Privacy policy
Protection of personal data
At the agency Whynot.si, company kreativo media d.o.o., Regentova ulica 9, 2000 Maribor (hereinafter “company kreativo media d.o.o.”) we respect your privacy and the security of your personal data. We are aware of our responsibility for handling the personal data of our customers, potential customers, and visitors to the websites of kreativo media d.o.o. and all individuals who disclose personal data to us during contact (hereinafter: “users”). We undertake to use users’ personal data exclusively for the purposes stated in this Privacy Policy. We protect your personal data carefully and in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free flow of such data and on the repeal of Directive 95 /46/EC) (hereinafter: GDPR) and other legal regulations governing the area of personal data protection.
What personal data do we collect?
The company kreativo media d.o.o. based on the consent of individuals, collects and processes the following personal data:
name and surname;
email address;
data contained in some cookies.
The company kreativo media d.o.o. collects only those personal personal data that are absolutely necessary to achieve the individual purpose.
Purposes of personal data processing
The data is processed by kreativo media d.o.o. on the basis of consent and for the purpose for which consent was given. The data subject can at any time revoke the given consent for each individual in a simple and easily accessible way.
The company kreativo media d.o.o. uses personal data to:
sending electronic invitations to events;
sending e-publications;
online advertising and social networks;
for other purposes to which you specifically agree when cooperating with the company kreativo media d.o.o..
To analyze data and send electronic messages, we use online tools such as Google Analytics, Facebook and MailChimp, which ensure compliance with GDPR rules in their General Terms of Use and Privacy Policy and are certified to have obtained a certificate of compliance with the EU-US Privacy Shield. We do not use personal data in the Google Analytics tool, but only anonymized data in a masked IP address. We also process your personal data when we are required to do so by law. An example of the purpose of such processing is the processing of your personal data for the purposes of judicial or administrative proceedings.
Data retention
Personal data that you have entrusted to us on the basis of your personal, explicit consent and that you have provided to us during registration, signing up for e-newsletters, downloading e-publications or by submitting an inquiry will be kept until cancelled. You can revoke your consent to the collection and processing of personal data at any time. Withdrawal of consent does not affect the lawfulness of data collection and processing prior to withdrawal of consent. We store all other personal data within the framework of contractual cooperation in accordance with applicable legislation. We store personal data in digital form. Our computer systems are protected by technical and organizational measures that prevent accidental or illegal destruction, loss, alteration and unauthorized disclosure or access to your personal data. The information we collect is kept on secure servers and is kept until you cancel it, but not longer than the maximum retention period.
Your rights
We are pleased to inform you of your rights as an “individual”/”user” under the GDPR. According to the GDPR, you as an individual have the following rights from the protection of personal data:
The right to access data (paragraphs 1 and 2 of Article 15 GDPR),
The right to correction (Article 16 GDPR) or the right to erasure (Article 17 GDPR),
The right to limit processing (Article 18 GDPR),
The right to data portability (Article 19 GDPR),
The right to object (Article 21 GDPR),
The right to cancel (paragraph 3 of Article 7 of the GDPR),
The right to file a complaint with a supervisory authority (Article 77 GDPR).
Right of access to data
You have the right to receive confirmation whether the company kreativo media d.o.o. processes your personal data, and where this is the case, you have the right to obtain access to your personal data and the following information related to the processing of personal data:
processing purposes;
type of personal data;
users or categories of users to whom your personal data has been or will be disclosed, in particular users in third countries or international organizations;
where possible, the intended retention period of personal data;
the existence of the right to request from the controller the correction or deletion of personal data or the restriction of the processing of personal data in relation to the user to whom the personal data relate, or the existence of the right to object to such processing;
the right to file a complaint with a supervisory authority;
where personal data is not collected from the user, all available information regarding its source;
the existence of automated decision-making, including profiling, and meaningful information about the reasons for it, as well as the meaning and intended consequences of such processing for the user. Based on your request, the company kreativo media d.o.o. provided one free copy of your personal data being processed. The company kreativo media d.o.o. will provide you with additional copies of the data that you would request, charged a reasonable fee subject to administrative costs.
Right to rectification
You have the right to request that the company kreativo media d.o.o. correct inaccurate personal data relating to you without undue delay. Taking into account the purposes of the processing, you have the right to complete incomplete personal data, including the submission of a supplementary statement.
The right to erasure
(“right to be forgotten”)
You have the right to request that personal data relating to you be deleted without undue delay, the company kreativo media d.o.o. but must delete your personal data without undue delay in the following cases:
when personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
when you revoke the consent that is the basis for the processing of your personal data, and there is no other legal basis for the processing;
when you object to the processing based on the controller’s legitimate interest, and there are no overriding legitimate reasons for their processing;
when you object to processing for direct marketing purposes;
when personal data must be deleted to fulfill a legal obligation in accordance with EU law or the Slovenian legal order;
when the company kreativo media d.o.o. publish your personal data in accordance with the Policy, take reasonable steps, including technical ones, to notify controllers processing your personal data that the data subject requests them to delete any links to that personal data or copies thereof.
The right to restriction of processing
You have the right to request that the company kreativo media d.o.o. restrict the processing of your personal data when one of the following cases applies:
when you dispute the accuracy of the data, namely for a period that allows the controller to verify the accuracy of your personal data;
when the processing is illegal and you object to the deletion of personal data and instead request the restriction of their use;
when the company kreativo media d.o.o. it no longer needs the personal data for processing purposes, but you need them to assert, implement or defend legal claims;
when you have objected to the processing, until it is verified whether the controller’s legitimate reasons prevail over your reasons.
The right to data portability
You have the right to receive personal data relating to you in a structured, commonly used and machine-readable format, and the right to transmit this data to another controller without hindrance when:
the processing is based on your consent or contract;
the processing is carried out by automated means.
Right to object and cancel
Based on reasons related to your special situation, you have the right to object to the processing of personal data at any time, if this is based on the legitimate interests pursued by the company kreativo media d.o.o. or a third party. The company kreativo media d.o.o. will stop processing personal data unless it demonstrates compelling reasons for the processing that override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. Where personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing, including profiling if related to such direct marketing. If direct marketing is based on consent, the right to object can be exercised by withdrawing the personal consent given. You can exercise any right under the GDPR in writing at any time. The company kreativo media d.o.o. for the purposes of reliable identification, in the case of exercising your rights in relation to personal data, may request additional information from you that is necessary to confirm your identity, and may refuse to act in accordance with this chapter only if it proves that it cannot reliably identify you to identify. If your requests in accordance with this chapter are clearly unfounded or excessive, especially because they are repeated, the company kreativo media d.o.o. may: charge a reasonable fee, taking into account the administrative costs of providing the information or message or carrying out the requested action; refuse to act on the request.
You can send the request to the email address [email protected] or in writing to kreativo media d.o.o., Regentova ulica 9, 2000 Maribor.