Privacy policy

Rastlinjaki Gajšek d.o.o., with its registered office at Ljubljanska cesta 37, 2310 Slovenska Bistrica, company registration number 6701477000, VAT number: SI 30245630 (hereinafter: “Rastlinjaki Gajšek”), for the purpose of protecting the privacy of the individuals using its services (“customers”) and of other persons whose data it processes (hereinafter together: “individuals”), sets out in these Data Protection Terms, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR), and with the Personal Data Protection Act (as amended), its policy on the protection of personal data, specifying the types of data, retention periods, purposes and the rights of individuals in relation to personal data and its processing, thereby supplementing the Terms of Use of the services of Rastlinjaki Gajšek. These Terms apply in all cases where Rastlinjaki Gajšek acts as the controller of individuals’ personal data.

1. Processing of personal data

Rastlinjaki Gajšek processes individuals’ personal data on the basis of law, a contract, legitimate interest and/or the individual’s freely given consent.

For the purpose of providing its services, Rastlinjaki Gajšek processes the following data about customers: first name and surname for natural persons / company name and legal form for legal persons; the individual’s address/registered office and contact telephone number; at the individual’s request, their academic, scientific or professional title, website address and other types of personal contact details; email address; tax number for natural persons and tax number and company registration number for legal persons; the invoicing address, if different from the permanent address (street or locality – house number, postcode, town); bank account number for individuals; and, on the basis of the customer’s payment, additional data if the individual so wishes and this does not interfere with the rights of third parties.

Rastlinjaki Gajšek will process and store the personal data referred to in the previous paragraph until the services have been paid for in full. Where tax legislation so provides, certain data are retained until the expiry of the 10-year retention period.

On the basis of the individual’s explicit consent, Rastlinjaki Gajšek collects, stores, uses and segments first name and surname, address, contact email address, contact telephone number, customer number, traffic data and location data other than traffic data, for the purpose of (i) targeted information about offers and benefits relating to possible new services, but for no longer than 10 years, via SMS and MMS messages, email, post and telephone; and/or (ii) information about prize competitions organised by Rastlinjaki Gajšek or its partner companies in cooperation with Rastlinjaki Gajšek, via SMS and MMS messages, email, post and telephone; and/or (iii) surveys on customer satisfaction and additional services of Rastlinjaki Gajšek via SMS and MMS messages, email, post and telephone. Rastlinjaki Gajšek stores and uses the personal data referred to in this paragraph for as long as is necessary to achieve the purpose for which the data were processed, or until the individual withdraws their consent.

It is in the legitimate interest of Rastlinjaki Gajšek to use individuals’ personal data in order to improve, adapt, modify, personalise or otherwise enhance its services, to detect and prevent fraud, to improve the security of the Rastlinjaki Gajšek website, to send communications that will benefit the individual, and to analyse the effectiveness of marketing communications

2. Disclosure of data to third parties

Where necessary for the performance of the contractual obligations of Rastlinjaki Gajšek, Rastlinjaki Gajšek may disclose individuals’ personal data to external service providers and suppliers of goods, including companies affiliated with Rastlinjaki Gajšek. The third parties referred to in this paragraph have concluded an appropriate data processing agreement with Rastlinjaki Gajšek.

3. Rights of individuals

This article summarises the rights that individuals have in relation to the processor, as laid down by the applicable legislation and these Terms. Some of these rights involve specific features that are not included in this summary and can be found in the Fundamental Legal Bases. Under the conditions laid down by the applicable legislation and these Terms, the individual has the right to (a) access personal data; (b) rectification of personal data; (c) erasure; (d) restriction of processing; (e) object to processing for a specific purpose; (f) data portability; (g) lodge a complaint with a supervisory authority; (h) withdraw consent to processing.

Access

The individual has the right to obtain confirmation as to whether or not personal data are being processed and, where personal data are being processed, the right of access to the personal data together with certain additional information. The additional information comprises details of the purposes of the processing, the categories of personal data being processed and the recipients of the personal data. Provided that this does not adversely affect the rights and freedoms of third parties, Rastlinjaki Gajšek will provide the individual with a copy of their personal data.

Rectification

The individual has the right to have inaccurate personal data rectified and, where appropriate in view of the purpose of the processing, to have incomplete data completed.

