CARBONSEC d.o.o., Ajdovščina 4, 1000 Ljubljana, Slovenia (hereinafter referred to as “the Company”), as the controller of personal data, guarantees that it will treat personal data with care and will process them solely for the purposes for which they were originally collected. The Company processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“General Data Protection Regulation”) and in accordance with applicable data protection legislation.
About the Privacy Policy
The purpose of the Privacy Policy is to inform users of the Company’s website and other persons (hereinafter also referred to as “individuals”) of the purposes and basis of the processing of personal data by the Company and the rights of individuals in this area. At the same time, this Privacy Policy also further clarifies the consent to the processing of personal data.
The Company takes special care to ensure the security of your personal data. All personal data provided is treated confidentially. Your personal data is handled with the utmost care, taking into account the applicable legislation and the highest standards of treatment. We ensure the security of your personal data by, among other things, appropriate organisational measures, work procedures, advanced technological solutions and by taking into account recognised good practices in order to protect your personal data as effectively as possible. We use an appropriate level of protection and reasonable physical, electronic and administrative measures to safeguard the personal data collected against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or unauthorised access to, personal data that has been transmitted, stored or otherwise processed.
1. Personal data collected by the Company
If you are a visitor to the website, we only collect information about you using the basic functionalities of Google Analytics GA4.
We process the following personal data for the purpose of answering the question you have submitted in the Contact Us form (on the website) and conducting business communications:
- Name;
- Email address;
- Address
- Message.
For the purpose of receiving newsletters, including receiving promotional materials, we process the following personal data:
- E-mail address;
- Name and surname.
We process the following personal data for the purpose of organising online courses and training:
- Name and surname;
- E-mail address;
- Company;
- Role in the company.
The processing of the above personal data is based on your personal consent. Personal data is kept until the purpose is revoked, and we do not pass on the personal data collected to third parties or other organisations, unless when organising an event in cooperation with one of our business partners. In such case, the disclaimer under the event registration form will clearly indicate such data processing.
Upon a reasoned and justified request, the Company may disclose personal data to the competent state authorities if they have a legal basis to do so. For example, the Company will respond to requests from courts, law enforcement authorities and other public authorities, which may include public authorities of another EU Member State.
You may withdraw your consent to the processing of your personal data at any time by sending a request to [email protected] or by sending a written request to Carbonsec d.o.o. registered office, Ajdovščina 4, 1000 Ljubljana, Slovenia.
Withdrawal of consent to the processing of personal data applies only to personal data processed on the basis of your consent to the processing of personal data. The last consent to the processing of personal data that we received from you is valid. The possibility to withdraw consent to the processing of personal data does not constitute a right of withdrawal in the individual’s business relationship with the Company.
2. Categories of individuals whose personal data are processed
This Privacy Policy is intended for anyone who visits our website or submits a contact form on our website (Contact Us, Contact Us), subscribes to our newsletter or registers for an event, training or course.
3. Individuals’ rights in relation to the processing of personal data
We will ensure that your rights in relation to the processing of your personal data are exercised without undue delay. We will decide on your request within a maximum of one month after receiving your request. In the event of complexity and a large number of requests, we may extend the time limit by up to two additional months. If we extend the deadline, we will inform you of any such extension and the reasons for the delay within one month of receipt of the request.
Requests concerning the exercise of your rights are accepted by email to [email protected] or by post to the registered office of Carbonsec d.o.o., Ajdovščina 4, 1000 Ljubljana, Slovenia.
If you submit a request by electronic means, we will, where possible, provide you with the information by electronic means, unless you request otherwise.
Where there is reasonable doubt as to the identity of the individual making a request in relation to any of his or her rights, we may require the provision of additional information necessary to confirm the identity of the data subject.
If the data subject’s requests are manifestly unfounded or excessive, in particular because they are repetitive, the company may:
- charge a reasonable fee, taking into account the administrative costs of providing the information or communication or of carrying out the requested action; or
- refuse to act on the request.
We provide you with the following rights in relation to the processing of your personal data:
- the right of access to data
- the right to rectification
- the right to erasure (“right to be forgotten”)
- the right to restrict processing
- the right to data portability
- the right to object
4. The right to lodge a complaint concerning the processing of personal data
You may send a complaint regarding the processing of your personal data to the following e-mail address: [email protected] or by post to the address of the registered office of Carbonsec d.o.o., Ajdovščina 4, 1000 Ljubljana, Slovenia.
In the event that we do not decide on your request within the statutory time limit, or we refuse your request, you have the possibility to lodge a complaint with the Information Commissioner.
You also have the right to lodge a complaint directly with the Information Commissioner if you believe that the processing of your personal data violates Slovenian or EU data protection law.
If you have exercised your right of access to data and, after receiving a decision, you consider that the personal data you have received is not the personal data you requested or that you have not received all the personal data requested, you may lodge a reasoned complaint with the Company within 15 days before lodging a complaint with the Information Commissioner. We must decide on your complaint as a new request within five working days.
5. Final provisions
Anything not covered by this Privacy Policy is subject to applicable data protection law.
The Company shall not be liable for any damage suffered by an individual as a result of the provision to the controller of incorrect, false, incomplete or outdated information relating to the individual.
The controller shall only be liable for damage caused by processing where it has failed to comply with the obligations required by the General Data Protection Regulation or the legislation governing the protection of personal data or where it has acted contrary to its provisions. The Company shall be exempt from liability if it proves that it is in no way responsible for the event giving rise to the damage.
The Company reserves the right to amend this Privacy Policy. We will notify you of the change by posting it on the Company’s official website or by other appropriate means.
This Privacy Policy is posted on the Company’s website and will be effective and applicable from 28 January 2025.
If you have any questions about this Privacy Policy or the information we hold about you, the Company will be happy to answer them.