{"id":408,"date":"2026-09-07T09:14:25","date_gmt":"2026-09-07T09:14:25","guid":{"rendered":"https:\/\/newprima.estorly.com\/politika-zasebnosti\/"},"modified":"2026-09-07T09:27:34","modified_gmt":"2026-09-07T09:27:34","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/prima-ip.si\/en\/politika-zasebnosti\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"<main id='bde-main'><section class=\"bde-f-container-408-108 bde-f-container section pagehero herotop\"><div class=\"bde-f-container-408-107 bde-f-container wrap\"><div class=\"bde-f-container-408-106 bde-f-container pagehero__grid\"><div class=\"bde-f-container-408-103 bde-f-container pagehero__copy\"><p class=\"bde-f-text-408-100 bde-f-text eyebrow\">\nPrima IP\n<\/p><h1 class=\"bde-f-text-408-101 bde-f-text\">\nPrivacy policy\n<\/h1><p class=\"bde-f-text-408-102 bde-f-text\">\nAt Prima IP, we value your privacy, which is why we always protect your data carefully.\n<\/p><\/div><div class=\"bde-f-container-408-105 bde-f-container pagehero__media herodots\"><div class=\"bde-f-svg-icon2-408-104 bde-f-svg-icon2 kon1-il3\">\n<svg viewbox=\"0 0 371 234\" fill=\"none\" aria-hidden=\"true\"><circle cx=\"63\" cy=\"151\" r=\"63\" fill=\"#0096C3\"><\/circle><circle cx=\"184\" cy=\"194\" r=\"40\" fill=\"#E9F4F8\"><\/circle><circle cx=\"309\" cy=\"62\" r=\"62\" fill=\"#76B82A\"><\/circle><\/svg>\n<\/div><\/div><\/div><\/div><\/section><section class=\"bde-f-container-408-112 bde-f-container section\"><div class=\"bde-f-container-408-111 bde-f-container wrap\"><div class=\"bde-f-container-408-110 bde-f-container legal\"><div class=\"bde-f-rich-text-408-113 bde-f-rich-text\">\n<p>The purpose of this privacy policy (hereinafter \u2018the policy\u2019) is to inform customers, potential customers and visitors to the PRIMA IP websites of the purposes and legal basis for the processing of personal data.<\/p>\n<p>PRIMA IP invalidsko podjetje d.o.o., Brn\u010di\u010deva ulica 31, 1231 Ljubljana \u2013 \u010crnu\u010de, Slovenia, email info@prima-ip.si (hereinafter \u2018PRIMA IP\u2019, \u2018the provider\u2019 or \u2018the controller\u2019) safeguards your personal data at all times in the course of its business.<\/p>\n<p>At Prima IP, we value your privacy, which is why we always protect your data carefully. This privacy policy may be amended or supplemented at any time without prior warning or notice. By using the provider\u2019s websites after an amendment or supplement, the individual confirms that they agree to the amendments and supplements.<\/p>\n<p>All our activities relating to the processing of personal data comply with the applicable European legislation (in particular Regulation (EU) 2016\/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation or GDPR) and the Council of Europe conventions (ETS No. 108, ETS No. 181, ETS No. 185, ETS No. 189)) and the national legislation of the Republic of Slovenia (the Personal Data Protection Act (ZVOP-1, Official Gazette of the Republic of Slovenia, No. 94\/07), the Electronic Commerce Market Act (ZEPT, Official Gazette of the Republic of Slovenia, Nos. 96\/09 and 19\/15), etc.).<\/p>\n<p>This privacy policy covers the handling of personal data that PRIMA IP obtains from you when you visit and use the PRIMA IP websites or provide it to us in any other way.<\/p>\n<h2>Controller and data protection officer<\/h2>\n<p>The controller of personal data is PRIMA IP invalidsko podjetje d.o.o., Brn\u010di\u010deva ulica 31, 1231 Ljubljana \u2013 \u010crnu\u010de, Slovenia.<\/p>\n<h2>Key terms<\/h2>\n<ul><li class=\"translation-block\"><strong>Personal data<\/strong> means any information on the basis of which an individual can be identified (e.g. first name, surname, email address, telephone number, etc.).<\/li><li class=\"translation-block\"><strong>Controller<\/strong> means the legal person that determines the purposes and means of the processing of your personal data.<\/li><li class=\"translation-block\"><strong>Processor<\/strong> means a legal or natural person that processes personal data on behalf of the controller.<\/li><li class=\"translation-block\"><strong>Processing<\/strong> means the collection, storage, access and all other forms of use of personal data.<\/li><li class=\"translation-block\"><strong>EEA<\/strong> means the European Economic Area, which comprises all Member States of the European Union, Iceland, Norway and Liechtenstein.<\/li><\/ul>\n<h2>Personal data<\/h2>\n<p>Personal data is any information relating to you as an identified or identifiable individual. An individual is identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that individual.<\/p>\n<p>In accordance with the purposes set out later in this policy, the provider collects the following personal data:<\/p>\n<ul><li>Basic user data (first name and surname, residential address, date of birth, location).<\/li><li>Contact details and data on your communication with the controller (email address, telephone number, date, time and content of postal or email communication, date, time and duration of telephone calls, recordings of telephone calls).<\/li><li>Channel and campaign \u2013 how the member was acquired or the source through which the user came into contact with the controller (website and advertising campaign or promotion, call centre, physical shop).