Privacy Policy

The purpose of this Privacy Policy is to inform users (hereinafter also referred to as “the individual”) of the https://promo.slopehelper.com/ website (hereinafter collectively referred to as “the website”) that, whenever you visit the website, you may provide us with information that could directly or indirectly identify you as an individual (personal data), and we would therefore like to explain how we will collect, process, store and protect this personal data, as well as inform you of your rights in relation to your personal data.

We collect, process, store and protect personal data in accordance with the applicable legislation defining the protection of personal data, in particular in accordance with the law governing the protection of personal data, the law governing electronic communications and the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC; hereinafter: GDPR).

1) Controller of personal data

The controller of your personal data is: PeK Automotive d.o.o., Obrtniška ulica 17, 1370 Logatec
Registration number: 8451273000
Tax code: SI 41693744
Telephone: +386 30 777 050
E-mail: legal@pekauto
The controller does not have a Data Protection Officer. If you have any questions regarding the processing of your personal data, you can contact us by telephone or by email listed above.

2) How we obtain your personal data

We process and collect personal data if you provide it to us or we obtain it from your visit to the website when:

you use or visit our website, we obtain personal data through cookies or other technologies;
you sign up for our newsletter;
contact us through various channels (including social media);
send an inquiry or enter into a contract with us;
similar cases where you have chosen to provide us with your personal data.

3) Types of personal data, purposes of processing your personal data and legal basis

Any personal data you provide to us will be treated confidentially and will only be used for the purposes for which we obtained it. If there is a need to further process your personal data for another purpose, we will contact you and request for your consent.

How we obtain your personal data and what personal data we process
(1) When you visit our website:

We obtain the following information: this is technical information that we automatically collect when you use our website. This information may include, but is no limited to, device data, log data, web requests, data sent in response to such requests, browser type, browser language, timestamp for the request, and other anonymous statistics related to the use of our website. This information, by itself, cannot be used to identify or contact you. However, if we automatically combine this information with other, non-personal information, we will treat the combined information as personal information in accordance with our Privacy Policy. We obtain this information through use of cookies and other technologies (more details about cookies and other technologies we use are set out below). With your consent, in accordance with point (a) of the first paragraph of Article 6 GDPR, we also use analytical tools, retargeting tools and plug-ins and cookies, as described in the Cookies section.

Until you provide your personal data (such as your name, email address, etc.), any data that we automatically collect when you use the website remains anonymous data through which we cannot and do not identify you.

2) When you fill in the contact forms on our website:
For the purposes of conducting our business, sending you an offer based on an inquiry received, recruitment purposes, newsletter sign-up, we collect the following personal data:

name and surname, address, and place of residence;
email address;
telephone number;
any other personal data that you, as a user, voluntarily enter in the form on the website or provide to us by e-mail or telephone.

Legal bases and purposes for processing personal data:

We only process your personal data:
based on your prior consent (Article 6 (1) (a) GDPR);

if the processing is necessary for the performance of our contractual obligations towards you or for us to take steps at the request of you prior to entering into a contract (Article 6 (1) (b) GDPR);
if the processing is necessary for compliance with legal obligations (Article 6 (1) (c) GDPR);
if the processing is necessary for our legitimate interests (Article 6 (1) (f) GDPR).

On the basis of the last point, we take care to ensure that your interests or fundamental rights and freedoms are not unduly affected. Examples of processing based on legitimate interests include:

optimizing the website;
answering questions you send us through various channels (including social media);
ensuring the security of IT systems;
preventing abuse and/or fraud.

4) Transfers of personal data to third parties (users of personal data) and to third countries

We may share your personal data with third parties only as set out in our Privacy Policy:

With our service providers, business partners and contractors: These entities provide services on our behalf or support our business operations. All third parties comply with the requirements outlined in our Privacy Policy and we have entered into appropriate data processing agreements with them. We will disclose your personal data where necessary to fulfill our obligations to you, and only to the minimum extent possible. Cookies and other technologies allow us, among other things, to use certain functions and share content on social networks. Using only this may result in the transmission of personal data to service providers located in the United States.
With law enforcement authorities: We may report to law enforcement authorities any practices that we reasonably believe to be unlawful or that we reasonably believe may assist law enforcement investigations against unlawful activity. Additionally, we reserve the right to disclose your personal information to law enforcement authorities if we determine, in our sole discretion, that you are in violation of our policies or if the release of your personal information may protect the rights, property, or safety of us or another person. We will only disclose personal information that is lawfully requested by law enforcement authorities on a case-by-case, specific basis;
When required by law: We may disclose your personal information when required to do so by law, regulation or official order, to protect the safety of any person from death or serious bodily injury, to prevent fraud or abuse of our products and/or services or users, or to protect our right to property. We will disclose personal information to government officials or third parties pursuant to court judgments or decisions of administrative authorities or other binding act. We will only disclose personal information that is required by the aforementioned authorities on a case-by-case basis on a lawful or lawfully obtained basis.

We do not transfer the personal data collected to other third parties or to third countries without an adequate level of protection.

5) Consent of a minor

We are committed to protecting children’s online privacy and internet safety. We do not offer goods and services to children, nor do we knowingly collect or solicit personal information from children under the age of 15.

