1. INTRODUCTION
Drumlife doo respects your privacy, so in our company we pay special attention to the protection of personal data. As a user of our website or a customer, you are entitled to the protection of your personal data.
In the following, we present the Privacy and Personal Data Protection Policy of Drumlife doo (hereinafter "this policy"). This policy describes how we collect your personal information (especially about our customers and users of our online store) and for what purpose we collect it, how we handle your personal information, with whom we share it, whether we process this information with your consent or on another legal basis, how we protect them and what your rights are in relation to the processing of your personal data.
This policy applies to all your personal data collected by Drumlife doo, V. ulica no. 15, 1235 Homec, collectively referred to in this policy as “we,” “us,” and “our”.
At the end of this policy, you will find some definitions of the key terms used in this policy (e.g. personal data, processing, controller, etc.).
2. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?
Your personal data is processed by:
Drumlife doo
V. street no. 15, 1235 Homec
e-mail: info@drumlife.si
3. WHO CAN YOU CONTACT IN THE EVENT IF YOU HAVE QUESTIONS OR REQUESTS REGARDING PERSONAL DATA? CONTACT POINT FOR PROTECTION OF PERSONAL DATA
We have established a contact point for the protection of personal data, which will address your questions or requests regarding this policy or a special separate privacy notice, about your personal data and their processing.
For any questions, requests or complaints regarding the application of this policy or to exercise your rights under this policy, you can contact us at the contact point for personal data protection:
V. street no. 15, 1235 Homec
4. BASIC PRINCIPLES
We appreciate the trust you place in us by entrusting us with your personal information, and we are committed to processing it fairly, transparently and securely. The key principles we follow when processing personal data are the following:
Legality: We will collect personal data in a fair, lawful and transparent manner.
Minimum amount of personal data (minimization): the collection of personal data will be limited to those that are appropriate and necessary to achieve the purpose for which they were collected.
Purpose limitation: We will only collect personal data for specific, explicit and lawful purposes and will not process it in a way that is incompatible with these purposes.
Accuracy: we will take care of the accuracy and up-to-dateness of personal data.
Personal data security and protection: We will take technical and organizational measures to ensure an appropriate level of security and data protection, taking into account, inter alia, the nature of your personal data that needs to be protected. Such measures shall prevent any unauthorized disclosure or access, accidental or deliberate destruction or accidental loss or alteration, and other unlawful forms of processing.
Access and correction: We will process your personal data subject to your rights.
Retention Limitation: We will store your personal data in a manner consistent with applicable data protection laws and only for as long as is necessary to achieve the purposes for which it was collected.
Protection in international transfers: We will not transfer your data to countries outside the European Economic Area.
Protection of personal data when passed on to third parties: We will ensure that the transfer of personal data to third parties and the processing by third parties are carried out in accordance with applicable law and with appropriate contractual safeguards.
Legality of direct marketing and cookies: when we send you promotional materials or install cookies in your equipment, we will do so in accordance with applicable law.
5. PROCESSING OF YOUR PERSONAL DATA: WHAT DATA WE COLLECT, ON WHAT LEGAL BASIS, FOR WHAT PURPOSE WE COLLECT THEM AND HOW LONG WE STORE
If you use our services, we collect various types of your information, such as your contact information and other settings. If you make a purchase with us, we process your last name and first name, as well as your orders and the information you provide to us with each purchase.
We process the following personal data:
identification data, which mainly include the name and surname and the VAT ID, if you are a legal entity;
contact information, which includes personal information that may be used to contact you, in particular your e-mail address, telephone number, delivery address, account address and your social media profiles;
information about your orders, which mainly includes information about the ordered items and the method of payment, including the bank account number, and information about complaints.
Why do we process personal data and why are we entitled to it?
We process your personal data in different situations for different purposes. We will only process personal data for specific, explicit and lawful purposes and will not further process personal data in a way that is incompatible with those purposes.
If you visit the websites of our online store, where we also use cookies, we use your data primarily to determine the number of visitors and improve our services.
If you make a purchase from us, we use your information to process your order, protect our legal claims and meet our legal obligations. With the help of your contact information and other information, we can display and send you our customized offers at the same time. With your consent, we provide the information to third parties to display the offer on other websites as well as to allow you to access some additional services.
As part of our activity, we process personal data for different purposes and to different extents, namely:
without your consent on the basis of the need to perform the contract, our legitimate interest or for the purpose of fulfilling legal obligations, or
based on your consent.
