PRIVACY POLICY OF OGK-ING, D. O. O.

1. Privacy Policy

The privacy policy of OGK-ING, d. o. o. (hereinafter: privacy policy) is prepared in accordance with EU Regulation 2016/679 of the European Parliament on the protection of personal data (hereinafter: Regulation) and the applicable Personal Data Protection Act (hereinafter: ZVOP-2).

The privacy policy provides information on how we process your data obtained in connection with the website www.ogk-ing.com.

If you submit an inquiry or request an offer for our products on our website, you provide your personal data. By providing your personal data, you agree to the method of processing personal data as described in our privacy policy.

You can withdraw your consent at any time and exercise other rights you are entitled to as an individual whose personal data is processed.

Since we value the trust you show us by providing your personal data, we, as the data controller, together with our business partners, commit to keeping all your personal data secure and protecting it accordingly in compliance with applicable law. The entrusted data will be used exclusively for the purposes specified in this privacy policy and will not be shared with unauthorized persons under any circumstances. The processing of your personal data requires your explicit consent, which you have the right to withdraw at any time. You will be informed of this right when giving consent.

1.1 Processing of Personal Data

The website www.ogk-ing.com is managed by OGK-ING, d. o. o., phone number: +386 08 205 21 56, email: ogk-ing.com.

The field of personal data protection is managed by OGK-ING, d. o. o., phone number: +386 08 205 21 56, email: info@ogk-ing.com.

Responsible person for data protection: Janez Kočevar, phone number: +386 3 570 13 45, email: info@ogk-ing.com.

Certain personal data processing activities may be transferred to other processors, each of whom is obliged to protect your personal data in accordance with the Regulation and applicable law.

1.2 Individual Rights Regarding Personal Data in Accordance with the General Data Protection Regulation

Under the Regulation and the conditions specified therein, you have the following rights:

1. Right of Access: You can request information from the data controller on whether your personal data is being processed, which data is processed, where, and for what purposes.

2. Right to Erasure (“Right to Be Forgotten”): If you no longer wish your personal data to be processed and there are no legal grounds for further retention, you can request the data controller to erase your personal data.

3. Right to Data Portability: You can request your personal data from the data controller if you wish to transfer them to another controller.

4. Right to Withdraw Consent: The withdrawal of consent must be as simple as giving consent.

5. Right to Rectification: You can request the correction of inaccurate personal data concerning you.

6. Right to Lodge a Complaint: You have the right to file a complaint with the supervisory authority.

Individuals can exercise their rights by submitting a written request personally, by mail, or by email, except for the right to withdraw consent, which is exercised as described for each data collection process.

A complaint regarding the processing of personal data can be filed with the Information Commissioner of the Republic of Slovenia, Zaloška 59, 1000 Ljubljana, www.ip-rs.si, email: gp.ip@ip-rs.si.

1.3 Subscription to E-Newsletters

Visitors to the website can subscribe to our e-newsletters by completing the subscription form (embedded in a pop-up window).

E-newsletters are sent via the MailChimp platform, which ensures a high level of personal data protection and security.

• Collected Data: Personal data entered in the subscription form (email address, name, and surname). These data can be edited via the link found at the bottom of each e-newsletter.

• Purpose of Data Collection: Data is collected and processed for sending e-newsletters and adapting content based on user preferences.

• Data Retention Period: Data is retained until the user unsubscribes.

• Withdrawal of Consent: Users can unsubscribe via the link at the bottom of each e-newsletter or by contacting us.

• Data Sharing: Data is stored on MailChimp’s servers, which processes data on our behalf under our instructions. Data is not shared with unauthorized third parties.

1.4 Email Communication via Contact Form

Visitors can submit inquiries or request offers via the contact form on www.ogk-ing.com.

• Collected Data: Name, surname, and email address.

• Purpose of Data Collection: To respond to inquiries and requests for product offers.

• Data Retention Period: Data is stored indefinitely unless deletion is requested.

• Withdrawal of Consent: Deletion can be requested via the contact form.

• Data Sharing: Data is not shared with unauthorized third parties.

1.5 Cookies

See the Cookies tab (https://www.ogk-ing.com/legal-notice).

1.6 Prize Draws by OGK-ING, d. o. o.

Prize draws may be organized occasionally, e.g., for Facebook followers.

• Collected Data: If selected, data for prize delivery (name, surname, address, or phone number) is requested.

• Purpose: Ensuring smooth prize delivery.

• Data Retention Period: Stored for a defined period in compliance with legal provisions.

• Withdrawal of Consent: Data deletion can be requested via the contact form.

• Data Sharing: Data is not shared with unauthorized third parties.

1.7 Data Protection

The data controller ensures technical, organizational, and other appropriate procedures to prevent unauthorized use, alteration, destruction, or loss of personal data. Specific procedures and measures are detailed in the data protection policy adopted by the controller.

Automated decision-making is not used.

1.8 Video Surveillance

Video surveillance may be conducted at OGK-ING, d. o. o. premises for security and access control purposes.

• Controller: OGK-ING, d. o. o., Tovarniška 11c, 3212 Prebold, Slovenia.

• Data Protection Officer: Janez Kočevar, email: info@ogk-ing.com.

• Purpose: Security of people and property, access control, protection of business secrets.

• Legal Basis: Legal grounds, legitimate interest.

• Users of Data: Authorized personnel only.

• Rights of Individuals: Right to access, correction, deletion, restriction, and objection.

• Data Retention: In accordance with laws and internal policies.

1.9 Final Provisions

The privacy policy is published on the website and available at all locations where personal data is collected to inform individuals about data collection.