Slovenščina
Privacy Policy
This Privacy Policy governs the collection, storage, and processing of personal data collected by Triglows when you use the website https://www.triglows.eu (hereinafter referred to as the "Website"). A user is any natural or legal person who uses or visits the Website (hereinafter referred to as the "User").
The controller of personal data within the meaning of the EU General Data Protection Regulation (GDPR) and applicable Slovenian data protection legislation is TGW Group, spletna prodaja, Peter Žlof s.p. (hereinafter referred to as the "Controller").
In addition to this Privacy Policy, we kindly ask you to also review our General Terms and Conditions, which govern the business relationship between the User and the Controller, and our Cookie Policy, which explains which cookies we use and for what purposes.
1. Personal Data
Personal data is any information that identifies you as a specific or identifiable individual. An individual is identifiable when they can be directly or indirectly identified, particularly by reference to an identifier such as name, identification number, location data, online identifier, or by one or more factors specific to the individual’s physical, physiological, genetic, mental, economic, cultural, or social identity.
In accordance with the purposes defined in this Privacy Policy, the Controller collects the following personal data:
- name and surname;
- email address;
- phone number;
- information about your use of the Website (IP address, dates and times of visits, visited pages or URLs, time spent on individual pages, total time of website visits, etc.);
- purchase and invoice data (date and place of purchase, items purchased, prices of items, total invoice amount, payment method, shipping address, invoice number and date, the person issuing the invoice, etc.) and data related to product complaint handling;
- data about the operating system, browser used, and browser language;
- other data voluntarily provided by the User when requesting specific services that require such data.
Some data is also collected via cookies. Cookies are small files that are downloaded to your device via your web browser when you access the Website. Cookies help us improve the Website and enhance your user experience. For more details, please refer to our Cookie Policy.
2. Purpose and Legal Basis for Data Processing
The Controller collects and processes your personal data based on your consent (e.g., when placing an order) or where a legal basis or legitimate interest exists for the collection of personal data. All personal data provided to us will be treated confidentially and used solely for the purposes for which it was collected.
By submitting an inquiry or question via the Website, you consent to us responding to your email and to receiving information about our products via email. You can unsubscribe from our emails by contacting us at info@triglows.eu.
If there is a need for further processing of your data for a different purpose, we will contact you in advance and request your prior written consent.
2.1. Processing Based on Legal and Contractual Obligations
Where the provision of personal data is a contractual obligation or a requirement necessary to enter into or perform a contract, or a legal obligation, you are required to provide such data. Failure to do so will prevent us from entering into a contract and delivering products, as we would lack the necessary data to execute the agreement.
2.2. Processing Based on Legitimate Interest
The Controller may process personal data based on legitimate interests, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Where legitimate interests are used, the Controller will always conduct an assessment in accordance with the GDPR.
2.3. Processing Based on Consent
The Controller may also process your personal data for the following purposes, based on your explicit consent:
- sending commercial offers and other content via email where no other legal basis exists and you have consented;
- sending newsletters, if you subscribed to them;
- any other purposes you specifically agree to when engaging with the Controller.
3. Data Recipients
The Controller will not disclose your personal data to unauthorized third parties without your consent.
Please note that certain tasks related to your personal data may be outsourced to our business partners (data processors), who may process data only on our behalf and under a written agreement or legal basis, and strictly for purposes defined in this Privacy Policy. These partners must protect the data appropriately and may not use it for their own purposes.
We may disclose your data to third parties only when necessary to ensure compliance with laws and legal obligations or when required by competent state authorities.
4. Data Retention
The Controller will retain your personal data only as long as necessary to fulfill the purpose for which the data was collected and further processed (e.g., fulfilling your order, verifying payment, fulfilling contractual or legal obligations, etc.).
Personal data processed based on legal obligations will be retained for the period specified by law.
Data processed for the performance of a contract will be retained for the duration of the contract and for 5 years after its termination, except in the event of a dispute. In such cases, data will be retained for 5 years after the final decision of a court or arbitration or, if there is no litigation, 5 years after an amicable resolution.
Data processed based on your consent or the Controller’s legitimate interest will be retained until consent is withdrawn or until the processing is no longer necessary. Data may be deleted earlier if the purpose has been fulfilled or where required by law.
After the retention period, the Controller will permanently delete or anonymize the personal data so that it can no longer be linked to an individual.
5. Links to Third-Party Websites
The Website may contain links to third-party websites. These websites have their own privacy policies, for which the Controller accepts no responsibility.
6. Data Subject Rights
If you have any questions regarding this Privacy Policy or the processing of your personal data, please feel free to contact us at info@triglows.eu. We will respond in writing in accordance with applicable legislation.
Under the GDPR, you have the following rights:
- Right to withdraw consent: You may withdraw your consent to the processing of your personal data at any time, without affecting the lawfulness of processing based on consent before its withdrawal. You can withdraw consent in writing by contacting the Controller via the contact information provided on the Website.
- Right of access: You have the right to request confirmation of whether your personal data is being processed, and if so, to access that data and receive related information.
- Right to rectification: You have the right to request that inaccurate or incomplete data be corrected or completed.
- Right to erasure ("right to be forgotten"): You may request that your personal data be deleted without undue delay in certain cases, such as when data is no longer necessary for the purpose for which it was collected, consent is withdrawn, or the processing was unlawful.
- Right to restrict processing: You may request restriction of processing under certain conditions, e.g., if you contest the accuracy of the data or object to processing.
- Right to data portability: You have the right to receive the personal data you provided to the Controller in a structured, commonly used, and machine-readable format...
- Right to data portability: You have the right to receive the personal data that you provided to the Controller in a structured, commonly used, and machine-readable format, and you have the right to transmit that data to another controller without hindrance, where the processing is based on your consent or a contract and the processing is carried out by automated means.
- Right to object: You may object at any time to the processing of your personal data when such processing is based on the Controller’s legitimate interest. In such cases, the Controller will stop processing unless it demonstrates compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
- Right not to be subject to automated decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, if such decision produces legal effects concerning you or significantly affects you in a similar way.
- Right to lodge a complaint with a supervisory authority: If you believe that your rights regarding the processing of your personal data have been violated, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement. In Slovenia, the competent authority is the Information Commissioner (https://www.ip-rs.si/).
7. How We Protect Your Data
The Controller is committed to protecting your personal data. We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
8. Changes to the Privacy Policy
The Controller reserves the right to update or amend this Privacy Policy at any time. The updated version will be published on the Website and will apply from the date of publication. We recommend that you regularly check this page to stay informed about how we are protecting your personal data.
9. Contact
If you have any questions or would like to exercise any of your rights, you can contact us at:
TGW Group, spletna prodaja, Peter Žlof s.p.
Email: info@triglows.eu
Website: https://www.triglows.eu