Privacy Policy – Vovk d.o.o.

I. Personal data controller

Vovk d.o.o.
Address: Spodnja Slivnica 50, 1290 Grosuplje, Slovenia
Company registration number: 3693775000
VAT ID: SI25724932
Telephone: +386 1 7873 683
Email: info@vovk-inox.si

Vovk d.o.o. is the controller of the personal data we collect in the course of our business and through our website. For information or to exercise your rights, please contact us using the details above.

II. Types and sources of personal data

We collect and process data relating to the following groups:

  • Customers and prospective customers: contact details, order information and status information (e.g. outstanding debts and contracts entered into).
  • Website users: technical data and website usage data (IP address, browser, date and time of visit, pages visited), which may constitute personal data.

Data sources: contracts, online forms, email, direct business dealings and public sources where there is an appropriate legal basis for processing.

III. Legal bases and retention periods

We process data on the following bases:

  • A contract or steps taken before entering into a contract: to enter into and perform a contract.
  • Legitimate interests: efficient business operations, security, debt recovery and keeping evidence of communications, where these interests are not overridden by the individual’s interests or fundamental rights and freedoms.
  • Consent: for sending marketing communications, participation in prize draws and similar purposes. Consent is voluntary and may be withdrawn at any time.

Retention periods:

  • Data processed on the basis of consent is retained until consent is withdrawn or the purpose has been fulfilled.
  • Data processed on the basis of legitimate interests or a contract is retained for as long as necessary to fulfil the purpose and, where necessary, for up to 5 years after the contract ends or a dispute is finally resolved.

IV. Consequences of not providing data

  • Data required by law or contract is mandatory; without it, cooperation or entering into a contract is not possible.
  • For processing based on legitimate interests, failure to provide data may limit or prevent access to services or goods where that data is necessary for this purpose.
  • Consent to marketing is optional. Without it, we will not send you information about special offers or news on this basis.

V. Disclosure of data to third parties

  • We may disclose data to contracted processors and service providers who enable us to fulfil contractual obligations (e.g. carriers and IT providers).
  • Processors receive only the data strictly necessary and must comply with personal data protection rules.

VI. Transfers of data to third countries

If providing our services requires a transfer of personal data to countries outside the European Economic Area, we will carry it out only in compliance with Chapter V of the GDPR, for example on the basis of an adequacy decision or appropriate safeguards such as standard contractual clauses. Derogations may be used only where the conditions set out in the GDPR are met.

VII. Individual rights

Subject to the conditions set out in the GDPR, you have the following rights:

  1. Access: to know which personal data we process about you and to request a copy.
  2. Rectification of inaccurate or incomplete data: to request that we correct or complete your data.
  3. Erasure: to request deletion of personal data in the circumstances permitted by the GDPR.
  4. Restriction of processing: to request that processing be restricted, for example while we verify the accuracy of data.
  5. Objection: where we process data on the basis of legitimate interests, you may object on grounds relating to your particular situation. You may object to processing for direct marketing at any time.
  6. Data portability: where processing is based on consent or a contract and carried out by automated means, to receive the data you have provided to us in a structured, commonly used and machine-readable format and request its transmission to another controller where technically feasible.

Please send requests to info@vovk-inox.si. We may contact you to verify your identity.

VIII. Right to withdraw consent

You may withdraw consent to processing for marketing purposes at any time by emailing info@vovk-inox.si. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

IX. Security measures and data storage

  • Electronic monitoring and access controls (passwords, encryption and restricted access).
  • Prevention of disclosure during data transmission.

X. Information and contact

For questions or to exercise your rights, contact us at info@vovk-inox.si or by post at our registered office.

XI. Right to lodge a complaint

If you believe your rights have been infringed, you may lodge a complaint with the Slovenian Information Commissioner (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, Slovenia, telephone +386 1 230 97 30, email gp.ip@ip-rs.si.

XII. Final provision

This policy may be amended to reflect changes in legislation or significant changes in our business operations.

Ljubljana, 1 January 2026