Privacy Policy
1) About the Privacy Policy
The purpose of the Privacy Policy of Sodobni splet d.o.o. (hereinafter: “Privacy Policy”) is to inform users of the services of Sodobni splet d.o.o. and other persons (hereinafter also referred to as: “individuals”) with the purposes and basis of the processing of personal data by the company Sodobni splet d.o.o., Kajakaška cesta 40A, 1211 Ljubljana-Šmartno (v hereinafter: Sodobni splet d.o.o.) and the rights of individuals in this area.
The company pays special attention to the security of your personal data. All personal data provided are treated confidentially and are used only for the purpose for which they were collected. We handle your personal data with the utmost care, taking into account the applicable legislation and the highest standards of their treatment. We take care of the security of your personal data, among other things, through appropriate organizational measures, work procedures and advanced technological solutions, as well as external experts in order to protect your personal data as effectively as possible. In doing so, we use an appropriate level of protection and reasonable physical, electronic and administrative measures to protect the collected data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of personal data or unauthorized access to personal data that has been transferred, stored or otherwise processed.
At the same time, this Privacy Policy further clarifies the consent you have given to the processing of your personal data.
In the Privacy Policy, they comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as:General Data Protection Regulation'), covered by the following information:
The company pays special attention to the security of your personal data. All personal data provided are treated confidentially and are used only for the purpose for which they were collected. We handle your personal data with the utmost care, taking into account the applicable legislation and the highest standards of their treatment. We take care of the security of your personal data, among other things, through appropriate organizational measures, work procedures and advanced technological solutions, as well as external experts in order to protect your personal data as effectively as possible. In doing so, we use an appropriate level of protection and reasonable physical, electronic and administrative measures to protect the collected data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of personal data or unauthorized access to personal data that has been transferred, stored or otherwise processed.
At the same time, this Privacy Policy further clarifies the consent you have given to the processing of your personal data.
In the Privacy Policy, they comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as:General Data Protection Regulation'), covered by the following information:
- contact information of the company,
- the purposes, bases and types of processing of various types of personal data of individuals,
- the duration of storage of individual types of personal data,
- the rights of individuals with regard to the processing of personal data,
- the right to lodge a complaint regarding the processing of personal data,
- validity of the Privacy Policy.
2) Personal data collected by the company
If you are only a visitor to the website, we process data about you only through the use of cookies. If you are a user of the services or a subscriber of the services provided by the company, we also process other personal data about you that we need to perform the services you have ordered or that you use. These personal data are:
- first and last name
- company name
- email address
- information for issuing an offer according to your request (your address, tax code).
If you provide us with your personal data in the context of subscribing to the newsletter, we only process your e-mail address.
3) Controller of personal data
The controller of personal data processed in accordance with this Privacy Policy is Sodobni splet d.o.o., Kajakaška cesta 40a, 1211 Ljubljana-Šmartno, e-mail: info@origammi.si.
4) Categories of individuals whose personal data are processed
This Privacy Policy is intended for anyone who has ordered and/or used our services, or submitted an inquiry, as well as those who visit our website.
5) Purposes of processing and basis for data processing
5.1. Processing on the basis of a contract:
In the context of the exercise of contractual rights and fulfillment of contractual obligations of the company arising from the concluded contract of which the party is the individual whose personal data are processed, the company processes your personal data for the following purposes: identification of the individual, preparation of an offer, conclusion of a contract, to provide the ordered services, to inform about possible changes, additional details and instructions for using the services, to resolve dealing with possible technical problems, objections or complaints, billing services and for other purposes necessary for implementation or conclusion of a contractual relationship between a company and an individual.When invoicing services, on the basis of tax regulations, we obtain and process your address for the correct issuance of the invoice.
5.2. Processing on the basis of legitimate interest:
On the basis of legitimate interest, we use your personal data to detect and prevent fraudulent use and misuse of the services, further in the context of ensuring the stable and secure operation of our system and services, as well as for the purposes of implementing information security measures, meeting quality requirements and detecting technical failures of systems and services.On the basis of legitimate interest, we also use your personal data for the purposes of possible enforcement, judicial and extrajudicial recovery.In accordance with the General Data Protection Regulation, you can in the event of suspected abuse, the company processes data on individuals to an appropriate and proportionate extent for the purpose of identifying and preventing possible fraud or abuse and may, where appropriate, transmit such data to other providers of such services, business partners, the police, the public prosecutor's office or other competent authorities. For the purpose of preventing future abuse or fraud, data on the history of detected abuses or fraud in relation to an individual, including data on the subscriber relationship and, for example, the IP address, may be kept for up to five years after the termination of the business relationship.Based on legitimate interest, we may also use your contact information for direct marketing purposes, when provided for this purpose by law. prescribed conditions.
