The aim of the personal data protection policy is to inform the clients, partners and other individuals (hereinafter referred to as: “individuals” cooperating with Eksist d.o.o. (hereinafter referred to as: “the company) of purposes and legal bases, safety measures and rights they are entitled to regarding the processing of their personal data performed by our company.
We value your privacy, and we therefore protect your data carefully at all times.
This data protection policy is subject to changes or amendments at any time without prior warning or notification. By using the provider’s websites following a change or amendment, individuals acknowledge to agree with any such change or amendment.
Your personal data is processed in accordance with the European legislation (Regulation (EU) 2016/697 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as: General Regulation)), applicable personal data protection legislation (Personal Data Protection Act (ZVOP-1, Official Gazette of the Republic of Slovenia No 94/07)), and other legislation providing the legal basis for the processing of personal data.
Personal data protection policy contains information for Individuals about how our company as a personal data controller processes personal data received by individuals based on legal bases described hereafter.
Website controller
Personal data controller is:
Eksist d.o.o.
Loška cesta 70, 4226 Žiri
info@eksist.si
+386 64 225 955
Data protection officer
As stipulated under Article 37 of General Regulation we did not appoint data protection officer. Should you have any questions regarding the processing of your personal data, please do not hesitate to contact us at: info@eksist.si.
Purposes for which personal data is being processed and legal bases for its processing
Personal data means any information relating to an identified or identifiable individual (hereinafter referred to as: the data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
a. Visiting our website
What: For each visit of our website the online server automatically records log files (e.g. IP number - a number identifying individual computers or other online devices). The world wide web functions in such a manner so that an online server where a website is hosted records certain data about the visits of the website such as an IP number, browser version, time of visit and alike. The company does not process the data collected in this way and does not associate it to any other data.
Why: The purpose of these procedures is to provide the safety of network and information i.e. to enable to detect and prevent unauthorised accesses that may endanger the accessibility, integrity and privacy of stored or downloaded personal data as well as the safety of the associated services available through such networks and systems.
Legal basis: Such processing is essential for the safe provision of services via the website.
How long: Data is stored for a certain period of time as of the visiting of the page depending on individual internet service providers.
b. Ordering services on the website
What: In processing the order placed via the website, the company processes your personal data, i.e. your name, surname, e-mail, address, telephone number and reservation period.
Why: Data is required to implement the agreement which a data subject is a party to, and, among other things, to provide the service in a safe manner (notification of the place of collection, inquiry as to where a vehicle is situated, ability to take measures in the event of an accident...).
Legal basis: Such processing is essential for safe and correct implementation of the agreement.
When you enter into an agreement with the company, this constitutes a legal basis for the processing of personal data. We are obliged to process your personal data in order to implement the agreement. If an individual fails to submit his/her personal data, the company will not be able to enter into an agreement. Furthermore, the company will also not be able to provide the service and deliver goods or other products in line with the agreement as it does not have the data required to implement the agreement. On the basis of Electronic Communications Act we also may inform contract parties of the content, services and products. An individual may at any time request a termination of such communication and personal data processing, and may cancel the notifications via a cancellation link at a bottom of each notification or by sending a separate e-mail to info@eksist.si or a letter via regular post to the company’s address. An individual may as early as at the time of entering into the agreement state that he/she does not want to receive e-notifications.
We may also process data for the purposes of potential lawsuits and other legal proceedings as well as for the compliance purposes, including the compliance with the requirements of governmental authorities for personal data, compliance with tax procedures, for the provision of health and safety at work etc. We may use it for internal reporting purposes, during audits and in other legal matters in the framework of ordinary course of business.
We may also use the data to improve the services, including recognising issues in the existing services, planning improvements of the existing services and designing new services. In doing this, we also help ourselves by conducting surveys.
How long: Data is stored for 10 years or for a time period that complies with other relevant legislation (tax regulations...).
c. Subscribing to newsletter
What: When subscribing to our newsletter, the company also processes your data which you submit to the company on a voluntary basis, i.e. your name, surname, address, telephone, e-mail, social media profiles, information concerning purchases and alike.
Why: The company processes this data exclusively for the purposes of informing you of new developments in the field of electric vehicles and of any potential rental deals, and other company’s activities.
The company will inform individuals of services, events, trainings, offers and other activities via e-mail, telephone and regular post in due time. An individual may at any time request a termination of such communication and personal data processing, and may cancel the notifications via a cancellation link at a bottom of each notification or by sending a separate e-mail to info@eksist.si or a letter via regular post to the company’s address.
The company performs a general statistical processing of data on the existing and potential customers including their orders. This enables us to enhance our operations and advertising, contributes to better quality of our services and to more affordable prices of our products and services.