<\/li><li>Data on the user\u2019s purchases and invoices issued (date and place of purchase, items purchased, prices of items purchased, total purchase amount, payment method, delivery address, invoice number and date of issue, identifier of the person who issued the invoice, etc.) and data on the handling of product complaints.<\/li><li>Data on the user\u2019s use of the controller\u2019s website (dates and times of visits to the website, pages or URLs visited, time spent on each page, number of pages visited, total time spent on the website, settings made on the website) and data on the use of messages received from the controller (email, SMS).<\/li><li>Personal data that the user provides voluntarily by completing forms, for example in prize draws or when using configurators to identify the best products for the user\u2019s needs.<\/li><li>Other data that the user provides voluntarily to the provider when requesting certain services, insofar as such data is necessary to provide the service. The provider does not collect or process your personal data unless you allow it or consent to it, for example through the use of the website, when ordering products or services, subscribing to the e-newsletter, taking part in a prize draw, etc. The provider also processes your data where there is a statutory or contractual basis for collecting personal data, or where the provider has a legitimate interest in processing it.<\/li><\/ul>\n<p class=\"translation-block\">We also obtain your personal data through the use of cookies on our website. You can read more about the use of cookies <a href=\"\/en\/cookie-policy\/\">here<\/a>.<\/p>\n<p>The provider collects only the personal data that is adequate and necessary to fulfil the purposes for which it is processed.<\/p>\n<p>The period for which the provider keeps the data collected is set out in more detail in the Retention of personal data section of this policy.<\/p>\n<h2>Legal basis for data processing<\/h2>\n<p>The provider collects and processes your personal data on the following legal bases:<\/p>\n<ul><li>Processing based on law<\/li><li>Processing based on a contract<\/li><li>Processing based on the individual\u2019s consent<\/li><li>Processing based on legitimate interest<\/li><\/ul>\n<h2>Processing based on a contract<\/h2>\n<p>We need your data where this is necessary for concluding a contract and for performing and fulfilling contractual obligations. Providing personal data is voluntary in this case. If you do not provide your personal data, you cannot conclude a contract with the provider, and the provider cannot provide services or deliver products to you.<\/p>\n<h2>Processing based on consent given<\/h2>\n<p>We process your data when you give us your explicit consent to do so. Where processing is based on consent, we will first make sure that you have all the information you need to make your decision. You can withdraw your consent at any time. If you withdraw your consent, the provider will not be able to provide certain services to you.<\/p>\n<h2>Processing based on legitimate interest<\/h2>\n<p>The provider may also process data on the basis of the legitimate interests pursued by the provider, except where such interests are overridden by the interests or fundamental rights and freedoms of the individual to whom the personal data relates, which require the protection of personal data. Where legitimate interest is relied upon, the provider always carries out an assessment in accordance with the General Data Protection Regulation.<\/p>\n<p>Where processing is based on legitimate interest, the user has the right to object.<\/p>\n<p>You can read more about your rights later in this policy.<\/p>\n<h2>Processing based on law<\/h2>\n<p>We process your personal data where such processing is required by legislation that is binding on us (e.g. tax legislation requires invoices issued to be retained). We process this personal data in accordance with the requirements of the legislation.<\/p>\n<h2>Purposes of processing personal data<\/h2>\n<p>The provider collects and processes your personal data for the following purposes:<\/p>\n<ul><li>Communicating with you regarding the provision of our services and responding to your enquiries.<\/li><li>Concluding contracts and fulfilling the obligations arising from them.<\/li><li>Direct communication with customers about special offers, discounts and other content by email.<\/li><li>General statistical processing of data on customers and their orders and on potential customers (contacts) for the purposes of internal analysis of sales, repeat purchases, aggregate customer behaviour, advertising optimisation and business optimisation.<\/li><li>Automated email communication with the user when they have started the online purchasing process.<\/li><\/ul>\n<h2>Retention of personal data<\/h2>\n<p>The provider will retain your personal data only for as long as is necessary to fulfil the purpose for which the personal data was collected.<\/p>\n<p>Personal data that the provider processes on the basis of law is retained for the period prescribed by law.<\/p>\n<p>Personal data that the provider processes in order to perform a contractual relationship with an individual is retained for the period necessary to perform the contract and for 5 years after its termination, except in cases where a dispute arises between you and the provider in connection with the contract; in that case, the provider retains the data for 5 years after the court or arbitration decision or settlement becomes final or, if there was no court dispute, for 5 years from the date of the amicable settlement of the dispute.