Atelje Galerija Personal Data Protection Policy
We take the protection of your personal data very seriously and thus, in providing all our services, we strive to handle your data carefully and ensure maximum privacy by applying appropriate technical and organizational measures to provide a high level of personal data protection. We process all personal data exclusively based on the legal grounds and individuals’ consents, and in accordance with the current personal data protection standards and laws, especially Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: the General Data Protection Regulation), and relevant Slovenian laws (the applicable Personal Data Protection Act or ZVOP).
The aim of this Personal Data Protection Policy is to provide key information on personal data processing to all users of our services.
The personal data controller is Atelje Galerija, d.o.o., Gallusovo nabrežje 29, 1000 Ljubljana, firstname.lastname@example.org (hereinafter »the controller« oz. »Atelje Galerija«).
Scope and Purpose of Personal Data Processing, and Personal Data Storage
Your personal data will be carefully protected against loss, disclosure, change, or misuse. We will process your personal data exclusively for the purposes for which they were submitted. If the data submitted also need to be used for any other purpose, we will notify you of this in advance or request your consent.
Your personal data are being collected and processed for the following purposes:
- Purchases in the Atelje Galerija online store;
- Sending information on exhibitions, news, and other events taking place at Atelje Galerija, and other marketing materials to your e-mail or postal address provided in the online form;
- Follow-up communication with you in order to receive feedback regarding the materials and information on the events and services sent.
Processing Personal Data for Online Purchases
When you make a purchase in our online store, we collect and process the following personal data:
- Full name;
- Telephone number
These data are obligatory for concluding and carrying out a sales contract between the customer and Atelje Galerija. Submitting these data is a precondition for making a purchase or concluding a contract.
As part of the online purchase, personal data are collected and processed to identify individuals, notify them of any changes to the order or purchase, provide additional details and instructions regarding the purchase made, resolve any complaints, and, first and foremost, to carry out the order.
Processing Personal Data for the Purpose of Subscribing to Our Newsletter
On our website, you can subscribe to our newsletter.
In order for you to subscribe to our e-newsletter, we collect and process the following personal data:
- Full name;
These personal data are processed exclusively based on your consent, which you can revoke at any time. If you agree to direct marketing, this is governed by the provisions set out in your consent, which is a precondition for signing up for direct marketing and which you receive upon signup.
Common Provisions on Personal Data Processing and Storage
All data collected based on the legal grounds above shall be used in line with the purpose for which they have been collected and shall not be conveyed to third parties without your prior consent.
In accordance with the legal conditions, the controller can disclose your personal data to the following processors:
- Providers of postal, delivery, or dispatching services, etc.;
- Providers of IT services as part of software provision and maintenance, and app providers;
- The accounting service.
In a form that does not allow identification, the data submitted may also be used for the controller’s statistical purposes, such as website traffic data, statistical data on the number of e-contracts concluded, and so on.
We will not convey or transfer your personal data to a third country outside the EU.
We guarantee to only store your personal data for as long as necessary to fulfil the purpose for which they have been collected and used; specifically:
- Data collected for making an online purchase shall be stored for five years after making an online purchase or placing an order;
- If individual data that are processed to make a purchase or fulfil a contract are subject to a different statutory storage period (e.g., accounting or tax data), they shall be stored for ten years;
- Your contact details collected for subscribing to our newsletter and direct marketing shall be stored until you cancel your subscription.
After the above data storage deadline expires, the data are immediately irreversibly and permanently erased.
Rights of Individuals
As the controller, we provide effective control over your personal data and ensure you can exercise your rights under the General Data Protection Regulation. You can request, at any time, access to your personal data, to have them rectified if they are inaccurate, to have them erased, or to restrict their processing. In addition, in accordance with the General Data Protection Regulation you also have the right to object to your data being processed and the right to data portability.
If you believe that any rules or your rights in relation to the protection of your personal data have been violated, please notify us and we will remedy any violations as soon as possible. You also have the right to file a complaint with the information commissioner.
For additional information regarding the collection and processing of your personal data, please visit our headquarters or send an e-mail to email@example.com.