I. General

    Welcome to the website of VIPAVA 1894, kmetijska proizvodnja, trgovina in storitve, d.o.o. (shortened company name: VIPAVA 1894 d.o.o.). Thank you for your interest in visiting our website. The purpose of this Privacy Policy and Personal Data Protection statement is to inform you, in accordance with applicable personal data protection legislation, of your rights, provide you with relevant information about the data controller, the cookies our website uses, and the reasons for their use. In doing so, we aim to provide you with all necessary information to make an informed decision about whether to permit their use and thus help us meet your interests and wishes. It's important to us that you are fully informed about the personal data we collect when you browse our online offers and use our services, and how we use this data.

    II. Data Controller

      The website controller is:

      VIPAVA 1894, kmetijska proizvodnja, trgovina in storitve, d.o.o.

      Wine Road 5

      5271 Vipava

      [email protected], 05 36 71 200

      III. Purposes of Processing and Legal Basis for Collecting and Processing Personal Data

        We process your personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the Personal Data Protection Act (ZVOP-2), and other applicable regulations governing personal data protection and the controller's operations in negotiating for, concluding, and executing contractual and business relationships with you. Additionally, in some cases, we process your personal data because legislation requires us to do so. We may also process your personal data when necessary to pursue our legitimate interests (e.g., issuing an invoice for services rendered). In certain cases, the basis for processing personal data is your explicit consent for pre-defined processing purposes.

        VIPAVA 1894, kmetijska proizvodnja, trgovina in storitve, d.o.o. processes the following personal data:

        1. Website Visit

        When you visit the website, the server automatically collects details about your visit such as: IP address, URL of the website from which you accessed our website, browser settings and information about your computer's or mobile device's operating system, content you access on the website, access date, and duration of website visit.

        Information about your website use is very important to us as we constantly want to improve your user experience. We collect and analyze this information using cookies. You can read more about cookies below under section VI.

        If you are logged into another provider's user account (e.g., Google account, Facebook account, booking.com account, etc.) while Browse our website, these providers may track your behavior on our website in accordance with their terms and your selected settings in your account with that provider. More information regarding this must be provided by the individual provider.

        b. Online Form Completion

        Our website offers you the option to fill out a general contact form, based on which we collect the following personal data: name and surname, your email address, and the content of the message. We collect this data to provide you with the requested information or service.

        c. Conclusion of Contractual Relationship

        For the purpose of concluding a contractual relationship and executing contractual obligations, which includes managing and fulfilling orders, concluding contracts, and performing all other contractual activities, we collect and process mandatory personal data required for concluding and executing the contract or order (e.g., customer's name and surname or company name, residential address or company seat, registration and tax number, contact information, purchased products along with prices of purchased products, purchase amount, payment method and payment execution data, delivery and invoicing address, order number and date, order status, etc.) and other data (e.g., communication archive between the client and the company). A customer or contractual partner who does not wish to provide us with the necessary data will not be able to conclude a contract or place an order with VIPAVA 1894, kmetijska proizvodnja, trgovina in storitve, d.o.o.

        Retention Period of Personal Data

          Personal data is processed for as long as necessary to achieve the purpose for which it was collected and processed. If data is collected based on law, it is retained for as long as prescribed by the respective law.

          Personal data necessary for contract execution is retained for as long as necessary for contract performance and for an additional five years after the end of the calendar year in which the contract ceased, except in cases where a longer retention period would be necessary due to a dispute related to the contract. In such a case, the individual's personal data is retained for an additional 10 years after the end of the calendar year of the finality of the court decision, arbitration, or court settlement, or – if there was no judicial dispute – 5 years after the end of the calendar year of the peaceful resolution of the dispute.

          Personal data processed on the basis of personal consent or legitimate interest is retained for a maximum of one year after the end of the calendar year. In case of consent withdrawal, personal data is deleted within three months at the latest. We may also delete this data before withdrawal if the purpose of personal data processing has been achieved or if required by law. Withdrawal of consent does not affect the legality of data processing carried out based on consent until its withdrawal.

          After the retention period expires, personal data is effectively and permanently deleted or anonymized and transferred to an archive, so that it can no longer be linked to a specific individual.

          V. Cookies

          For a user-friendly online experience and to adapt website operations to your needs, some areas of our website may use cookies. A cookie is a small text file stored locally on your computer when you visit a website. Cookies enable the browser to maintain your login or remember your settings, shopping cart status, etc., thereby ensuring uninterrupted use of the website.

