This privacy notice outlines how Twenty Five Seven, prodaja in storitve, d.o.o., Vilharjeva cesta 44,1000 Ljubljana "Twenty Five Seven", “we”, “us” or ”our”), uses your personal data with respect toyour interactions with the timemachinewinders.com website and application "Services".
We are committed to observing the privacy of our users and customers. In this regard, we will only use your personal data in compliance with the applicable laws, in particular the Regulation (EU)2016/679 "GDPR".
The privacy notice is addressed to individuals residing in EU and EEA countries.
We may collect the following categories of your personal data depending on how you interact withour Services:
Contact details, including name, surname, address, email, phone number. These personal data arecollected from you if you subscribe to our newsletter, make a user account at Services or purchase one of our products.
Details related to purchase orders, in addition to Contact details we may collect from you further information such as delivery address, payment method.
Website and mobile application specific data, such as device-specific information including Internet Protocol (IP) address, hardware model, operating system, unique device identifiers, and mobile network information, preference information (such as marketing preferences), browser type, Internet service provider (ISP), referring/exit pages, the addresses viewed on our site, operating system, date/time stamp, and clickstream data.
We obtain most of the above data directly from you.
Except for certain personal data that we are required to process by law or contractual requirements, you are free to decide whether to provide any personal data to us. You will therefore not be subject to adverse consequences if you do not wish to provide us with your personal data. However, if you do not provide certain data, you may not be able to use certain tools which requirethe use of such personal data.
Depending on what Services you use and how you interact with us, we may use your personal datafor the following purposes:
We will process your personal data lawfully, in particular based on (i) your consent, (ii) negotiationor fulfillment of a contract with you and (iii) our legitimate interests in ensuring a pleasant and safe user experience at all times.
Your personal data may be shared with the following third entities:
Service providers. We engage third party service providers which assist us in our businesso perations. Such service providers act as data processors and we have with them in placea ppropriate contracts ensuring that they process your personal data only upon our instruction and on a need-to-know basis. We engage the Service providers for the following services: payment services, newsletter services, and accounting services. A detailed list of Service providers who act as data processors may be obtained upon request.
Governmental authorities. We may share your personal data with government authorities, law enforcement officials and/or courts of law if we are so required under law.
(Potential) Legal successors. We may share your personal data with third parties in connection with a corporate transaction, such as a merger, consolidation or asset sale.
We store your data in the EU. However, some of our data processors conduct their services also incountries outside EU. In such cases your personal data may be transferred to countries which do not ensure a level of data protection equal to your country. Whenever your personal data istransferred to countries outside EU we take reasonable steps to ensure that your data remains protected in line with the GDPR. We can provide you with details regarding transfer mechanisms used by our data processors upon request.
Pursuant to the GDPR, you have the following rights in relation to the personal data we process about you:
Right to access. You have the right to ask us for copies of your personal data.
Right to rectification. You have the right to ask us to correct personal data you think is inaccurate.
Right to erasure. You have the right to ask us to erase your personal data under certain conditions.
Right to data portability. You have the right to ask that we transfer the personal data provided by you to another controller, or give it to you. The right only applies if we are processing personal databased on your consent or a contract and the processing is automated.
Right to restriction of processing. You have the right to ask us to restrict the processing of your personal data in certain circumstances.
Right to object. Under certain circumstances you have the right to object to processing if we process your personal data based on our legitimate interests.
If processing of your data is based on consent, you have a right to withdraw the consent at anytime. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Finally, you have a right to file a complaint with a supervisory authority. You may exercise your rights by sending us a request to the email address stated in Section "Contact details" below. The request should identify the person making the request and the type ofthe request (e.g. access, rectification, erasure).
In processing of your personal data, we do not use of automated decision-making, including profiling.
We do not keep your personal data any longer than is necessary for the purposes for which thepersonal data are processed.
In light of this, we keep your personal data for the period specified by the applicable Slovenian law or, if this is not relevant, for a period of six years after your communication with us or conclusion of the agreement.
You may address your requests and questions regarding data protection to: dpo@25seven.si.
Last updated: 8 August 2022, v1.0