If we receive communications that we reasonably and intelligently believe to be from a child under the age of 15, we will not retain them. We encourage parents or guardians of children under the age of 15 to regularly check and monitor their children’s use of email and other online activities. We use all available technology and make every effort to verify that the person with parental responsibility for the child has given or approved consent.

6) Automated decision-making and profiling

Individuals’ personal data is not subject to automated decision-making, nor are they subject to profiling.

7) Data protection

We are committed to protecting your personal data and have implemented appropriate security measures to guard against unauthorized access, alteration, disclosure, or destruction of data. These measures include internal reviews of our data collection, storage, and processing practices. We restrict access to personal information to our employees, service providers, and representatives who need to know it to develop or improve our services.

Please be aware that our website provides links to other websites that are not owned or operated by us. Your use of these third-party services is entirely optional. We are not responsible for the content or practices of third parties.

8) Information on the rights of the individual

You have the right to:

withdraw consent to the processing of personal data at any time (withdrawal of consent does not affect the lawfulness of the processing of data processing carried out on the basis of consent prior to its withdrawal). If you wish to update your personal data, you can contact us at: +386 30 777 050;
be informed, i.e. to obtain confirmation as to whether we are processing your personal data;
access and receive a copy of your personal data, including information about the purposes of processing, the types of personal data processed, and whether personal data are transferred to a third country or an international organization;
to correct, without undue delay, any inaccurate personal data related to you and complete any incomplete personal data;
request erasure (right to be forgotten) in specific cases, such as when processing is no longer necessary for the purposes for which the data were collected or when you withdraw consent if the data were processed based on consent;
request restrictions on processing in certain cases, such as when you contest the accuracy of personal data;
data portability, which gives you the right to obtain your personal data in a structured, commonly used and machine-readable format, and the right to transfer the data to another controller in certain cases;
object at any time to the processing of personal data based on our legitimate interest, including the right to object to direct marketing and related profiling;
challenge decisions based solely on automated processing, including profiling, that have legal effects on you or significantly affect you in a similar way. If such decision is (1) necessary for entering into or performing a contract between you and us, or (2) based on your explicit consent, we will take appropriate measures to protect your rights, freedoms, and legitimate interest. This includes ensuring at least the right to communicate personally with the controller, express your viewpoint, and contest the decision;
the right to lodge a complaint with a supervisory authority, independently of the rights listed above, if you believe that the processing of your personal data violates applicable law or the EU General Data Protection Regulation. You can lodge a complaint with the Information Commissioner, Dunajska 22, 1000 Ljubljana, e-mail: gp.ip@ip-rs.si, telephone: 00386 1 230 97 30, website: www.ip-rs.si;
You may contact us at any time on e-mail legal@pekauto.com and or at +386 030 777 050 regarding any of the above rights.

We will ensure that your request is fulfilled within one (1) month at the latest. You will receive the requested personal data in a structured, machine-readable and generally usable format. The first copy of your personal data in electronic or physical form is free of charge, however, each additional copy is subject to a fee.

9) Retention period of personal data

We will retain the personal data of the data subject for as long as necessary to fulfill the purpose for which the personal data was collected and further processed. The controller will process and store any personal data processed on the basis of consent until the consent is withdrawn. Personal data collected on the basis of legitimate interest will be retained by the controller for 5 years.

Anonymized data may be kept for longer in some cases, but always in a manner and form that prevents the data from being traced back to you, ensuring that you cannot be identified or profiled.
The retention period for personal data may vary depending on the applicable sectoral legislation. Where such legislation mandates specific retention periods for personal data, we will delete the personal data after the legally prescribed period has expired.

10) Security

All personal data will be strictly protected in accordance with the applicable data protection regulations and the internal rules of the controller. The Company will implement appropriate technical and organizational measures to ensure the security of personal data and to safeguard the rights of data subjects.

Despite our efforts to ensure security, our systems may be subject to hacking. In the event of any modification, disclosure or destruction of the personal data of a data subject, the data subject will be notified by e-mail.

11) Links to other websites

Our website may contain links to third-party websites. These sites have their own privacy policies, which you should read for yourself as we do not accept any responsibility for them.

12) Links to social networks

Our website contains links to social networks (social plugins) including Instagram, Facebook, YouTube, LinkedIn and X. When you click on the icon for any of these social networks, you will be redirected to the respective platform. The processing of personal data by these social networks, once you click on a social network plugin and are redirected, is conducted by the respective social networks in accordance with their privacy policies. You can review their privacy policies at the following links:

Instagram: processing of personal data is carried out by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; the statement on the protection of personal data is available at: https://help.instagram.com/155833707900388;
Facebook: procession of personal data is made by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irska; Privacy Policy available at: https://www.facebook.com/privacy/policy/;
YouTube: processing of personal data is carried out by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA; the personal data protection statement is available at: https://www.youtube.com/howyoutubeworks/our-commitments/protecting-user-data/;
LinkedIn: procession of personal data is made by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, Privacy Policy available at: https://www.linkedin.com/legal/privacy-policy.
X, personal data is processed by Twitter International Unlimited Company Attn: Data Protection Officer One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland, the personal data protection statement is available at: https://x.com/en/ privacy.

13) Changes to the Privacy Policy

We reserve the right, at our sole discretion, to update, modify or replace any part of the Privacy Policy by posting the update or modification on the website without prior notice. Any changes will become effective as of the date of public posting of the amended Privacy Policy on our website.

Logatec, 23. 8. 2024