          Additionally, we use cookies for personalized advertising content. Cookies do not contain any personal data and cannot be identified on third-party websites – including analytical service providers.

          You can accept or reject cookies – including those used for website tracking – by selecting the appropriate browser settings. To manage cookies, most browsers allow you to accept or reject all cookies, accept only certain types of cookies, or warn you when a site wants to store a cookie. You can set your browser to notify you when you receive a new cookie or to reject cookies. Your browser also offers you the option to delete cookies (e.g., via the "Clear Browse history" function). More detailed information on how to do this can be found on your browser's website.

          1. Analytical Cookies on the Controller's Website

          Analytical cookies allow us to monitor website visits so that the website controller can further improve the website or its content. If you disable these cookies, the site will function normally, but as a site provider, we will be deprived of information that can help us further improve the performance of our site and, consequently, your user experience with us.

          Our website may use Google Analytics for web analysis. The data obtained by the cookie about your use of our website is typically transferred to a Google server in the USA and stored there. Google will use this information to calculate your use of the website, compile reports on website activity for the website administrator, and provide other services related to website and internet use. Through intermediary URLs, the number of users redirected to our website from partner websites is statistically calculated, thus providing us with information on which of our marketing campaigns have piqued your interest. More information about Google Analytics services, personal data processing, and cookies can be found on their website: https://policies.google.com/privacy?hl=sl. https://policies.google.com/privacy?hl=sl.

          You can disable Google Analytics cookies at the following web link:  https://tools.google.com/dlpage/gaoptoutIf you choose not to receive personalized ads, this means you may still see ads on the internet, but these ads will not be tailored to your preferences and Browse patterns.

          Google Analytics cookies are stored based on Article 6(1)(f) of the General Data Protection Regulation (GDPR).. odstavka 6.(f) člena Splošne uredbe o varstvu podatkov (GDPR).

          b. Facebook Social Network Plugin

          The controller's website has installed 'Facebook social network plugins, as it is in the website controller's interest to be as visible as possible on social networks. When you visit our website that uses this plugin, a connection with Facebook is not automatically established. This only happens after your explicit consent, which we request when you click on the appropriate button (e.g., "Like" or "Share"). Only this action grants Facebook permission to link your visit to our website with your user account. More information about the purpose and scope of data collection, further processing and use of data by Facebook, as well as your rights in this regard and privacy settings options, can be found in Facebook's privacy policy on their website: http://www.facebook.com/policy.php. http://www.facebook.com/policy.php.

          If you do not want Facebook to link your visit to our website with your Facebook user account, log out of your Facebook user account before you start Browse our website. You can also completely prevent the loading of Facebook plugins with browser add-ons (e.g., with the "Facebook Blocker" function).

          The use of Facebook plugins on the controller's website is enabled based on Article 6(1)(f) of the General Data Protection Regulation (GDPR).

          VI. Data Transfer for Contractual Processing

          Personal data of customers and contractual partners at VIPAVA 1894, kmetijska proizvodnja, trgovina in storitve, d.o.o. is used only by authorized persons. The controller of personal data of customers and contractual partners does not forward personal data to third parties, except:

          - To external contractual processors who process data exclusively on behalf of, for the account of, according to instructions, and under the supervision of the controller (e.g., IT system administrators and maintainers, delivery companies, advertising companies, etc.)

          - To state authorities as needed, based on their reasoned written request for the needs of conducting specific proceedings.

          Personal data is not transferred to third countries or international organizations.

          VII. Measures to Ensure Personal Data Protection

          To ensure the confidentiality and security of the personal data of customers and contractual partners, the controller has adopted appropriate data protection measures. This means that we implement organizational, physical, and technical measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data.

          VIII. Individual Rights

          To ensure fair and transparent processing of personal data, an individual whose personal data is being processed may, under additional legal conditions:

          1. Request information on whether we process your personal data and, if so, what data we process, on what basis we process it, and why we use it;
          2. Request access to their personal data, which allows you to receive a copy of the personal data we process and verify that we process it lawfully;
          3. Request corrections to their personal data, such as correcting incomplete or inaccurate personal data;
          4. Request the deletion of their personal data when there is no reason for further processing or when you exercise your right to object to further processing;
          5. Object to further processing of personal data where the organization relies on legitimate interest (including in the case of a third party's legitimate interest), when there are reasons related to your specific situation, whereby you have the right to object at any time if we process your personal data for direct marketing purposes;
          6. Request restriction of processing of their personal data, which means suspending the processing of personal data, if, for example, you want us to determine the accuracy or verify the reasons for further processing of personal data;
          7. For data processed based on a contract or consent, request the transfer of their personal data in a structured electronic format to another controller, if possible and feasible;
          8. Withdraw consent that you gave for the collection, processing, and transfer of your personal data for a specific purpose. Upon receiving notification that you have withdrawn your consent, we will cease processing personal data for the original purpose, unless we have another legitimate legal basis for carrying out the processing.

