Safeguarding of Personal Data

Effective from: 22. 7. 2026

  1. Data Controller

The owner of the website www.labirintzakladov.eu and the controller of your personal data is:

Official company name: Kristina Postružnik s.p.

Registered office: Zgornji Porčič 57, 2235 SV TROJICA V SLOVENSKIH GORICAH

Legal representative: Kristina Postružnik

Contact email address: kg.postruznik@gmail.com

We respect your privacy and are committed to protecting the personal data we receive from you. This Privacy Policy has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: the General Data Protection Regulation or GDPR), and the Personal Data Protection Act (ZVOP-2).

  1. Purposes of processing and legal bases

We collect and process personal data exclusively for predetermined and lawful purposes.

Purpose of processing

Personal data

Legal basis

Marketing communications (sending newsletters, offers, information)

First name, last name, email address

Data subject’s consent (Article 6(1)(a))

Analysis and segmentation for a tailored offer

Email address, data on opened messages and link clicks

Data subject’s consent (Article 6(1)(a))

Maintaining contact with customers (responding to enquiries)

First name, last name, email address, phone number, company name

Performance of a contract or steps prior to entering into a contract (Article 6(1)(b))

For the purposes of marketing communications and a tailored offer, we collect data based on your explicit consent. We store the consent together with the content of the form through which it was obtained for the duration of its validity. Based on the collected data, we do not carry out automated decision-making with legal or similarly significant effects for you.

  1. Personal data retention period

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected.

Data collected based on your consent is retained until you withdraw it. Data on views of received messages and link clicks is retained for 12 months from the sending of the message.

After the need to keep the data ceases or upon withdrawal of consent, the data is immediately and permanently deleted.

  1. Recipients and data transfers

We do not disclose your personal data to unauthorised third parties. Your data may be accessed by our contractual processors who provide us with technical support (e.g. the website hosting provider, the email delivery system provider). We have appropriate data processing agreements in place with them, under which they are bound to the same data protection standard as we are.

We primarily store and process data within the European Union. If it is necessary to transfer data to third countries (e.g. the USA) in order to provide the service, we ensure that our contractual processors are included in appropriate mechanisms to ensure secure transfers (e.g. standard contractual clauses).

In exceptional cases, we may disclose your personal data to competent public authorities in accordance with the law, if they submit an official request.

  1. Data subject rights

In accordance with the General Data Protection Regulation, you have the following rights:

Right to withdraw consent: You may withdraw your consent to the processing of personal data at any time. The withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

Right of access: You may request information as to whether we process your personal data and, if so, request access to it.

Right to rectification: You may request the correction of inaccurate or incomplete personal data.

Right to erasure (“right to be forgotten”): You may request the erasure of your personal data under the conditions set out in the GDPR.

Right to restriction of processing: You may request restriction of the processing of your data in certain cases.

Right to data portability: You may request that we provide the personal data you have provided to us in a structured, commonly used, and machine-readable format.

Right to object: You may object to the processing of your personal data where it is based on legitimate interest.

  1. Procedure for exercising rights

You may exercise all of the above rights by sending your request to kg.postruznik@gmail.com or in writing by post to: Kristina Postružnik s.p, Zgornji Porčič 57, 2235 SV TROJICA V SLOVENSKIH GORICAH

For reliable identification, we may request additional information from you, and we may refuse to act only if we demonstrate that we are unable to reliably identify you.

  1. Right to lodge a complaint with a supervisory authority

If you believe that your rights have been violated in the processing of your personal data, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia.

Address: Information Commissioner, Dunajska cesta 22, 1000 Ljubljana

Website: www.ip-rs.si