Personal data policy

Personal Data Protection and Cookies Policy

The purpose of this Personal Data Protection and Cookies Policy is to inform you of the processing of data in connection with our website www.lukadoncic.com (»Website«) and our Online Shop. Personal data processing is implemented exclusively in the context of applicable regulations on data protection, especially the General Data Protection Regulation, EU 2016/679 (»GDPR«) and the Electronic Communications Act (»ZEKom-1«).

• General Information
• Personal Data
  
  Pursuant to Article 4, paragraph 1 of the GDPR, »personal data« means any information relating to an identified or identifiable natural person (hereinafter as »natural person«); an identifiable natural person is one who can be identified, directly or indirectly, in particularly reference to an identifier such as name, identification number, location data, an online identifier or to one or more factors specific to physical, physiological, genetic, economic, cultural or social identity of that natural person.
  
  
• Controller
  

  Controller in the context of Article 4, paragraph 7 of the GDPR and the person responsible for your personal data is:
  LD7, trgovina in storitve, d.o.o.
  Ulica Metoda Mikuža 18
  1000 Ljubljana
  E-mail: info@lukadoncic.com 
  
  

• Collection and Processing in Connection with this Website
• Automatic Processing of Data when Visiting Website
  
  Every time you access our website, your browser automatically transfers data stored in server log files. This includes the following data (hereinafter as »log file data«):
  
  
• Information on the type and version of the browser
• Information on user’s operating system
• Information on the internet service provider and user’s IP address; and
• Date and time of access
  
  

  Data from log files are evaluated anonymously with purpose to constantly improve the website, adapt the website to the interests of our users and to quickly eliminate any errors. Processing is necessary for the purposes of legitimate interest under Article 6, paragraph 1, item (f) of the GDPR.

  Data from log files not rendered anonymous is used exclusively to detect errors and ensure the security of system, which includes detection and tracing the attempts of wrongful access and attempted frauds or abuse. Data are stored from 7 to 14 days and then deleted. Data from log files which must be stored for the purpose of proof are not deleted until the incident is final clarified. In individual instances, the said data can be submitted to investigating bodies.
  
  

• Data Processing when Using this Website
  
  If you send us data actively, i.e. by registering into this Website or by submitting an order, data submitted shall be processed.
  
  When you log in/register into our Online Shop (Online Shop member) or when you use Online Shop (as Online Shop guest) we collect and process the following data:
  
  
• title;
• name and surname;
• email;
• address;
• telephone number;
• password;
• country of residence;
• time and date of registration, and
• order history.
  
  When you submit an order, we process also the following data:
  
  
• ordered items;
• delivery address if different; and
• information of your account and payment.
  
  

  The above data are processed for managing your registration and for processing of your orders. The legal basis for this is Article 6, paragraph 1, item (b) of the GDPR.

  Data which you submit when you log in or register in Online Shop shall be stored until you delete your account. You can do this by sending an email to info@lukadoncic.com and demand deletion. Data collected during the conclusion of contract are stored until the expiry of statutory or other contractual warranties arising and warranties under the warranty liability. After the expiry of these deadlines we store data as requested by tax legislation for time period prescribed by law for the purpose of audit carried out by tax authorities.

  Your payment data shall be submitted to an appropriate provider of payment services for the execution of payment.

  Delivery address shall be submitted to our delivery contractor who may contact you in order to arrange delivery. Should there be problems with the delivery we shall send our delivery contractor your email and, if necessary, also your telephone number. Data are transmitted exclusively for the said purposes and are deleted after the delivery.

  
  
  
• Commercial Communication
  
  If you did not unsubscribe from our commercial communication when you made purchase in our Online Shop, we shall use your email and telephone number to send you notifications about novelties and new products which might interest you. The legal basis for this is Article 6, paragraph 1, item (f) of the GDPR and Article 158 of the Electronic Communications Act. You can unsubscribe from commercial communication at any time.
  
  

• Contact Info and Client Support
• Communication with Us
  
  

  It is stated on our Website that you may contact us at any time, also via social networks (i.e. Facebook or Instagram). If you use this opportunity and e.g. contact us via email, we shall process the data submitted to us with purpose to reply to your request.

