Our website address is: https://nolli.eu.

Application of the Personal Data Protection Regulation

This Personal Data Protection Policy (” Policy“) applies to all Users of the Website as defined in the Terms of Use.

In the Terms and Conditions, the terms User (also referred to as an individual), Provider (also referred to as the Operator) and Website shall have the same meanings as in the Terms and Conditions. The Regulations may be amended, revised or supplemented at any time and without prior notice.

By using the Website after changes, revisions or updates, the User confirms that he/she accepts the changes, revisions and updates.

Controller of personal data

Data about the controller of the personal data: ZDRAVA PREHRANA, SVETOVANJE IN POSREDNIŠTVO GREGOR FAGANEL S.P.

ID: 73083488

Prvačina 135d, 5297 Prvačina.

The controller shall ensure the protection of your personal data and provide adequate protection against any action that may compromise it. The controller determines the purposes and means of the processing of personal data and therefore, pursuant to Article 26. Article 2 of the GDPR shall be considered as the controller, whereby the data subject exercises his or her rights in accordance with the provisions of the GDPR.

Types of data processed, transmission of data and retention period

The Controller collects and processes the following personal data about Users:

• first and last name;
• address and country of residence
• phone number;
• email address;
• the dates and times of the online check-in;
• bank account number (IBAN, SWIFT);
• delivery address;
• information on purchases (items, prices, total value of the order, date of purchase, date of dispatch of the items, date of receipt of the items, date of cancellation, date of return of the items, date of refund of payment, etc.) and on invoices issued;
• other information that the user voluntarily enters in the forms on the website and voluntarily sends to the provider.

The Provider shall not be liable for the correctness, completeness and up-to-dateness of the data entered by the Users.

Personal data will be kept for as long as necessary to fulfil the purpose or until revocation.

Purpose of data processing, legal basis and safeguards

The Provider uses the collected User Data for the following purposes:

• statistical, marketing and other analysis and research;
• processing the user’s orders and purchases on the website;
• enforcing contracts;
• meeting other contractual obligations and the requirements of consumer protection laws;
• meeting the requirements of tax law;
• communication with Users;
• sending from time to time advertising or non-advertising, and educational content of electronic messages related to the Website or any of the Provider’s activities;

The controller must have an appropriate legal basis for any processing. The controller processes the data of individuals either for the performance of a contract, on the basis of the data subject’s consent or for the fulfilment of the controller’s legal obligations.

The User agrees that the Provider may assign certain tasks related to the User’s data to third parties (contractual data processors) by means of a written contract. Contract processors process personal data only within the scope of the authorisations received and only for the purposes indicated. The controller has concluded a contract for the processing of personal data with the contractual processors, by which they undertake to provide sufficient guarantees for the implementation of appropriate technical and organisational measures.

Use of cookies

Cookies are used by the Provider to enable the use and operation of the Website, to detect and correct errors and to help collect information about the User’s browsing on the Website.

Cookies are small files sent from the Website to the User’s browser, which are stored on a storage medium (usually the hard drive) of the User’s electronic device (computer, smartphone, etc.) while the User is browsing the Website. The next time the User visits the Website, the Website may access the data stored in the cookie and inform the Website of the User’s past activity.

The Provider collects information by means of cookies in a way that does not identify the individual user.

The Provider uses its own cookies (own cookies), but allows certain third parties to set their own cookies (third party cookies).

Personal data collected on the basis of your explicit consent will be stored in an electronic database of personal data.
We may keep the personal data collected in the database until your consent is withdrawn or for as long as necessary to achieve the purpose for which your personal data is processed.
All personal data bases will be carefully protected.

Information about specific cookies, their controllers, the purposes of the processing of the data collected by cookies and the duration of the cookies are set out and defined in the document below.

Individual rights

The data subject may send a request to info@nolli.eu to obtain the controller’s confirmation as to whether the controller processes the personal data concerning him or her.

