Policy on Personal Data Protection
- Article #1 (Data Controller and Contact Information)
The provisions of this document apply to the collection and processing of all personal data collected and processed by the company Rdeča Oranža, iskustveni marketing d.o.o. (hereinafter referred to as the “Controller”).
Information about the Controller: Company:
Rdeča Oranža, izkustveni marketing d.o.o.
Address: Titova cesta 2A, 2000 Maribor
Registration number: 6790607000
Phone: 041 319 701
Email: info@oranza.si
Data Protection Officer’s contact information:
Name: Martin Korošec
Contact phone: 041 319 701
Contact email address: info@oranza.si
- Article #2 (Types of Processed Personal Data)
Types of personal data we process:
- Basic contact information:
- Name and surname
- Email address
- Phone number
- Company name (if registering as a company)
- Article #3 (Legal Basis for Processing Personal Data)
We process personal data when necessary to fulfill legal obligations or contractual obligations with you. We also process personal data when given consent for processing. You can withdraw your consent at any time.
- Article #4 (Purposes of Processing Personal Data)
We collect and process personal data for the following purposes:
- Informing clients about workshop progress
- Notifying about new workshop dates
- Notifying about new workshop topics
- Article #5 (Retention of Personal Data)
We retain basic contact personal data as long as you have the status of a registered user on our website. Personal data obtained based on your consent is kept until the consent is revoked. Invoice data is kept for 10 years from the date of issuance. Data collected for the purpose of fulfilling contractual obligations is kept for 5 years after the contract is fulfilled. After the retention period expires, personal data is permanently and effectively erased or anonymized, losing its character as personal data.
- Article #6 (Disclosure of Personal Data)
Whether or not to provide us with your personal data is a voluntary decision. Failure to provide certain categories of personal data may result in the inability to provide the service or refusal to enter into a contract.
- Article #7 (Access to Personal Data)
Access to your personal data is limited to authorized personnel within Rdeča Oranža who are authorized to process personal data and third parties with whom Rdeča Oranža has a data processing agreement, known as data processors. Data processors perform personal data processing services in accordance with the provisions of the agreement between Rdeča Oranža and them. Data processors are prohibited from transferring personal data to third countries and international organizations.
- Article #8 (Rights Regarding Personal Data)
You have the right to request information from Rdeča Oranža about whether your personal data is being processed, what personal data is being processed, the purpose of processing personal data, who the recipients of that personal data are, the retention period of personal data, and the criteria used to determine the retention period. You also have the right to be informed about the existence of automated decision-making, its significance, and the expected consequences. You can request the correction of inaccurate data and the restriction of processing when:
- You dispute the accuracy of the data, for a period necessary to verify the accuracy of the data.
- The processing is unlawful, but you do not request the deletion of the data, only the restriction of their processing.
- The personal data is no longer needed by us, but you need it for the establishment, exercise, or defense of legal claims. If the conditions stated in Article 17 of the General Data Protection Regulation are met, you can request the deletion of all your personal data (Right to be forgotten). In any case where data has been collected based on your consent and you subsequently revoke that consent, you can request a copy of your personal data in a structured, commonly used, and machine-readable format. You have the right to transmit this data to another data controller without hindrance, and you also have the right to lodge a complaint with the Information Commissioner if you believe that Rdeča Oranža or any other person processing your personal data is violating the applicable legal regulations.
- Article #9 (Exercising Rights)
Send your requests from the previous article to any contact person responsible for data processing mentioned in Article 1 of this document. To provide personal data, we may ask you to provide proof of your identity. If you fail to reliably prove your identity, we may reject your request from the previous article. We are obliged to respond to your request from the previous article as soon as we become familiar with it and obtain relevant information, but no later than 15 days from receiving your request.
Date of the last version publication: 12. 6. 2023