<\/p>\n<p>Personal data that the provider processes on the basis of the individual\u2019s consent is retained indefinitely, until the individual withdraws that consent. The provider deletes such data before consent is withdrawn only if the purpose of processing the personal data has already been achieved. After the retention period has expired, the controller effectively and permanently deletes or anonymises the personal data so that it can no longer be linked to a specific individual.<\/p>\n<h2>Processing by contractual processors<\/h2>\n<p>The provider may entrust certain tasks relating to the processing of your data to other persons (contractual processors). Contractual processors may process the data entrusted to them only on behalf of the provider, within the limits of the provider\u2019s authorisation (in a written contract or other legal act) and in accordance with the purposes set out in this privacy policy.<\/p>\n<p>The contractual processors with which the provider cooperates are:<\/p>\n<ul><li>accounting services; law firms and other providers of legal advice;<\/li><li>providers of data processing and analytics;<\/li><li>IT system maintenance providers;<\/li><li>email service providers (e.g. Mailchimp and others);<\/li><li>payment system providers, such as Adyen, PayPal, PayU, Klarna, Sofort, Multibanco, Dotpay and others;<\/li><li>customer relationship management system providers (e.g. Microsoft);<\/li><li>online advertising solution providers (e.g. Google, Facebook).<\/li><\/ul>\n<p>The provider will not disclose your personal data to unauthorised third parties. Contractual processors may process personal data only in accordance with the controller\u2019s instructions and may not use the personal data to pursue any interests of their own. The controller and the recipients of personal data do not transfer personal data to third countries (outside the Member States of the European Economic Area \u2013 the EU Member States plus Iceland, Norway and Liechtenstein) or to international organisations, except to the USA \u2013 all contractual processors in the USA are included in the Privacy Shield programme.<\/p>\n<h2>Freedom of choice<\/h2>\n<p>You control the information you provide about yourself. If you decide not to provide your data to the provider, we will not be able to provide certain services to you.<\/p>\n<p>If you wish to unsubscribe from the PRIMA IP e-newsletter, please let us know at info@prima-ip.si.<\/p>\n<p>If your personal data changes (postcode, email address, physical address, telephone number), please notify us of the changes at info@prima-ip.si.<\/p>\n<h2>Automatic logging of information (non-personal data)<\/h2>\n<p>Whenever you access the website, general, non-personal data (number of visits, average time spent on the website, pages visited) is logged automatically (not as part of a registration). We use this information to measure the appeal of our website and to improve its content and usability. Your data is not processed further and is not passed on to third parties.<\/p>\n<h2>Cookies<\/h2>\n<p>Cookies are small, unobtrusive files that are temporarily stored on your hard drive and allow the provider to recognise your computer the next time you visit the website. The provider uses cookies only to collect information relating to the use of the website and to optimise its online advertising activities.<\/p>\n<p class=\"translation-block\">Advertising cookies track an individual\u2019s use of the provider\u2019s website unless the individual does not agree to the use of cookies on the site. You can read more about cookies and their use <a href=\"\/en\/cookie-policy\/\">here<\/a>.<\/p>\n<h2>Security<\/h2>\n<p>The provider makes every effort to ensure the security of personal data. Your data is protected at all times against loss, destruction, falsification, manipulation and unauthorised access or unauthorised disclosure.<\/p>\n<p>To protect personal data, we implement organisational and technical measures such as:<\/p>\n<ul><li>staff training;<\/li><li>supervision of staff and regular reviews of the work of individual employees;<\/li><li>careful selection and supervision of contractual processors;<\/li><li>backup of electronically stored data;<\/li><li>regular maintenance and updating of computer equipment;<\/li><li>adoption of appropriate internal rules and instructions on the protection of personal data.<\/li><\/ul>\n<h2>Individuals\u2019 rights regarding data processing<\/h2>\n<p>If you have any questions about our personal data protection policy or the processing of your personal data, you can contact us at any time. Write to us at info@prima-ip.si or call us on +386 (0)1 53 03 280. On the basis of your request, we will send you the requested data or (in accordance with the law) ensure that your rights are exercised.<\/p>\n<p>You have the following rights in relation to processing:<\/p>\n<p class=\"translation-block\"><strong>Right to withdraw consent:<\/strong> if, as an individual, you have consented to the processing of your personal data (for one or more specific purposes), you have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.