          You can exercise your rights by submitting a written request addressed to our authorized person for personal data protection, who is available at the email address: [email protected], or you can send a written request by mail to: Vinarska cesta 5, 5270 Ajdovščina. A request relating to individual rights will be answered without undue delay and in any case within one month of receiving the request. In case this deadline is extended (by a maximum of two additional months) due to the complexity and number of requests, you will be informed accordingly. Access to individual personal data and the exercise of rights are free of charge for the individual, however, we may charge a reasonable fee if your request is clearly unfounded or excessive, especially if it is repetitive. In such a case, we may also refuse your request. When exercising rights under this heading, we may need to obtain certain information from you to help us confirm your identity, which is a security measure to ensure that your personal data is not disclosed to unauthorized persons.

          For additional clarifications regarding personal data processing or complaints about personal data processing at VIPAVA 1894, kmetijska proizvodnja, trgovina in storitve, d.o.o., you can also contact our authorized person for personal data protection directly at the email address: [email protected].

          IX. Right to Lodge a Complaint with a Supervisory Authority

            If you believe that your personal data is being stored or otherwise processed in violation of applicable regulations governing personal data protection, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska 22, 1000 Ljubljana, email: [email protected], telephone: 012309730, website: www.ip-rs.si. [email protected], telefon: 012309730, spletna stran: www.ip-rs.si.

            X. Notice Regarding Personal Data Processing During Video Surveillance

            In accordance with the third paragraph of Article 76 of the Personal Data Protection Act (ZVOP-2) and Article 13 of the General Data Protection Regulation, we inform you that video surveillance is carried out on the premises of the production and business company VIPAVA 1894, kmetijska proizvodnja, trgovina in storitve, d.o.o.

            The video surveillance controller is:

            VIPAVA 1894, kmetijska proizvodnja, trgovina in storitve, d.o.o.

            Wine Road 5

            5271 Vipava

            Contact details: employee Bojan Marc, [email protected],[email protected], 041 822 883.

            Video surveillance is carried out for the purpose of protecting property and ensuring the safety of our customers and employees, as well as monitoring entry into or exit from official or business premises. The exact locations where video surveillance is carried out are marked with an appropriate notice.

            The legal basis for carrying out video surveillance is the performance of tasks in the legitimate (public) interest based on the first paragraph of Article 6 of the General Data Protection Regulation (GDPR) and Article 77 of the Personal Data Protection Act (ZVOP-2). Due to the existence of a legal basis for carrying out video surveillance, the individual's consent for the processing of personal data collected through video surveillance is not required. Every individual has the right to refuse entry to an area, object, or space where video surveillance is carried out.

            Users of the video surveillance system are employees authorized for this purpose based on the general acts of the personal data controller.

            The video surveillance system creates a collection of personal data that includes an individual's recording (image) without sound and generic data, the location and date of the recording, and recorded time of entry and exit or movement within the video-monitored area.

            Personal data collected by the video surveillance system is not subject to further use and is not transferred to third countries or international organizations. Video surveillance recordings, except for recordings of potential incidental events, are stored for a period of three (3) months from the date of their creation.

            The controller does not carry out automated decision-making and profiling when performing video surveillance.

            As an individual identified in a video recording or as a person recorded by a video surveillance camera, you have the right to:

            1. Access the video recording related to you, except where this would jeopardize the protection of personal data of other individuals;
            2. Deletion or restriction of processing of the video recording related to you;
            3. Object to the processing of the video recording related to you, and
            4. Portability of the video recording related to you (a copy of the recording), except where this would jeopardize the protection of personal data of other individuals.

            You can exercise your rights by submitting a written request addressed to our authorized person for personal data protection. Your request will be processed under the conditions and in the manner more precisely defined in section VIII. of this statement.

            XI. Contact

            For any questions regarding data protection, please use the general contact form or contact our company by email at [email protected].

            XII. Changes to the Privacy Policy

            The Privacy Policy may be updated, changed, and supplemented from time to time. Updates to the Privacy Policy will be published on this website. All changes become effective on the date of publication on our website, so we recommend that you regularly visit it to familiarize yourself with any updates.