5.3. Processing based on consent to the processing of personal data:
The processing of data may also be based on your consent, which you have provided to the company.Consent may, for example, relate to the notification of offers, benefits and improvements to the services provided by the company (subscription to the newsletter). The purpose of such communication is to bring the services as close as possible to your needs and wishes and thus to increase their useful value for you. The notification is carried out through the channels that you have chosen in agreement. You can cancel the notification at any time, in the manner defined in the Privacy Policy.
You can withdraw or change your consent at any time in the same way as you gave it or in another way as defined in the Privacy Policy, and the Company reserves the right to identify the individual withdrawing consent. The change of consent can be arranged, among other things, by e-mail to the address hello@origammi.si or by a written request sent to the address of the company's registered office.
Withdrawal or modification of consent applies only to data processed on the basis of your consent. Your last consent given to us is valid. The possibility of withdrawal of consent does not constitute a right of withdrawal in the business relationship of an individual with a company.
In the absence of revocation, the data for which your consent is given will be processed up to two years after the termination of the business relationship with the company.
In the context of the exercise of contractual rights and fulfillment of contractual obligations of the company arising from the concluded contract of which the party is the individual whose personal data are processed, the company processes your personal data for the following purposes: identification of the individual, preparation of an offer, conclusion of a contract, to provide the ordered services, to inform about possible changes, additional details and instructions for using the services, to resolve dealing with possible technical problems, objections or complaints, billing services and for other purposes necessary for implementation or conclusion of a contractual relationship between a company and an individual.When invoicing services, on the basis of tax regulations, we obtain and process your address for the correct issuance of the invoice.
5.2. Processing on the basis of legitimate interest:
On the basis of legitimate interest, we use your personal data to detect and prevent fraudulent use and misuse of the services, further in the context of ensuring the stable and secure operation of our system and services, as well as for the purposes of implementing information security measures, meeting quality requirements and detecting technical failures of systems and services.On the basis of legitimate interest, we also use your personal data for the purposes of possible enforcement, judicial and extrajudicial recovery.In accordance with the General Data Protection Regulation, you can in the event of suspected abuse, the company processes data on individuals to an appropriate and proportionate extent for the purpose of identifying and preventing possible fraud or abuse and may, where appropriate, transmit such data to other providers of such services, business partners, the police, the public prosecutor's office or other competent authorities. For the purpose of preventing future abuse or fraud, data on the history of detected abuses or fraud in relation to an individual, including data on the subscriber relationship and, for example, the IP address, may be kept for up to five years after the termination of the business relationship.Based on legitimate interest, we may also use your contact information for direct marketing purposes, when provided for this purpose by law. prescribed conditions.
5.3. Processing based on consent to the processing of personal data:
The processing of data may also be based on your consent, which you have provided to the company.Consent may, for example, relate to the notification of offers, benefits and improvements to the services provided by the company (subscription to the newsletter). The purpose of such communication is to bring the services as close as possible to your needs and wishes and thus to increase their useful value for you. The notification is carried out through the channels that you have chosen in agreement. You can cancel the notification at any time, in the manner defined in the Privacy Policy.
You can withdraw or change your consent at any time in the same way as you gave it or in another way as defined in the Privacy Policy, and the Company reserves the right to identify the individual withdrawing consent. The change of consent can be arranged, among other things, by e-mail to the address hello@origammi.si or by a written request sent to the address of the company's registered office.
Withdrawal or modification of consent applies only to data processed on the basis of your consent. Your last consent given to us is valid. The possibility of withdrawal of consent does not constitute a right of withdrawal in the business relationship of an individual with a company.
In the absence of revocation, the data for which your consent is given will be processed up to two years after the termination of the business relationship with the company.
6) Restrictions on the transfer of personal data
If necessary, we will authorize other companies and individuals to perform certain works that contribute to our services. In such a case, the Company may also transfer the Personal Data to such carefully selected external processors who will enter into a contract with the Company for the processing of personal data or a substantially identical agreement or other binding document (hereinafter: “Processing Agreement”). We will provide or make such data available to external processors only to the extent required for a specific purpose. This data may not be used by the external processor for any other purpose, meeting at least all the standards for the processing of personal data provided for by the applicable legislation.
External processors are contractually bound by the Company to respect the confidentiality of your personal data.
On the basis of a reasoned request, the company also transfers personal data to the competent state authorities, which have a legal basis for doing so. For example, the company will respond to requests from courts, law enforcement authorities and other state authorities, which may also include the state authorities of another EU Member State.