What kind of data processing we can perform without your consent depends on the purpose for which the relevant processing is related and the attitude towards us - whether you are just a visitor to our online store or what you buy. We may also process your data if you are the addressee of the goods or services ordered from us and if you communicate with us.
Links to foreign websites
From the website www.drumlife.si he leads some links to other websites. The visitor must be aware, understand and accept that these websites have their own privacy policies, for which Drumlife doo is not responsible and are independent of the privacy policy of Drumlife doo.
6. TRANSMISSION OF PERSONAL DATA
In most cases, we process your data for our own purposes as their controller. In such a case, we provide your information to our partners to ensure payment, transportation and other matters related to your order. We also provide the data to our processors, who process it in accordance with our instructions.
All described personal data is processed by us as a controller. This means that we determine the purposes defined above, which of your personal data we collect and the methods of processing, and we are responsible for its proper implementation.
We may also pass on your personal data to other entities (our business partners), which also have the function of a controller, namely:
in connection with the processing of your order to our partners involved in the processing of the order (partners who manage payment systems for the provision of payments, especially in relation to payment cards, and the transport partner).
We may also pass on your personal data to third parties, namely:
When required by law or required by law to protect Drumlife doo:
compliance with laws, requirements of authorities, court orders, legal proceedings, obligations related to reporting and filing information with authorities, etc.
checking and enforcing compliance with the policies and agreements of Drumlife doo
protection of the rights, property or security of Drumlife doo and / or its customers.
In relation to corporate transactions: in the context of the transfer or sale of all or part of its business or otherwise in connection with mergers, consolidations, changes in control, reorganizations or liquidation of all or part of the company's operations.
7. FROM WHICH SOURCES DO WE OBTAIN PERSONAL DATA
By registering on the website of Drumlife doo drumlife.si via the online form. With this registration method, your data is transferred to the main electronic database within 4 weeks.
When using the website. These are web cookies, which you can read more about below.
Occasionally through prize games, competitions and user activities, where the participant is always aware of the purpose of collecting and using personal data.
Through social networks and other marketing tools such as applications, the user is always aware of the purpose of collecting and using personal data.
Through your questions by e-mail, regular mail or through other forms of communication based on personal data.
A person who submits his / her personal data with consent and at least one contact data joins the Drumlife doo database.
8. PROTECTION OF YOUR PERSONAL DATA
We take technical and organizational measures to protect your personal information from illegal or unauthorized use or access and from accidental loss or destruction. These actions are implemented in terms of our IT infrastructure, the potential impact on your privacy and in terms of implementation costs, and in accordance with current industry standards and practices.
We will entrust the processing of your personal data only to those processors (3rd parties) who comply with the stated technical and organizational measures for the protection of personal data.
Ensuring data security means ensuring the confidentiality, integrity and accessibility of your personal data:
Confidentiality: We will protect your personal information from unauthorized disclosure to third parties.
Integrity: We will protect your personal information from being altered by unauthorized third parties.
Accessibility: We will make sure that only authorized persons will be able to access your personal data when necessary.
Our security procedures include: access protection, backup systems (backup), control, audits and maintenance, security incident management and business continuity, etc.
9. USE OF SOCIAL MEDIA
If you log in to our website from social media (for example, through your Facebook account), we will record your personal information available on that social media, and your use of this media means that you expressly consent to the provision of your personal information that we recorded them with the help of our tools.
Please note that posting on social media may have certain consequences for your privacy or the privacy of the persons whose personal information you share, such as the fact that the post cannot be removed immediately. You are responsible for your own posts and we do not assume any responsibility for them.
10. WHAT ARE YOUR RIGHTS AND OPPORTUNITIES
We want to be as open with you as possible so that you can make sensible decisions about how we should use your personal information.
Your choices about how to contact
You have a number of choices about how you want us to contact you, through which channel (e.g. email, mail, social media, phone,…), for what purpose and how often, by adjusting your privacy settings on the appropriate device or by updating the user profile or account or by following the unsubscribe instructions provided in the message.
If you do not select anything, you will receive our promotional and other messages with a frequency that is normal according to the publication.
Right of acquaintance
You can always contact us at the contact point for personal data protection (see chapter 3 "Who can you contact if you have any questions or requests?") To find out what personal data we process and where this information comes from. Under certain conditions, you have the right to receive your personal data provided to us in a structured, commonly used and machine-readable form and the right to transfer this data to any third party of your choice.
