Privacy policy and data protection

Purpose

The purpose of this privacy policy for the Acai.si website, operated by Doživetja d.o.o. (hereinafter the provider or controller), is to inform users and visitors of the provider's websites about the purposes and legal bases for the processing of personal data by the provider.

The provider values your privacy and therefore always protects your data with care and handles it in accordance with the relevant legislation in force from time to time, in particular the EU General Data Protection Regulation (GDPR) and the national legislation on personal data protection in force from time to time. As the operators of the website www.acai.si, we have prepared this Privacy Policy in order to protect your privacy and data and to inform you about our data processing procedures and your rights in this regard. The Privacy Policy covers the handling of personal data that the provider receives from you when you visit and use our website or provide it to the provider in any other way.

By using the website www.acai.si, the user confirms that they accept and agree to the entire content of this Privacy Policy, unless additional forms of consent are required in individual cases.

This Privacy Policy may be changed or supplemented at any time, without prior warning or notice. By using our website www.acai.si after a change or supplement, the user confirms that they agree to the changes and supplements.

Controller

The controller of personal data is Doživetja d.o.o., Srednji Lipovec 9, 8361 Dvor, email: acai@acai.si

Legal bases for the processing of personal data

In accordance with the relevant legislation in force, the provider collects and processes your personal data on the following legal bases:

• law

• contract

• consent

Personal data

Personal data is information that identifies you as an individual: your first name, surname, email or postal address, mobile phone number, etc.

Collection and processing of personal data

In accordance with the purposes set out in the Privacy Policy, the provider collects personal data as follows:

• when you wish to make an online purchase through our website, we ask you for the following personal data: first name, surname, address, postcode, town, country, email, telephone;
• when you make an online purchase, we collect data about your purchases and the invoices issued: date of purchase, items purchased, prices of the items purchased, total purchase amount, payment method, delivery address, number and date of issue of the invoice, identifier of the person who issued the invoice, and data on the handling of product complaints;
• newsletter subscription: we send you our newsletter only if you have subscribed to it yourself. You decide which news you wish to receive. We use your first name and surname and your email address;
• when you get in touch with us, whether you ask us a question or send us an opinion, complaint or request, we may collect some of the following personal data about your communication with us: first name and surname, address, email, electronic identification data, and the date, time and content of postal or electronic communication.

The provider does not collect or process your personal data except where you enable it to do so, namely:

• when you order a service or product – contractual processing,
• when you subscribe to receive the newsletter – consent, or
• where there is a legal basis or a legitimate interest for collecting personal data.

By giving consent on the website www.acai.si, you agree that we may also use the personal data obtained (first name and surname, home address, email address and any other data you provided for the purpose of concluding the contract – the order) for direct marketing purposes through all the advertising channels we use (notification by unaddressed and addressed direct mail, email, etc.) and for the statistical and market analyses, marketing profiling and segmentation related to direct marketing. In this way we will make sure that you are kept appropriately informed about our current offers at all times, while being informed only about product offers that best suit your wishes.

As a customer, you must also expressly give the provider your consent to direct marketing by email when registering and/or placing an order on the website, by ticking the "Subscribe" box. Otherwise you will not receive direct marketing by email and will therefore not be informed in advance about our online promotions.

You may withdraw your consent to the processing of personal data at any time, free of charge, by using the automatic unsubscribe link in each email newsletter, or by sending an email with the content "UNSUBSCRIBE" to the email address www.acai.si.

We will respect your wish to withdraw and will ensure that your consent for direct marketing purposes is withdrawn within 5 days at the latest.

Rights of the individual

As the controller, the provider will process and protect all personal data obtained in accordance with the relevant legislation in force from time to time.

The individual to whom the personal data relates may at any time request that the provider:

• confirm whether or not data concerning them is being processed,
• give them access to the personal data (i.e. to view and copy it),
• provide information on the processing of this data (e.g. on the purpose of processing, the type of personal data, the recipients to whom the personal data has been or will be disclosed, etc.),
• allow the correction of inaccurate personal data concerning them and the completion of incomplete personal data,
• allow the right to erasure of personal data (the so-called right to be forgotten),
• allow the right to restriction of processing,
• allow the right to object to processing,
• allow the right to data portability and provide them with the data in a commonly used, machine-readable format or transmit it directly to another controller,
• allow the right to withdraw consent,
• provide additional information about their right to lodge a complaint with the competent supervisory authority.

The provider will also, at the individual's request and in accordance with the applicable legislation, provide other information concerning the personal data it processes about them.

The provider will respond to requests from the individual to whom the personal data relates without undue delay and at the latest within the time limits prescribed by law.

We also undertake not to disclose the personal data obtained to third parties, except to contract processors with whom we have previously concluded a written data processing agreement.

Cookies

The provider uses cookies on the website www.acai.si. Cookies are text files that are stored on the device the user uses to access the website when they visit and use it. When the user visits the website again, the provider may access the (personal) data on the user's device that was collected by means of cookies.

With the help of cookies, the provider ensures that the website works and is displayed in a better, more user-friendly and personalised way, while cookies also help us analyse users, record visits (for statistical purposes) and advertise more effectively.

Cookies perform many functions – they make it possible to track visits to the website, enable various campaigns and discounts (e.g. free delivery, etc.), and cookies are also used to store information on whether you are a subscriber to our online newsletter or entitled to certain discounts or benefits.

If you would like to find out more about the types and purposes of cookies, we invite you to click on the "Cookies" section, which you will find in the bottom left corner of our website www.acai.si.

Freedom of choice

You control the information you provide about yourself. However, if you decide not to provide your data, unfortunately you will not be able to access certain parts or functions of the website.

Individuals who wish to unsubscribe from the controller's databases should let us know at the email address acai@acai.si.

Security

Protecting the personal data of our users is important to us. We strive to protect your personal data against loss, destruction, falsification, manipulation and unauthorised access or unauthorised disclosure through strict technical, organisational and security measures.

Disclosure of personal data

The provider will disclose individuals' personal data to third parties – competent state authorities and other controllers – only to fulfil its own or their legal obligations and on an appropriate legal basis.

Retention

The controller will keep your personal data only for as long as is necessary to achieve the purpose for which the personal data was collected.

Personal data that the controller processes on the basis of law is kept by the controller for the period prescribed by law.

Personal data that the controller processes in order to perform a contractual relationship with the individual is kept by the controller for the period necessary to perform the contract and for a further period after its termination, in accordance with the regulations in force from time to time.

Personal data that the controller processes on the basis of the individual's personal consent is kept by the controller permanently, until the individual withdraws that consent or requests that processing cease. The controller deletes such data before withdrawal only where the purpose of processing the personal data has already been achieved or where the law so provides.

After the retention period has expired, the controller effectively and permanently deletes, destroys or anonymises the personal data so that it can no longer be linked to a particular individual.

In the event of a personal data breach, the controller is obliged to notify the competent supervisory authority, except where the breach is unlikely to have put the rights and freedoms of individuals at risk. Where there is a suspicion that a criminal offence has been committed in connection with the breach, the controller is obliged to notify the police and/or the competent prosecutor's office.

Notification of the supervisory authority of a personal data breach

If the breach is likely to result in a high risk to the rights and freedoms of individuals, the controller is obliged to notify the individual to whom the personal data relates without delay or, where that is not possible, without undue delay. The notification to the individual must be made in clear and plain language.

Publication of changes

Any change to our privacy policy will be published on this website.

Dvor, 20 December 2020

Doživetja d.o.o.