The data subject may send a request to info@nolli.eu for the controller to provide him or her with a copy of his or her personal data processed.

The data subject may send a request to the email address info@nolli.eu for the controller to rectify, without undue delay, any inaccurate personal data concerning him or her or to complete any incomplete personal data.

The data subject may send a request to the email address info@nolli.eu for the controller to permanently erase all data relating to him or her, under the conditions set out in Article 17. Article 2 of the General Data Protection Regulation, except those which the controller is required by law to keep.

The data subject may send a request to the email address info@nolli.eu for the controller to restrict processing where one of the following applies, subject to the conditions set out in Article 18. Article 2 of the General Data Protection Regulation.

The data subject may object to automated decision-making and profiling concerning personal data concerning him or her by sending an e-mail to info@nolli.eu.

If you have any questions about the processing of your personal data, you can contact the controller at info@nolli.eu.

VII. Right to lodge complaints:

You can lodge a complaint with the Information Commissioner (address: Dunajska 22, 1000 Ljubljana, e-mail: gp.ip@ip-rs.si, telephone: 012309730 or via the website: https://www.ip-rs.si/.

Exclusion of liability

The Provider shall not be liable for any damages suffered by the User as a result of providing false, inaccurate or incomplete information when registering or visiting or using the Website.

If for any reason the exclusion of liability is void or unenforceable, the Provider’s liability shall be limited to the maximum extent permitted by law.

Final provisions

If any provision of the Regulations is invalid for any reason, such invalidity shall not affect the remaining provisions of the Regulations. In such a case, the invalid provision shall be deemed not to exist and the Regulations shall apply without such provision.

Any legal relationship between the User and the Provider based on the Regulations shall be governed by and judged in accordance with the laws of the Republic of Slovenia, and the courts of the Republic of Slovenia shall have exclusive jurisdiction to adjudicate any disputes or disagreements arising out of or related to the Regulations.

Comments

When visitors leave comments on the website, we collect the information displayed in the comment form, as well as the IP address and user agent string of the browser, to help detect spam.

An anonymised string generated from your email address (also called a hash) may be passed to Gravatar to check whether you are using it. The Gravatar Privacy Policy is available here: https://automattic.com/privacy/. Once your comment has been approved, your profile picture is visible to the public in the context of your comment.

Media files

If you upload images to a website, avoid uploading images with embedded location data (EXIF GPS). Visitors to the website can download and extract any location data from the images on the website.

Cookies Suggested text: If you leave a comment on our website, you can choose to save your name, email address and website in cookies. This is for your convenience, so you don’t have to re-enter your details when you leave another comment. These cookies will be valid for one year.

If you visit our login page, we will set a temporary cookie to determine whether your browser accepts cookies. This cookie does not contain personal data and is discarded when you close your browser.

When you log in, we will also set more cookies to store your login details and your screen display choices. Cookies for login are valid for two days and cookies for screen options are valid for one year. If you select the “Remember me” option, your registration will be valid for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be stored in your browser. This cookie does not contain any personal data and simply indicates the publication ID of the article you have just edited. Expires after 1 day.

Embedded content from other websites

Articles on this website may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the same way as if the visitor had visited another website.

These websites may collect information about you, use cookies, embed additional third party tracking and monitor your interaction with this embedded content, including tracking your interaction with this embedded content if you have an account and are logged in to this website.

Who we share your data with

If you request a password reset, your IP address will be included in the reset email.

How long we keep your data

If you leave a comment, the comment and its metadata are stored indefinitely. We do this so that we can automatically identify and approve any further comments, rather than waiting in a queue for approval.

What rights do you have over your data?

If you have an account on this website or have left comments, you can request an export file of the personal data we hold about you, including any information you have provided. You can also request that we delete any personal data we hold about you. This does not include data that we are obliged to keep for administrative, legal or security reasons.

Where your data is sent

Visitor comments can be checked via an automated detection service

Entry into force: 1.9.2023