Protection of personal data

Privacy policy and privacy statement

The personal data controller as defined by the EU General Data Protection Regulation (GDPR) and the applicable law governing the protection of personal data is:

Zlate vaje joge obraza.com, Andreja Korošak s.p. (goldenfaceyogaexercises..com)
Južna cesta 103
6310 Izola, Slovenia

Phone number: +386(0)31 237 328

Zlate vaje joge obraza.com, Andreja Korošak s.p., operator of the website goldenfaceyogaexercises.com, undertakes to store and process acquired personal data in accordance with the GDPR and aplicable Slovenian legislation (Personal Data Protection Act).

Obtaining personal data

We obtain personal information in the following way:

• when ordering products in the online store;
• when registering a user account;
• by telephone communication with the customer;
• in personal communication with the client;
• by e-mail communication with the customer;

What data do we collect?

For the needs for providing services of the company Zlate vaje joge obraza.com, Andreja Korošak s.p. (website goldenfaceyogaexercises.com)  we collect, proces and store the following data:

• name and surname,
• address and place of residence,
• e-mail address,
• user name,
• password in encrypted form,
• telephone number,
• other data that you, as a user, voluntarily enter in the form on the goldenfaceyogaexercises.com website.

Contact information you provide to us when you place an order/ inquiry/ application/ registration, we need to process your order and communicate with you. If you do not provide us with above contact information, we will not be able to process your order. The company Zlate vaje joge obraza.com, Andreja Korošak s.p. is not responsible for the accuracy of the data you enter as a user of our website.

Purpose of collecting and processing personal data

Order in the online store
We use the personal data to process your order. We use the data to issue an invoice and process the delivery. We won’t use the entered data in the future without your explicit consent.

User account:
We store personal data in user account for which we have obtained the prior consent of the user. Personal data can be changed by users and deleted at any time.

E-mail communication:
We use personal data to process your e-mail contact. We won’t use your personal data in the future without your express consent.

Transmission of personal data

We disclose personal data to law enforcement agencies and others goverment bodies if this is requred by law or it is necessary to prevent, detect or prosecute crimes and fraud.

We commit not to pass on your personal data to unauthorized persons or others persons for advertising purposes under any circumstances.

Your rights

In accordance with the provisions of the EU General Data Protection Regulation (GDPR), you have the following rights:

• acess to and copy your personal information
• to supplement or correct your personal data if it is incomplete or inaccurate.
• deletion of your personal data, especially if they are no longer necessary for the purposes for which they were collected or have been processed ilegally or have been collected with your consent which you have revoked and there is no other legal basis for their processing.
• until the transfer of personal data to another controller, where technically feasible.
• to limit the processing of your personal data, especially if you dispute their accuracy – for a period that allows us to verify the accuracy of your personal data; if the processing is illegal, you oppose the deletion of personal data; if the data retention period has expired and you need it to enforce legal claims.
• you can revoke your informed consent,

When exercising all your rights or obtaining additional information, please contact our data protection officer, who is available to you at the e-mail address: andreja.korosak@gmail.com. We will process and respond to your application in accordance with the GDPR.

If you believe that your rights or regulations on personal data protection have been violated, you can complain to the competent state authority:
Information Commissioner of the Republic of Slovenia
Zaloška 59
1000 Ljubljana, Slovenia
Telefon: 00386 1 230 97 30, Faks: 01 230 97 78, E-mail: gp.ip@ip-rs.si

Period of retention of personal data

If we have your explicit consent for a specific purpose of processing, the retention period is: until revoked. Legal processing referred to in Article 6.b of the GDPR – processing is required for the performance of the contract (retention period: 10 years), or for the implementation of measures at the request of such individual before the conclusion of the contract (retention period: 5 years).