EMMIGDPR

Privacy Policy

When you access our website, your browser transfers certain data to our web server. The reasons for this transfer are technical in nature and are also necessary for you to be able to access the information you requested. To ensure the security of our information system, we automatically collect data in our server log about your IP address, the date and time of access, the time-zone difference relative to Greenwich Mean Time (GMT), the content of the request (the specific page), the access status or HTTP status code, the amount of data transferred, the referring website, and your browser (browser software, operating system version, language settings). Without providing us with at least your IP address, which we will record in the server log, you cannot use our website.

We will collect the stated data in order to ensure the security of our network and information, with the aim of preventing accidental events or unlawful or malicious acts. This processing is necessary for our legitimate interests and is based on point (f) of Article 6 of the General Data Protection Regulation (Regulation (EU) 2016/679 – GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).

We will process personal data from the server log for a maximum of 6 months, after which the data will be deleted, unless we have another lawful reason for further processing.

Consent

Our website uses cookies to improve the user experience and for analytics purposes. Cookies are installed only with your consent, by clicking the “I agree” button. By doing so, you consent that we, as the controller of personal data, may, for the purpose of analysing website visits, transmit data about your device and the cookies used, as well as an anonymised IP address, to the processor Google LLC, which is located in a third country. The data transfer is carried out on the basis of the EU standard contractual clauses or another appropriate mechanism in accordance with Article 46 of the GDPR. We will process your personal data for as long as you keep the tracking cookies. You can stop tracking at any time by deleting the cookies. You can delete cookies using the functions built into your browser or by clicking the “Delete cookies” button in this document.

Our website uses “cookie” technology so that we can distinguish between visitors and compile statistics on the use of the website. This allows us to continuously improve the operation of the website. Users who do not allow our website’s “cookie” to be stored on their electronic device will find that, when browsing the website, some website features may not be available (viewing video, commenting via Facebook, etc.). Cookies are small files that the system of the visited website writes to your electronic device. This allows the system to recognise you on your next visit to the website.

On our website we use the following types of cookies:

SERVERID: used to identify the server that is active for your request. Its purpose is to improve the operation of the website. This cookie does not store any personal data. Duration: until the end of the session.

Session cookies: used to store temporary information. Duration: until the end of the session.

Google Analytics (__utma – duration 2 years, __utmb – duration 30 minutes, __utmc – duration until the end of the session, __utmz – duration 6 months, __utmv – duration 2 years, _ga – duration 2 years, _gat – duration 10 minutes): used for the anonymous collection of data and reporting on website traffic without identifying individual visitors.

Facebook (reg_fb_gate – duration until the end of the session, reg_fb_ref – duration until the end of the session, datr – duration 2 years): used to track the effectiveness of registration and to determine how a user originally arrived on Facebook when creating an account.

YouTube (PREF – duration 8 months, VISITOR_INFO1_LIVE – duration 8 months, YSC – duration until the end of the session, ..): used to record view statistics, to track user preferences, and to rank related advertisements within a video on the YouTube network.

Vimeo (__utma – duration 2 years, __utmb – duration 30 minutes, __utmc – duration until the end of the session, __utmz – duration 6 months, __utmv – duration 2 years, vuid – duration 2 years, _utmt_player – duration 10 minutes): used for the anonymous collection of data and reporting on video views on the Vimeo network.

Google Maps (SID – duration 2 years, SAPISID – duration 2 years, APISID – duration 2 years, SSID – duration 2 years, HSID – duration 2 years, NID – duration 6 months, PREF – duration 8 months): used to measure usage and to track the behaviour of Google Maps users.

Personal data collected on the basis of your consent through the use of cookies will be processed for a maximum of 12 months, after which the data will be anonymised/deleted.
Data that we process on the basis of cookies and this consent is processed on the basis of point (a) of Article 6 of the General Data Protection Regulation.

