Table of Contents
Protecting your personal data is very important to us. Accordingly, we strive to handle your data with care and ensure the highest level of privacy by implementing appropriate technical and organizational measures to guarantee a high level of security for personal data.
We process all personal data exclusively based on legal grounds and individuals’ consent statements, in accordance with current standards and legislation in the field of data protection. This includes compliance with Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, as well as the repeal of Directive 95/46/EC (hereinafter referred to as the “General Data Protection Regulation” or “GDPR”), along with Slovenian legislation (the applicable Personal Data Protection Act (“ZVOP”)).
The purpose of this Privacy Policy is to inform all users of our services about the necessary information related to the processing of personal data.
Controller of Personal Data
The controller of personal data is ALPOD d.o.o., Podskrajnik 112, 1380 Cerknica, registration number: 1274112000 (hereinafter referred to as the “controller” or “ALPOD”).
Scope and Purpose of Personal Data Processing and Storage
Your personal data will be carefully protected against loss, disclosure, alteration, or misuse.
Access to personal data is granted only to authorized employees and contractual processors, strictly to the extent and for purposes necessary to ensure the smooth execution of work processes, the provision of company services, and the fulfillment of rights and obligations arising from contractual agreements with the customer. We implement appropriate data security measures to prevent unauthorized access, maintain confidentiality and integrity, and protect data from loss or accidental destruction throughout the processing period.
We will process personal data exclusively based on a valid legal basis and for the purposes for which it was provided. Should it be necessary to use the provided data for any other purpose, we will notify you in advance and request your consent.
We collect and process your personal data for the following purposes:
- Purchasing and processing online orders in the ALPOD online store;
- Informing you about updates and sending other marketing materials to your email address or postal address provided in the online form (newsletter);
- Further communication with you to obtain feedback regarding the provided materials or services.
Processing of Personal Data for Registration Purposes
For the purpose of registration for online shopping, we collect and process the following personal data:
- First and last name,
- Postal address,
- Email address (also used as the username),
- Phone number,
- IP address,
- Password (stored in encrypted form),
- Date of last login,
- Date of account creation.
Processing of personal data for the purposes of purchasing in the online store and fulfilling the online order
When making a purchase in the online store, we collect and process the following personal data:
- Name and surname;
- Postal address;
- Email address;
- Phone number;
- Any other data that may be required for concluding the contract or fulfilling the order.
The data is mandatory for concluding and executing the sales contract between the buyer and ALPOD. Providing this information is a necessary condition for completing a purchase or concluding a contract.
Personal data collected during online store purchases is processed for the purposes of identifying the individual, informing them about any changes to the order or purchase, providing additional details and instructions related to the completed purchase, resolving potential complaints or disputes, and, most importantly, fulfilling the order.
Personal data collected for the purpose of completing an online purchase is processed based on the legal grounds of the contract. The registration phase for online shopping may also be based on consent if the individual registers but does not complete a purchase.
Processing of Personal Data for Subscribing to Newsletters and Notifications
You can subscribe to receive newsletters and notifications about offers, updates, promotions, and other activities on our website.
ALPOD uses a strict double opt-in system for newsletter subscriptions, which means we send emails only to individuals who explicitly agree to receive electronic notifications and confirm the authenticity of their email address.
For the purpose of subscribing to newsletters and notifications, we collect and process the following personal data:
- Name and surname;
- Email address.
These personal data are processed solely based on your consent, which you can withdraw at any time.
You can unsubscribe from the newsletter mailing list at any time by sending an email to marketing@alpod.si or by clicking the unsubscribe link included in any of the received newsletters. Due to the nature of our business process and technical limitations, you may still receive our emails within 15 days from the date of your unsubscription if the emails were already sent or are in the process of being sent. We apologize for any inconvenience this may cause and appreciate your understanding.
If you wish to delete the personal data we store for newsletter distribution, please notify us at marketing@alpod.si. Your deletion request must be sent from the email address you used to subscribe, or you must specify the email address you want to unsubscribe. We will delete your personal data within 15 days of receiving your request and notify you once the process is complete.
Processing of Personal Data via Website Cookies
ALPOD processes the personal data of online store visitors through website cookies.
For more information about the types, functionality, and use of cookies, please refer to our Cookie Policy.
General Provisions on the Processing and Storage of Personal Data
All data collected based on the aforementioned legal grounds will be used solely for the purposes for which it was collected and will not be disclosed to third parties without your consent.
In accordance with legal requirements, the data controller may disclose personal data to the following contractual data processors:
- Postal, delivery, and shipping service providers,
- IT service providers responsible for ensuring and maintaining software applications, websites, and IT systems, as well as developers and implementers of software solutions,
- Accounting services.
Data may also be used in a non-identifiable format for statistical purposes, such as website traffic analytics or statistics related to electronically concluded contracts.
For website traffic analysis, marketing, and service improvements, we use tools such as Google Analytics, Mailchimp, and Roomvo. These tools may collect personal data, including: IP addresses, Website visit data, Email addresses.
Personal data may be transferred and processed outside the European Union, particularly in the United States. We ensure that such transfers comply with GDPR requirements by implementing appropriate safeguards, including Standard Contractual Clauses (SCCs). For more details, please refer to the privacy policies of these service providers: Google (Google Privacy Policy), Mailchimp (Mailchimp Privacy Policy) in Roomvo (Roomvo Privacy Policy).
Retention Period
We ensure that personal data is retained only for as long as necessary to fulfill the purpose for which it was collected and used, specifically:
- Data collected for online store purchases will be stored for the duration of the contractual relationship and, based on legitimate interest, for as long as legal claims related to the contract can be asserted.
- Data subject to legal retention periods (e.g., accounting or tax records) will be stored in compliance with statutory requirements.
- Contact details collected for direct communication and marketing purposes will be stored until you withdraw your consent.
Once the specified retention periods expire, the data will be irreversibly and permanently deleted without delay.
Individual Rights
As the data controller, we ensure effective control over your personal data and enable you to exercise your rights in accordance with the General Data Protection Regulation (GDPR). You may request at any time: Access to your personal data, Correction of inaccurate or incomplete data, Completion of missing data, Deletion of data (“right to be forgotten”), Restriction of processing of your data, Objection to data processing, Data portability to transfer your data to another controller.
If we process your personal data based on your consent, you have the right to withdraw your consent at any time, either temporarily or permanently. Withdrawal does not affect the lawfulness of processing carried out based on consent before its withdrawal.
If you believe that your rights regarding personal data protection have been violated, please notify us in writing at: ALPOD, podjetje za trgovino in inženiring d.o.o. Podskrajnik 112, 1380 Cerknica, Slovenia or via email at: marketing@alpod.si. We will address any reported violations as soon as possible. You also have the right to file a complaint with the Information Commissioner of Slovenia if you believe your rights under GDPR have been infringed.
For further information regarding the collection and processing of your personal data, you can contact us at our registered address or via email at marketing@alpod.si.