External processors are contractually bound by the Company to respect the confidentiality of your personal data.
On the basis of a reasoned request, the company also transfers personal data to the competent state authorities, which have a legal basis for doing so. For example, the company will respond to requests from courts, law enforcement authorities and other state authorities, which may also include the state authorities of another EU Member State.
7) Retention period of personal data
The data retention period is determined depending on the category of individual data. We keep the data for a maximum period of time as necessary to achieve the purpose for which they were collected or further processed, or until the expiry of the limitation periods for fulfilling obligations or the statutory retention period. Billing data and related contact details of individuals may be kept for the purpose of fulfilling contractual obligations until full payment of the service, or for a maximum period until the expiration of limitation periods in relation to an individual claim, which by law can range from one to five years. The invoices shall be kept for a further 10 years after the end of the year to which the invoice relates in accordance with the law governing value added tax.
Other data that we have obtained on the basis of your consent are kept for the duration of the business relationship and for another 2 years after termination, unless the law provides for a longer retention period. Insofar as the individual who has given consent to the processing of personal data has not entered into a business relationship with us, his consent is valid until its revocation. After the end of the retention period, the data will be deleted, destroyed, blocked or anonymized, unless otherwise provided by law for each type of data.
Other data that we have obtained on the basis of your consent are kept for the duration of the business relationship and for another 2 years after termination, unless the law provides for a longer retention period. Insofar as the individual who has given consent to the processing of personal data has not entered into a business relationship with us, his consent is valid until its revocation. After the end of the retention period, the data will be deleted, destroyed, blocked or anonymized, unless otherwise provided by law for each type of data.
8) Rights of individuals with regard to the processing of personal data
We guarantee the exercise of your rights in relation to the processing of your personal data without undue delay. We will decide on your request within one month after receiving your request. In case of complexity and a large number of requests, the deadline can be extended by a maximum of two additional months. If we extend the deadline, we will notify you of any such extension within one month of receipt of the request, together with the reasons for the delay.
We accept requests concerning the exercise of your rights by e-mail or by post to the address Sodobni splet d.o.o., Kajakaška cesta 40A, 1211 Ljubljana-Šmartno.
Where you submit a request by electronic means, we will, where possible, provide you with the information by electronic means, unless you request otherwise. Where there is reasonable doubt as to the identity of the individual making the request in relation to any of his or her rights, we may request the provision of additional information necessary to confirm the identity of the individual to whom the personal data relates. taxes.
If the data subject's requests are manifestly unfounded or excessive, in particular because they are repetitive, the company may:
We accept requests concerning the exercise of your rights by e-mail or by post to the address Sodobni splet d.o.o., Kajakaška cesta 40A, 1211 Ljubljana-Šmartno.
Where you submit a request by electronic means, we will, where possible, provide you with the information by electronic means, unless you request otherwise. Where there is reasonable doubt as to the identity of the individual making the request in relation to any of his or her rights, we may request the provision of additional information necessary to confirm the identity of the individual to whom the personal data relates. taxes.
If the data subject's requests are manifestly unfounded or excessive, in particular because they are repetitive, the company may:
- charge a reasonable fee, taking into account the administrative costs of providing the information or communication or implementing the requested action; or
- refuse to act on the request.
We give you the following rights in relation to the processing of your personal data:
- (i) the right of access to data
- (ii) the right to rectification
- (iii) the right to erasure (“right to be forgotten”)
- (iv) the right to restriction of processing
- (v) the right to data portability
- (vi) the right to contract
(i) the right of access to data
You always have the right to know whether personal data is being processed in relation to you and, if so, access to personal data and the following information:
You always have the right to know whether personal data is being processed in relation to you and, if so, access to personal data and the following information:
- the purposes of the processing,
- the types of personal data processed,
- the users or categories of users to whom personal data have been or will be disclosed,
- the envisaged period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period,
- the existence of a right to request rectification or erasure of personal data from the controller or restriction of the processing of your personal data, or the existence of a right to object to such processing,
- the right to lodge a complaint with a supervisory authority,
- where personal data is not collected from you, any available information relating to its source.
(ii) the right to rectification
You have the right to have inaccurate personal data concerning you corrected without undue delay and, taking into account the purposes of the processing, the right to have incomplete personal data completed, including by submitting a supplementary statement.
(iii) the right to erasure (“right to be forgotten”)
You have the right to have your personal data deleted without undue delay where one of the following reasons applies:
You have the right to have inaccurate personal data concerning you corrected without undue delay and, taking into account the purposes of the processing, the right to have incomplete personal data completed, including by submitting a supplementary statement.