Contact details

The controller of personal data is:
Aluminium Kety Emmi, d.o.o., Kolodvorska 37 a, 2310 Slovenska Bistrica, info@emmi.si
The collected personal data will be processed by our employees and by processors who carry out tasks as part of ensuring the operation of the website.

Right of access

You have the right to obtain confirmation as to whether or not we process personal data concerning you and, where that is the case, the right of access to that data. You also have the right to a copy of the personal data we process, and to information about the purposes of the processing, the categories of personal data, the recipients of the data, and the envisaged retention period.

If, as a data subject, you would like us to confirm whether we process personal data about you, you may request this in writing by e-mail (info@emmi.si) or in writing by post.

Right to erasure (“right to be forgotten”)

You have the right to obtain, without undue delay, the erasure of personal data concerning you, and we, as the controller, are obliged to erase your personal data without undue delay in the following cases:

• you object to the processing (see the right to object),
• the personal data has been processed unlawfully,
• the personal data must be erased in order to comply with a legal obligation.

Erasure will not be carried out where the processing of personal data is necessary:

• for compliance with a legal obligation to process under applicable regulations,
• for the establishment, exercise or defence of legal claims.

If, as a data subject, you would like us to erase your personal data, you may request this in writing by e-mail (info@emmi.si) or in writing by post. The right to erasure may only be exercised in the limited cases listed above.

Right to rectification

You have the right to obtain, without undue delay, the rectification of inaccurate personal data concerning you.

Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of a supplementary statement.

If, as a data subject, you would like us to rectify your personal data, you may request this in writing by e-mail (info@emmi.si) or in writing by post.

Right to restriction of processing

You have the right to obtain the restriction of the processing of your personal data where:

• you contest the accuracy of the data, for a period enabling us to verify the accuracy of the personal data; the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
• we no longer need your personal data for the purposes of processing, but you need it yourself for the establishment, exercise or defence of legal claims;
• you have lodged an objection to the processing, pending verification of whether our legitimate grounds override your grounds.

If you request restriction for the above reasons, then we may only continue to store your personal data, and any other type of processing may only be carried out:

• with your consent,
• for the establishment, exercise or defence of legal claims,
• for the protection of the rights of another natural or legal person, or
• for reasons of important public interest of the Union or of a Member State.
• Before the restriction of processing is lifted, we must inform you of this.

If we have refused your request for erasure of data, or if you only wish to restrict the processing of your personal data, you may request by e-mail (info@emmi.si) or in writing by post that we restrict the processing of your personal data. The right to restriction may only be exercised in the limited cases listed above.

Right to data portability

You have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format, and to transmit that data to another controller, where the processing is based on your consent or on a contract and is carried out by automated means. You may request the data in a portable format by e-mail (info@emmi.si) or in person at our registered office.

Right to object

Where we process your personal data on the basis of our legitimate interests (point (f) of Article 6 of the General Data Protection Regulation), you have the right to object at any time, on grounds relating to your particular situation, to such processing. In that case, we will no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

You may lodge an objection in writing by e-mail (info@emmi.si) or in writing by post.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the General Data Protection Regulation.

The supervisory authority with which the complaint has been lodged will inform you of the progress and outcome of your complaint, including the possibility of a judicial remedy pursuant to Article 78 of the General Data Protection Regulation.

As a data subject, you have the right to lodge a complaint at the following address:

Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, phone: +386 1 230 97 30, e-mail: gp.ip@ip-rs.si

The Information Commissioner will inform you of the progress and its decision on the complaint in accordance with applicable regulations.

Processors of personal data

The hosting of the website is provided by our processor.
The processor of personal data that provides the technical operation of cookie tracking is:
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Transfer of personal data

We will transfer personal data to a third country because our processor, Google LLC, is based in the United States of America.

Apart from the cases described above, we will not transfer personal data to third parties or to third countries, except in cases provided for by law, which relates primarily to cases in which the data is requested by persons or authorities authorised to do so.