1. PERSONAL DATA PROTECTION POLICY
Registered company name: WH, WITCH HAZEL d.o.o.
Company headquarters: Bled, Slovenia
Business address: Savska cesta 17
The person responsible for the personal data collection is the head of the department that uses the personal data from the database.
Contact address of the data protection officer: info@witchhazel.eu
WH, WITCH HAZEL d.o.o. as a contractor will always follow the high standards of the European GDPR when processing personal data so that it has an internal system of organisation of work (implementation) and supervision in place to enable compliance under this regulation. WH, WITCH HAZEL d.o.o. undertakes to always be able to demonstrate the level of processing and the system of internal organisation that enables it.
1.1 Use, scope and purpose of storage and treatment
We store and process personal data for the purposes of keeping in touch with customers, marketing information by email, promoting sales and profiling customers with the aim of tailoring content and product offerings to customers in email and on websites.
When emails are sent, we record the impressions on the page and the clicks on links in the messages. For a better and more focused offer and to customise subsequent messages, we automatically process, analyse, profile and assess our customers’ interest in sent messages. Based on recorded data and profiles created, we do not perform automated decision making.
For the purpose of email notifications, we store your email address, name, surname and gender.
We collect personal data with the express consent or consent of individuals. Consents are kept together with the content of the form with which they were obtained.
Personal data is used by a number of sections: sales, marketing, customer support and accounting.
We keep personal data collections in the territory of the Republic of Slovenia and do not transfer them to other countries.
1.2 Retention period
If the above-mentioned purposes in our company cease to store and process personal data, we will delete the databases intended for the purpose of which it has ceased to be deleted immediately and permanently.
After the withdrawal of the individual’s consent, his/her personal data is removed permanently without delay.
We keep information about impressions of received messages and clicks on links in incoming messages for 12 months from the sending of the message.
1.3 Individual rights
Any individual may, at any time, request for his or her data, including insight, correction, complete deletion, interruption of processing and retention or withdrawal of consent for processing and storage.
In the event that our company wishes to further process personal data for a purpose other than the purpose for which the personal data was collected, we will provide the data subject with a free choice of consent and provide it satisfactorily.
The withdrawal of consent by an individual does not affect the lawfulness and eligibility of the processing which, on the basis of consent, was carried out until the cancellation.
The silence of an individual will never be regarded as his/her consent to the proposed selection. We will always make sure that the will of the individual is expressed accurately and freely. Only in this way, we will use the data collected for the collections that we process. In unsociable situations, the individual’s consent will be interpreted restrictively.
Any individual may, at any time, make a complaint to the supervisory authority information commissioner in the Republic of Slovenia if he/she considers that he/she has been violated in any way by the protection of his/her personal data.
Information Commissioner of the Republic of Slovenia, Zaloška 59, 1000 Ljubljana: https://www.ip-rs.si
We will do everything in our power to help the individual exercise his/her rights.