(iii) the right to erasure (“right to be forgotten”)
You have the right to have your personal data deleted without undue delay where one of the following reasons applies:
- where the personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
- where you withdraw the consent on the basis of which the processing is carried out, and there is no other legal basis for the processing,
- where you object to the processing of your data, but there are no overriding legitimate grounds for the processing;
- where the personal data have been processed unlawfully,
- when personal data has to be deleted in order to comply with a legal obligation under EU law or the Slovenian legal order.
(iv) the right to restriction of processing
You have the right to request that we restrict the processing of your personal data where one of the following applies:
You have the right to request that we restrict the processing of your personal data where one of the following applies:
- where you dispute the accuracy of the data, for a period that allows us to verify the accuracy of the personal data, the processing is unlawful and you object to the erasure of the personal data and instead request the restriction of their use,
- we no longer need your personal data for the purposes of the processing, but you need it to assert, exercise or defend legal claims,
- if you have objected to the processing based on the legitimate interests of the company until it is verified that our legitimate reasons outweigh your reasons.
Where the processing of your personal data has been restricted in accordance with the preceding paragraph, such personal data, with the exception of their storage, shall only be processed with your consent, or for the exercise, exercise or defence of legal claims or for the protection of the rights of another natural or legal person.
Before revoking the restriction on the processing of your personal data, we are obliged to inform you about this.
(v) the right to data portability
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable form and the right to transmit this data to another controller without hindrance from the company, where the processing is based on your consent and the processing is carried out by automated means. At your request, where technically feasible, personal data may be transferred directly to another controller.
(vi) the right to contract
Where we process your data on the basis of a legitimate interest for marketing purposes, you can object to such processing at any time.We will stop processing your personal data unless we can demonstrate compelling reasons for the processing that outweigh your interests, rights and freedoms, or to assert, exercise or defend legal claims.
Before revoking the restriction on the processing of your personal data, we are obliged to inform you about this.
(v) the right to data portability
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable form and the right to transmit this data to another controller without hindrance from the company, where the processing is based on your consent and the processing is carried out by automated means. At your request, where technically feasible, personal data may be transferred directly to another controller.
(vi) the right to contract
Where we process your data on the basis of a legitimate interest for marketing purposes, you can object to such processing at any time.We will stop processing your personal data unless we can demonstrate compelling reasons for the processing that outweigh your interests, rights and freedoms, or to assert, exercise or defend legal claims.
9) Right to lodge a complaint regarding the processing of personal data
Any complaint regarding the processing of your personal data can be sent to the e-mail addressor by post to the address S splet d.o.o., Kajakaška cesta 40A, 1211 Ljubljana-Šmartno.
In the event that we do not decide on your request within the legal deadline or reject your request, you have the possibility to file a complaint with the Information Commissioner.
You also have the right to lodge a complaint directly with the Information Commissioner if you believe that the processing of your personal data violates Slovenian or EU regulations in the field of personal data protection.If you have exercised the right to access the data and, after receiving the decision, you believe that the personal data you have received is not personal data that if you have requested them, or if you have not received all the requested personal data, you may file a reasoned complaint with the company within 15 days before submitting a complaint to the Information Commissioner. We must decide on your complaint as a new request within five working days.
In the event that we do not decide on your request within the legal deadline or reject your request, you have the possibility to file a complaint with the Information Commissioner.
You also have the right to lodge a complaint directly with the Information Commissioner if you believe that the processing of your personal data violates Slovenian or EU regulations in the field of personal data protection.If you have exercised the right to access the data and, after receiving the decision, you believe that the personal data you have received is not personal data that if you have requested them, or if you have not received all the requested personal data, you may file a reasoned complaint with the company within 15 days before submitting a complaint to the Information Commissioner. We must decide on your complaint as a new request within five working days.
10) Final provisions
For anything not governed by this Privacy Policy, applicable law applies. The Company reserves the right to amend this Privacy Policy. We will notify you of the change by posting it on the official website of Sodobni splet d.o.o. 30 days before it becomes effective. If you have any questions about the Privacy Policy or the information we hold about you, please send an email to hello@origammi.si.
11) Validity of the Privacy Policy
This Privacy Policy is published on the website origammi.si and comes into force on 18.9.2024.
Sodobni splet d.o.o.
Sodobni splet d.o.o.
Let's get in touch
Let’s create something extraordinary together. Write to us, and we’ll get back to you as soon as possible.
hello@origammi.si
Let's talk
Have questions? Prefer talking over writing? Give us a call, and we’ll gladly answer all your questions.
(+386) 40 828 925