<\/p>\n<p>Consent can be withdrawn by a written statement sent to the controller using one of the contact details listed on the website https:\/\/prima-ip.si\/.<\/p>\n<p>Withdrawing consent to the processing of personal data has no negative consequences or sanctions for the individual. However, after consent to the processing of personal data has been withdrawn, the controller may no longer be able to provide one or more of its services to the individual, where these are services that cannot be provided without personal data (e.g. a loyalty club or personalised notifications).<\/p>\n<p class=\"translation-block\"><strong>Right of access to personal data:<\/strong> as an individual, you have the right to obtain from the provider (the controller) confirmation as to whether personal data concerning you is being processed and, where that is the case, access to the personal data and certain information (on the purposes of processing, the categories of personal data, the recipients, the retention periods or the criteria for determining them, the existence of the right to rectification or erasure of data, the right to restriction of and objection to processing and the right to lodge a complaint with a supervisory authority, the source of the data if it was not collected from you, the existence of automated decision-making, including profiling, the logic involved, and the significance and consequences of such processing for you, and other information in accordance with Article 15 GDPR).<\/p>\n<p class=\"translation-block\"><strong>Right to rectification of personal data:<\/strong> as an individual, you have the right to have the provider rectify inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete data completed, including by means of a supplementary statement.<\/p>\n<p class=\"translation-block\"><strong>Right to erasure of personal data (\u2018right to be forgotten\u2019):<\/strong> as an individual, you have the right to have the provider erase personal data concerning you without undue delay, and the provider must erase the data without undue delay where one of the following grounds applies:<\/p>\n<ul><li>the data is no longer necessary for the purposes for which it was collected or otherwise processed,<\/li><li>you withdraw your consent and there is no other legal basis for the processing,<\/li><li>you object to the processing and there are no overriding legitimate grounds for the processing,<\/li><li>the data has been processed unlawfully,<\/li><li>the data must be erased to comply with a legal obligation under EU law or the law of a Member State to which the provider is subject,<\/li><li>the data was collected in relation to the offer of information society services.<\/li><\/ul>\n<p>However, in certain cases described in Article 17(3) GDPR, as an individual you do not have the right to erasure of data.<\/p>\n<p class=\"translation-block\"><strong>Right to restriction of processing:<\/strong> as an individual, you have the right to have the provider restrict processing where one of the following applies:<\/p>\n<ul><li>you contest the accuracy of the data, for a period enabling the provider to verify the accuracy of the data,<\/li><li>the processing is unlawful and you oppose the erasure of the data and request the restriction of its use instead,<\/li><li>the provider no longer needs the data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims,<\/li><li>you have objected to the processing, pending verification of whether the provider\u2019s legitimate grounds override yours.<\/li><\/ul>\n<p class=\"translation-block\"><strong>Right to data portability:<\/strong> as an individual, you have the right to receive the personal data concerning you that you have provided to the provider in a structured, commonly used and machine-readable format, and the right to transmit that data to another controller without hindrance from the provider to which the personal data has been provided, where:<\/p>\n<ul><li>the processing is based on consent or on a contract, and<\/li><li>the processing is carried out by automated means.<\/li><\/ul>\n<p>In exercising your right to data portability, as an individual you have the right to have the personal data transmitted directly from one controller (the provider) to another, where technically feasible.<\/p>\n<p class=\"translation-block\"><strong>Right to object to processing:<\/strong> as an individual, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the provider (point (e) of Article 6(1) GDPR) or which is necessary for the purposes of the legitimate interests pursued by the provider or by a third party (point (f) of Article 6(1) GDPR), including profiling based on those provisions; the provider shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.<\/p>\n<p>Where personal data is processed for direct marketing purposes, the individual has the right to object at any time to the processing of data concerning them for such marketing, which includes profiling to the extent that it is related to such direct marketing; where the individual objects to processing for direct marketing purposes, the data shall no longer be processed for such purposes.<\/p>\n<p>Where data is processed for scientific or historical research purposes or statistical purposes, the individual has the right, on grounds relating to their particular situation, to object to the processing of data concerning them, unless the processing is necessary for the performance of a task carried out for reasons of public interest.