accordance with the legislation in force at any time, you may exercise the right to restrict the processing of your personal data, the right to object to processing and the right to data portability. If you wish to exercise your rights in relation to the protection of your personal data, please contact the data controller at our contact address listed below.

Website and use of cookies

The company uses so-called cookies on its websites. A cookie is a small text file that a website sends to your web browser. You can find out more about cookies in our Cookie Notice, which is published on our website. If you use different computers to visit our websites, this means that cookies will be stored on more than one computer. Cookies do not transmit viruses and cannot destroy other information stored on your computer. Some pages of our website contain links to third party websites. These sites have their own privacy policies and the Company is not responsible for their operation or their privacy policies. Users who submit information to or through these sites should therefore read their privacy policies before submitting any personal information to them.

Contact details

Information on the right to lodge a complaint with the supervisory authority: you can lodge a complaint with the Information Commissioner, Dunajska 22, 1000 Ljubljana, e-mail: gp.ip@ip- rs.si telephone: 012309730, website: www.ip-rs.si).