How long: Your data is being stored until you unsubscribe from the newsletter. You may unsubscribe from the newsletter at any time by clicking on a link indicated in the e-mail you receive or you may also do that here. You may also inform us of your intention to unsubscribe from the newsletter by sending us a message at info@eksist.si or by sending a letter via regular post to the company’s address. The cancellation of your consent does not prejudice the lawfulness of the processing based on the consent given before the cancellation.
Legal basis: We process personal data on the basis of the subject’s valid consent (Article 6(a) of the Regulation). When filling out the form to subscribe to the newsletter/to order a service, please mark that you agree with the company using your personal data for the purposes of informing you of any new developments, and that you are familiar with the fact that you may at any time unsubscribe from receiving our newsletter by clicking the link in the e-mail you receive or by sending an e-mail at info@eksist.si or by sending a letter via regular mail to the company’s address.
The company does not collect and does not process an individual’s personal data unless the individual allows or gives his/her consent to it, i.e. when he/she orders a product or a service, when he/she subscribes to the newsletter, participates in a prize-winning competition etc., or when the provider has a legal basis or a legal interest to process such data.
d. Reporting violations, comments and questions
What: Any individual may file a report of violations of personal data protection legislation or may submit comments or ask questions, sent to the company via e-mail or by regular post. In relation to this, the company will require at least your e-mail or your personal data (name, surname, address).
Why: The company needs your personal data in order to be able to answer your questions or comments or to inform you of the findings relating to your filing of the report.
Legal basis: Any data submitted to the company will be processed by it only if this is essential to carry out the company’s lawful competences, tasks or obligations (Article 6(e) of the Regulation) such as dealing with the reports, questions and comments as well as their resolution and storage (archiving).
How long: The period of storing personal data depends on the type of procedure and legal bases governing the operations and the storing of documentary and archive materials.
Rejecting the erasure of data
Exceptionally, the company may reject the request for data erasure for reasons listed in the General Regulation, such as: exercising the right of freedom of expression and information, for compliance with a legal obligation, on the grounds of public interest in the area of public health, for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, or for the establishment, exercise or defence of legal claims.
After the end of the storage period the controller effectively and permanently deletes the personal data or renders it anonymous so that it can no longer be associated with an identified individual.
Recipients of personal data
The company and the contracting processor that maintains and hosts the website on behalf of the company.
The company may entrust the contracting processor with the processing of personal data based on the data processing agreement. Contracting processors may process the data vested in them exclusively on behalf of the company, within the scope of the company’s authorisation as stipulated in the agreement or any other legal act and in accordance with the purposes outlined in this document.
Contracting processors applied by the company are mainly:
The company shall under no circumstances transfer any personal data to any unauthorised third parties.
Contracting processors may process personal data only in line with the company’s instructions and are not allowed to use personal data for any other purpose.
Data transfer
Personal data is not transferred to third countries or international organisations.
Rights of individuals
An individual may decide freely whether to subscribe to a newsletter or not.
When filing a report of violations or submitting comments or questions, an individual is not obliged to provide his/her personal details. If an individual fails to provide his/her contact details, the company will not be able to contact him/her.
During a visit of a website, the personal data are transferred to the processor of the website due to the functioning of the Web.
In accordance with the General Regulation, you have the following personal data protection rights:
If you wish to enforce any of the aforementioned rights, please send a request via e-mail info@eksist.si or by regular post to the company's address: Eksist d.o.o., Loška cesta 70, 4226 Žiri.
Accessing your personal data and enforcing your rights is free of charge. However, we may charge a reasonable fee if the request of the data subject is clearly unjustified or exaggerated, and in particular, if it is repeated over and over again. In such case we may also reject the request.
If you decide to enforce the above stated rights, we may request certain information from you which will allows us to confirm your identity. This is merely a precaution ensuring that your personal data is not disclosed to unauthorised persons.
In enforcing the above rights, you may also use the Information Commissioner’s form available at their website. Link: https://www.ip-rs.si/fileadmin/user_upload/doc/obrazci/ZVOP/Zahteva_za_seznanitev_z_lastnimi_osebnimi_podatki__Obrazec_SLOP_.doc
If you believe your rights have been violated you may seek protection or assistance by addressing a supervising authority or the Information Commissioner. Link: https://www.ip-rs.si/zakonodaja/reforma-evropskega-zakonodajnega-okvira-za-varstvo-osebnih-podatkov/kljucna-podrocja-uredbe/prijava-krsitev/
If you have any questions regarding the processing of your personal data you may contact us by sending an e-mail to info@eksist.si or a letter by regular post to the company’s address.
Publishing changes
Any change of our personal data protection policy will be published on our website. By using the website, the individual acknowledges to accept and agree with the personal protection policy in full.
This Personal Data Protection Policy was adopted by the Director, Andrej Tušar, on 1 April 2021.