Right to repair
If you find an error in your personal information or if you find it incomplete or inaccurate, you may ask us to correct or supplement it.
Right of deletion
In some cases, you have the right to have your personal information deleted. We will delete your personal information as soon as possible if any of the following reasons are met:
we no longer need your personal data for the purposes for which we processed them;
you have withdrawn your consent to the processing of personal data, which is data for the processing of which your consent is necessary, and at the same time we have no other reason to further process this data;
you have exercised your right to object to the processing of data (see section Right to object to the processing of data below) for personal data that we process on the basis of our legitimate interest, and we recognize that more legitimate interests that would justify further processing of this data we don't have but
you assume that the processing of personal data that we carry out is no longer in accordance with generally binding legal regulations.
However, please be aware that even if any of the reasons described are met, this does not mean that all your personal data will be deleted immediately. However, this right cannot be exercised if the processing of your personal data continues to be necessary to fulfill our legal obligations or to determine, enforce or defend our legal claims.
The right to limit processing
In some cases, in addition to the right to erasure, you may also exercise the right to restrict the processing of personal data. This right allows you, in certain cases, to request that your personal data be specifically marked and excluded from any processing - in which case the effect is limited in time (and not permanent as in the case of the right of erasure). We must limit the processing of personal data:
if you challenge the accuracy of personal information until we agree on which information is correct;
if we process your personal data without an appropriate legal basis (eg above the intended scope), and you will only prefer to limit such data instead of deleting such data (eg if you anticipate that you will provide us with this data in the future);
if we no longer need your personal information for the purposes described above and you need it to determine, enforce or defend your legal claims, or
if you object to the processing of data. The right to object is described in more detail below under the heading "Right to object to data processing"). We must limit the processing of your personal data during the processing of your objection.
You can submit a request for termination of use or complete deletion of your personal data in the following ways, provided that you clearly state the content of your request:
- send a written request by e-mail to info@drumlife.si with the note "Logout";
- send a written request by regular mail to Drumlife doo
V. street no. 15, 1235 Homec with the caption “Drumlife Logout”;
- Click on the link in the e-newsletter or reply to it with the text "Unsubscribe".
The right to data portability
You have the right to obtain from us all your personal data that you have provided to us and that we process on the basis of your consent and on the basis of the implementation of the contract. We provide your personal data in a structured, standard and machine-readable form. Easy data transfer is only possible for data that we process automatically in our electronic databases.
Right to object to data processing
You may also object to the processing of your personal data for direct marketing purposes (if you wish, you can also let us know through which channel and how often you want us to contact you) or to pass on your personal data to third parties for this purpose.
The consent can be revoked by a written statement or message, which you send us by e-mail at info@drumlife.si or in another way published on www.drumlife.si. Withdrawal of consent to the processing of personal data does not have any negative consequences or sanctions for you. However, we may not be able to provide you with one or more of our services, which cannot be provided without personal information, after revoking your consent to the processing of personal data.
Right to appeal
The exercise of the above rights in no way affects your right to lodge a complaint with the competent authority. You can exercise this right in particular if you suspect that we are processing your personal data unjustifiably or in contravention of generally binding legal regulations.
11. LEGAL INFORMATION
The provisions of this policy supplement and do not repeal the provisions of the legislation in the field of personal data protection. In the event of a discrepancy between this policy and the provisions of the legislation in the field of personal data protection, the provisions of the legislation shall apply.
Drumlife doo may change this policy at any time. In this case, we will alert you to this and ask you to re-read the latest version. You can also check this policy at www.drumlife.si and get acquainted with the changes.
DEFINITIONS
In this policy, the terms have the meanings set out in this point:
Controller means an organization that determines the purposes and means of processing your personal data.
Processor means a person or organization that processes personal data on behalf of the controller.
Contact point for the protection of personal data means the contact point through which you can address your questions or requests to the controller regarding this policy and / or (processing) of your personal data and which will deal with such questions and requests. Unless we inform you otherwise, you can reach the contact point for the protection of personal data as described in Chapter 3 ("Who can you contact if you have any questions or requests?").
Personal information is any information that relates directly to you or on the basis of which you can be identified, such as your name, telephone number, email address, vehicle identification number (VIN), geolocation, etc.
Processing means the collection, access and all other forms of use of your personal data.