Erasure

In certain circumstances, the individual has the right to have their personal data erased without undue delay, namely where (i) the personal data are no longer necessary in relation to the purpose for which they were collected or otherwise processed; (ii) the individual withdraws consent to the processing of personal data processed on the basis of consent; (iii) the individual objects to the processing of personal data for direct marketing purposes based on the legitimate interest of the processor; (iv) the personal data are being processed without an appropriate legal basis. Notwithstanding a request for erasure, Rastlinjaki Gajšek is not obliged to erase personal data where the processing of such personal data is necessary for exercising the right of freedom of expression and information, for compliance with legal obligations, or where processing is necessary for the establishment, exercise or defence of legal claims.

Restriction of processing

The individual has the right to restriction of the processing of personal data in respect of data (i) for which they are exercising the right to rectification, (ii) which are processed without an appropriate legal basis but for which the individual does not request erasure, (iii) where Rastlinjaki Gajšek no longer processes the personal data for the purposes set out in Article 2, but the individual requires such data for the establishment, exercise or defence of legal claims. In these cases, Rastlinjaki Gajšek will store the personal data but will not otherwise process them, except with the individual’s explicit consent or for purposes where processing is necessary for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of overriding public interest.

Objection to processing

The individual has the right to prevent the processing of personal data on grounds relating to their particular situation, but only where the legal basis for processing is the processing of personal data for the performance of a task carried out in the public interest or in the exercise of official authority, or the pursuit of a public interest of Rastlinjaki Gajšek or a third party. In the event of a request to prevent processing, Rastlinjaki Gajšek will cease processing unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the individual, or the purpose of processing is the establishment, exercise or defence of legal claims. The individual has the right to object to the processing of personal data for direct marketing purposes. In such a case, Rastlinjaki Gajšek will immediately cease processing for that purpose. The individual has the right to prevent the processing of personal data on grounds relating to their particular situation also in the case of processing for research, scientific or statistical purposes, unless the processing is necessary for a purpose carried out in the public interest.

Data portability

Where the legal basis for the processing of personal data is the individual’s explicit consent, or where processing is necessary for the performance of contractual obligations between Rastlinjaki Gajšek and the customer or for steps taken in the course of concluding such a contract, and in all such cases the processing is carried out by automated means, the individual has the right to receive their personal data in a structured, commonly used and machine-readable format. This right of the individual does not apply where the exercise of such a right would adversely affect the rights and freedoms of third parties.

Complaint to a supervisory authority

The individual has the right to lodge a complaint with the supervisory authority for personal data protection in the EU Member State in which the individual has their permanent residence or place of work, or with the authority of the state in which the alleged infringement took place.

Withdrawal of explicit consent to the processing of personal data

Where the legal basis for the processing of personal data is the individual’s explicit consent, the individual has the right to withdraw that consent at any time. The withdrawal of consent does not affect the lawfulness of the processing of personal data before its withdrawal, nor does it affect the validity of the explicit consent to the processing of personal data.

4. Legal persons

A customer which is a legal person, sole trader or other organisation that does business with Rastlinjaki Gajšek in its own name, while the actual individual user of the services is a member of such organisation or uses the services on the basis of an authorisation from such organisation (hereinafter: “organisation”), is obliged, when it begins doing business with Rastlinjaki Gajšek, to inform all individuals who use the services of Rastlinjaki Gajšek about these Rules and about the purposes for which Rastlinjaki Gajšek and its contractual processors will process their personal data. The organisation that has concluded a contract with Rastlinjaki Gajšek for the provision of services is, where necessary, obliged to obtain all the necessary consents of the individuals who use the services of Rastlinjaki Gajšek within the organisation and which Rastlinjaki Gajšek needs in order to process personal data in performing the contract. The organisation is thus obliged to obtain the consent of the individual who uses the services of Rastlinjaki Gajšek at the customer for the sending of certain personal data of the individual to the organisation, for the processing of traffic data and location data other than traffic data that are necessary for the provision of additional services, and all other necessary consents. The organisation that is a customer of Rastlinjaki Gajšek services shall provide Rastlinjaki Gajšek with access to all the consents of individuals which Rastlinjaki Gajšek needs in order to process personal data.

5. Contact details for personal data protection

Contact details of Rastlinjaki Gajšek for all requests relating to the protection of individuals’ rights under Article 4 of these Rules.

Email: narocila@rastlinjaki-gajsek.si

Address: Rastlinjaki Gajšek d.o.o., Ljubljanska cesta 37, 2310 Slovenska Bistrica

Any changes to these Terms will be published at www.rastlinjaki-gajsek.si.

Slovenska Bistrica, 1 October 2025