  We have a legitimate interest to answer to your questions. The legal basis for this processing of data is Article 6, paragraph 1, item (f) of the GDPR. If you contact us with a view to conclude a contract, the legal basis is Article 6, paragraph 1, item (b) of the GDPR.

  Data which you submitted when you contacted us shall be deleted after the purpose for which you contacted us is met and on condition that we are not obliged to store them for reasons arising from contractual or tax law.
  
  

• Client Support
  
  

  You can contact Client Support Service in many ways, e.g. by telephone or via email. When this is the case, we shall process data you submitted together with your request. Should it be necessary in order to ensure client support, i.e. to take over a device from you, to carry out repair or to handle an action to enforce a guarantee or a warranty claim, your data shall be transmitted to our authorized repairers.

  The legal basis for the processing of your data as part of the provision of client support services is Article 6, paragraph 1, item (b) of the GDPR.

  Data submitted to us in connection with the provision of client support services, shall be deleted after the expiry of an action to enforce a guarantee or a warranty period, unless we are legally bound to store the data for a longer period of time under the provisions of contractual or tax law.
  
  

• Cookies
  
  

  We use cookies or similar technology (hereinafter as »cookies«) on our website. A cookie is a small piece of data with text or pictures that a website stores on your device. Upon your next visit to our website with the same device, information stored in the cookies shall be either returned to our website (hereinafter as »first party cookies«) or to another website (hereinafter as »third party cookies«).

  Information stored in the cookies tells the website that you have already visited it. This allows you to experience the website in the best possible way and according to your preferences. Only cookies are recognized on your terminal. Personal data shall only be processed subject to your consent or if necessary for the use of service you requested.

  Some cookies can be disabled on our website in the menu for cookie settings. You can also disable the storing of cookies in the settings of your browser. In this case you may not be able to fully experience all functions of our website.

  You are first informed about the use of cookies in the cookie banner.

  The entire list of cookies we use in this website is here.
  
  

• Analysis and Tools for Targeting
  
  Google Services
  
  

  We use different services offered by Google, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter as »Google«). For more information about Google services please visit http://www.google.com/privacy/ads/.
  
  

  Google Analytics
  
  

  Our website uses Google Analytics for oriented planning and improving the website. Google Analytics employs cookies that are stored to your computer in order to facilitate an analysis of your use of the site. The information generated by these cookies is transmitted to Google’s server in USA and stored there. This website uses the extension “anonymize” IP (so-called IP masking). In doing so, Google abbreviates your IP address in the EU Member States and in other states which are contracting parties to the Agreement on the European Economic Area. Only in exceptional cases with your full IP address be sent to Google’s server in USA and abbreviated there.

  On behalf of the operator of the website, Google shall use this information to analyse your use of our site, to compile reports for us on internet activities and to provide other services relating to our website and the use of internet for the operator of the website.

  The legal basis for this processing is Article 6, paragraph 1, item (f) of the GDPR.

  Google services include also generating reports on the efficiency of our advertising efforts (including through various devices), gather demographic information and interests of our users, and offering functions to ensure traceability of connected devices in internet advertising when you have Google account and personalized advertising (hereinafter as »personalized advertisements«). When this is the case, the legal basis for this processing is your consent given to Google (Article 6, paragraph 1, item (a) of the GDPR).

  You have the right to object to the collection and processing of your data by Google Analytics by downloading and installing browser plug-in available here: https://tools.google.com/dlpage/gaoptout.

  Data we transmitted and which are connected with cookies, user identifiers (i.e. user identification number) or advertising indicators will be automatically deleted after fourteen months.

  For more information about Google Analytics terms and conditions go to: http://www.google.com/analytics/terms/.

  
  
  Google Remarketing
  
  

  Google remarketing function enables us to show to our users ads according to their interests on our and other websites within Google Ads Network (i.e. »Google ads« or ads on other websites). For this purpose we analyse the interaction of users on our website to show targeted ads to our users on other websites after they left our website. Google stores the number in the browsers of users who visit certain Google services or websites on Google display network. This number is called a “cookie” and records the visits of these users. This number is used for unique identification of a web browser on a certain computer and for the purpose to identify a person. Personal data are not stored.

