Privacy Statement
At BIRO BIRO d.o.o., we recognize the importance of your personal data and, together with our partners, ensure its safe and proper handling. This statement is intended to inform users about how personal data is processed, updates, and the importance of protecting your personal data.
We kindly ask you to read this statement carefully before submitting any data to BIRO BIRO d.o.o. We assure you that the processing of your data will always comply with the latest standards and applicable legislation in the field of personal data protection, particularly the General Data Protection Regulation (GDPR; Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC) and the Personal Data Protection Act (ZVOP-2; Official Gazette of the Republic of Slovenia, No. 163/22 – consolidated text).
What are personal data?
Personal data are any information relating to an identified or identifiable natural person, regardless of the format in which it is presented. These are data by which a person can be identified.
Examples of personal data include: name and surname, residential address, personal identification number, tax number, health insurance number, phone number, vehicle registration number, bank account number, etc.
Method and duration of data storage
Personal data collected and stored with your consent will be kept in an electronic personal data database.
Collected personal data will be retained as long as necessary to fulfill the purpose for which they were collected or until consent is withdrawn.
All databases are protected, and data are stored with due diligence and in accordance with applicable personal data protection legislation.
Processing and use of your personal data
The General Data Protection Regulation (GDPR) stipulates that your personal data may only be collected, managed, and processed:
- based on explicit written or digital consent,
- if data collection is necessary to conclude a contract with you,
- if data collection has a proper legal basis.
Purpose of personal data processing
Personal data requiring your explicit written consent are collected, used, and processed solely for the purpose for which they were collected.
We commit not to disclose your personal data to third parties without your explicit written consent and not to process the data contrary to the purpose for which they were collected.
Your rights regarding personal data protection
The GDPR provides several rights concerning personal data protection, such as:
- the right to correct or delete incorrect personal data,
- the right to restrict the processing of personal data,
- the right to data portability,
- the right to object,
- the right to access personal data relating to you,
- the right to lodge a complaint.
All rights can be exercised by submitting a written request, signed and addressed to BIRO BIRO d.o.o., Beloruska ulica 7, 2000 Maribor, or digitally signed via email at info@birobiro.si.
Withdrawal of consent for personal data processing
You can withdraw your consent for the processing of personal data at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. Data for which consent has been given will be processed until consent is withdrawn.
Consent can be withdrawn by a written and signed request addressed to BIRO BIRO d.o.o., Beloruska ulica 7, 2000 Maribor, or digitally signed via email at info@birobiro.si.
Upon withdrawal of consent, we will immediately cease processing your personal data and delete it entirely.
Right to correction and deletion of incorrect personal data
You have the right to request correction or completion of incorrect personal data.
You also have the right to request the immediate deletion of personal data relating to you.
In the case of correction, completion, or deletion of personal data, we will inform you immediately once the change is made.
Right to restrict processing of personal data
You have the right to request the restriction of processing of your personal data if you identify any inaccuracies, invalidity, or previous reason for which the data were collected.
Right to data portability
You have the right to request your personal data that we have processed in connection with you.
You also have the right to request that your personal data be transferred to a third party.
Right to object
In addition to the right to withdraw consent, you have the right to request that we immediately cease processing your data for direct marketing or notifications without your explicit consent. BIRO BIRO d.o.o. and our partners are obliged to stop such activities immediately.
Right to access personal data relating to you
You have the right to obtain information about any personal data relating to you and access the following:
- purpose of processing,
- type of personal data relating to you,
- users of your personal data,
- estimated retention period of personal data,
- source of personal data.
Data protection breaches
In case of a detected personal data breach, we will notify you immediately.
In case of a breach or intrusion into personal data, we will notify the relevant authority immediately, but no later than 72 hours after detecting the breach.
Right to lodge a complaint
If you believe that your personal data is not collected, managed, or processed in accordance with applicable data protection legislation, you have the right to file a complaint with: Information Commissioner, Dunajska cesta 22, 1000 Ljubljana, or by email at gp.ip@ip-rs.si.
Important notice regarding processing of your personal data
Your data is processed in accordance with applicable Personal Data Protection legislation and the General Data Protection Regulation (GDPR).
We reserve the right to make changes and updates to the Privacy Policy.