<\/p>\n<p class=\"translation-block\"><strong>Right to lodge a complaint with a supervisory authority:<\/strong> without prejudice to any other (administrative or other) remedy, as an individual you have the right to lodge a complaint with a supervisory authority, in particular in the country of your habitual residence, place of work or place of the alleged infringement (in Slovenia, this is the Information Commissioner), if you consider that the processing of personal data relating to you infringes data protection regulations.<\/p>\n<p>Without prejudice to any other (administrative or non-judicial) remedy, as an individual you have the right to an effective judicial remedy against a legally binding decision of a supervisory authority concerning you, and also where the supervisory authority does not handle your complaint or does not inform you within three months of the progress or outcome of the complaint. Proceedings against a supervisory authority shall be brought before the courts of the Member State where the supervisory authority is established.<\/p>\n<p>The individual may address all requests concerning the exercise of rights relating to personal data in writing to the controller, using one of the contact details listed on the website https:\/\/prima-ip.si\/.<\/p>\n<p>For the purposes of reliable identification when rights relating to personal data are exercised, the controller may request additional information from the individual, and may refuse to act only if it demonstrates that it cannot reliably identify the individual.<\/p>\n<p>The controller must respond to an individual\u2019s request to exercise their rights relating to personal data without undue delay and at the latest within one month of receiving the request.<\/p>\n<h2>Notification of a personal data breach to the supervisory authority<\/h2>\n<p>In the event of a personal data breach, the provider is obliged to notify the competent supervisory authority, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals. Where there is a suspicion that a criminal offence has been committed in connection with the breach, the provider is obliged to notify the police and\/or the competent public prosecutor\u2019s office.<\/p>\n<p>Where a breach is likely to result in a high risk to the rights and freedoms of individuals, the provider is obliged to notify the individuals to whom the personal data relates immediately or, where this is not possible, without undue delay. The notification to the individual must be made in clear and plain language.<\/p>\n<h2>Access to social networks<\/h2>\n<p>Through our website, you can access the following plug-ins that the provider uses in its operations:<\/p>\n<ul><li>Facebook<\/li><li>Instagram<\/li><li>YouTube<\/li><\/ul>\n<p>Each of these social networks provides its services in accordance with its own terms of use and privacy policies. PRIMA IP accepts no responsibility in connection with the use of social networks to which it provides access through its website. Questions and the exercise of rights must be addressed to the individual social network.<\/p>\n<p>The privacy policies are available at the links below:<\/p>\n<ul><li class=\"translation-block\">Instagram: <a href=\"https:\/\/help.instagram.com\/519522125107875\">https:\/\/help.instagram.com\/519522125107875<\/a><\/li><li class=\"translation-block\">Facebook: <a href=\"https:\/\/www.facebook.com\/about\/privacy\/\">https:\/\/www.facebook.com\/about\/privacy\/<\/a><\/li><li class=\"translation-block\">YouTube: <a href=\"https:\/\/policies.google.com\/privacy?hl=sl\">https:\/\/policies.google.com\/privacy?hl=en<\/a><\/li><\/ul>\n<h2>Publication of changes<\/h2>\n<p>Any changes to our personal data protection policy will be published on this website.<\/p>\n<p>Last updated: 8 August 2023<\/p>\n<\/div><\/div><\/div><\/section><\/main>","protected":false},"excerpt":{"rendered":"<p>Prima IP Politika zasebnosti V podjetju Prima IP cenimo va\u0161o zasebnost, zato va\u0161e podatke vedno skrbno varujemo. Namen politike zasebnosti (v nadaljevanju: politika) je seznanitev kupcev, potencialnih kupcev ali obiskovalcev spletnih mest PRIMA IP z nameni in pravno podlago za obdelavo osebnih podatkov. Dru\u017eba PRIMA IP invalidsko podjetje d.o.o., Brn\u010di\u010deva ulica 31, 1231 Ljubljana \u2013 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_breakdance_hide_in_design_set":false,"_breakdance_tags":"","iawp_total_views":12,"footnotes":""},"class_list":["post-408","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/prima-ip.si\/en\/wp-json\/wp\/v2\/pages\/408","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prima-ip.si\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/prima-ip.si\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/prima-ip.si\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prima-ip.si\/en\/wp-json\/wp\/v2\/comments?post=408"}],"version-history":[{"count":3,"href":"https:\/\/prima-ip.si\/en\/wp-json\/wp\/v2\/pages\/408\/revisions"}],"predecessor-version":[{"id":417,"href":"https:\/\/prima-ip.si\/en\/wp-json\/wp\/v2\/pages\/408\/revisions\/417"}],"wp:attachment":[{"href":"https:\/\/prima-ip.si\/en\/wp-json\/wp\/v2\/media?parent=408"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}