  The legal basis for this processing is Article 6, paragraph 1, item (f) of the GDPR.

  You can disable Google cookies by downloading a plug-in available here: www.google.com/settings/ads/plugin.

  
  
  Google Conversion Tracking
  
  

  In this context we use also Google conversion tracking. When you click on an ad offered by Google, a cookie for conversion tracking is added to your device which expires in 30 days. These cookies are not intended for personal identification. Data collected with conversion cookie are used for statistical analysis of conversion data by the advertisers of Google ads.

  The legal basis for this processing is Article 6, paragraph 1, item (f) of the GDPR.

  You can disable Google’s interest-based ads on your browser by turning them off http://www.google.com/settings/ads or by disabling them http://www.aboutads.info/choices/.
  
  

• Social Media Plug-ins
  
  

  Our website uses the following social media plug-ins: Facebook, Instagram and Twitter. We have no influence over collection and processing of data through plug-ins. We also have no knowledge of full extent of data collection, purpose of processing and period of storage.

  Additional information about Facebook privacy policy is available here www.facebook.com/policy.php. Additional information about Instagram privacy policy is available here https://help.instagram.com/519522125107875.

  Facebook may collect information about your access to our services on our website and that you were in contact with Facebook plug-in and/or Instagram plug-in. By activating the plug-in your personal data shall be stored and transmitted to Facebook in USA. The same applies for Twitter plug-in.

  Facebook and Twitter store the data collected about you by creating profiles and using them for advertising purposes, for market studies and/or for tailored website design. This is done especially (also for unregistered users) with a view to display advertising according to the needs and with the purpose to inform other social network users about your activities on our website. You have the right to object any such creation of profiles, whereby you have to exercise this right towards Facebook or Twitter.

  Through the plug-ins we offer you the possibility to interact with social networks and other users, so that we can improve our offer and make it more attractive for our users. The legal basis for the use of plug-in is Article 6, paragraph 1, item (f) of the GDPR.

  You can entirely prevent the installing of plug-ins by using browser add-ons, i.e. script preventing.
  
  

• Transmitting Personal Data
  
  In connection with data processing described herein, it is possible that we transmit personal data to the following categories of users (apart from users who are explicitly mentioned in this Personal Data Protection and Cookies Policy):
  
  

• Authorized agents and other advisors (i.e. legal and tax advisors);
• IT service providers;
• Marketing service providers;
• Government authorities.
  
  
  Service providers will use the data strictly according to our instructions. Personal data are transmitted to third parties only when this is necessary to comply with a contractual obligation, or when we or our client has a legitimate interest for the processing of personal data, or when you submitted your consent for transmission. Moreover, we transmit personal data to third parties if and when this is necessary subject to applicable legislation, measure taken by an administrative body or court order.
  
  

• Individuals’ Rights
  
  Under the GDPR, the individuals have various rights, but especially the following:
  
  

• Right of access: you shall have the right to ask for confirmation as to whether or not we process your personal data. When data is being process, you may ask for additional information in connection with such processing.
• Right to rectification: you shall have the right to rectification and/or amendment of data if your data is incorrect or incomplete.
• Right to restriction of processing: you may request to restrict the processing of your personal data.
• Right to erasure: in certain cases you shall have the right to demand the erasure of your personal data stored.
• Right to data portability: you may receive personal data you submitted to us in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
  
  You may exercise your rights by contacting us at info@lukadoncic.com.
  
  

• Right to Complain
  
  You have the right to file a complaint with the personal data protection authority in connection with the treatment of your personal data. In Slovenia this is Information Commissioner (www.ip-rs.si).
  
  

• Right to Object
  
  

  If your personal data is being processed on the basis of legitimate interest subject to Article 6, paragraph 1, item (f) of the GDPR, you shall have the right to object to processing of your personal data, if there are grounds relating to your particular situation or if you object to the processing of personal data for direct marketing purposes.

  You may exercise your right to object by contacting us at info@lukadoncic.com.

  
  This Personal Data Protection and Cookies Policy is in force from February 2020.