Privacy Policy

1. General

This Privacy Policy governs the collection, storage, and processing of personal data, managed by Emporij, d.o.o., Riharjeva Street 38, 1000 Ljubljana, registration number: 6101836000 (hereinafter referred to as: Emporij).

At Emporij, we recognize the importance of protecting personal data, therefore we handle your data in accordance with the current regulations governing personal data protection (Personal Data Protection Act, hereinafter ZVOP-2), and the General Data Protection Regulation (hereinafter referred to as: GDPR).

The purpose of the Privacy Policy is to inform individuals about the basis and purposes of the processing of personal data by Emporij and the rights of individuals in this area.

Emporij obtains personal data of individuals in the following ways:

  • directly provided by individuals, these are participants of events and social gatherings who undergo the appropriate registration or sign-up process through websites owned by Emporij;
  • recipients of electronic messages who have consented to the processing of personal data for direct marketing purposes (as permissible by law) and individuals visiting the Emporij company's website;
  • automatically (cookies on our website);
  • from publicly accessible records or public sources (public registries, databases, internet applications, social networks, or other public information sources).

We commit not to disclose your personal data to third parties, except as described below and/or unless we are legally obliged to do so.

The users of personal data are employees of Emporij or contractual partners of Emporij as processors, who are bound by labor law, data processing agreements in accordance with GDPR, or confidentiality agreements, to respect and protect the personal data of individuals.

 

2. Legal Bases for Processing Personal Data

  • Processing of personal data on a legal basis
    Processing of personal data at Emporij d.o.o. is based on the currently valid legislation governing the protection of personal data, electronic communication, and relevant European legislation.

  • Processing of personal data based on individual consent
    Processing of personal data may also be based on the specific consent of the individual, allowing Emporij d.o.o. to use their personal data for purposes defined in the consent.
    Entering into a contract with Emporij is not conditioned upon giving consent. Giving consent is voluntary, and if the individual decides not to give it or later withdraws it, this does not reduce their rights arising from the business relationship with Emporij d.o.o. nor does it incur additional costs.

  • Processing of personal data on a contractual basis
    Processing of personal data is necessary for the performance of a contract in which the business partner, to whom the personal data refer, is a contractual party, or if the individual to whom the personal data refer acts in the sphere of the business partner, or for carrying out measures at the request of such an individual prior to entering into a contract.
  • Processing of personal data based on legitimate interest
    The processing of personal data is based on the execution of our legitimate interest, which is not overridden by the individual's interest in data protection.

3. Withdrawal of Consent by the Individual

Consent is given for the purposes defined in the consent and is valid until revoked. When an individual partially or wholly revokes their consent, Emporij d.o.o. will no longer use their data for the purposes for which the withdrawal was made. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

If an individual wishes to revoke consent, they may do so by sending a request to the email address: info@emporij.net. Emporij d.o.o. will record the individual's request for withdrawal in its system and begin enforcing it immediately or at the latest within one month after receiving the request.

 

4. Purpose of Processing

All collected data and information at Emporij are processed for the purposes of:

  • providing its services,
  • distribution of products by Emporij d.o.o. (B2B segment)
  • fulfilling contractual obligations with other business partners, whose clients are product consumers (banks, accompanying activities—accounting, cleaning, professional services);
  • notifying about offers, innovations, and benefits,
  • organizing social events,
  • fulfilling contractual obligations with suppliers and customers,
  • preparing anonymized analyses, optimizing its business,
  • carrying out direct marketing and research
  • promotions or marketing of brands owned by Emporij d.o.o. in the following (by way of example, but not exclusively) legally permissible ways: by sending newsletters, notifications about innovations, trends, activities of the organizer, Emporij d.o.o. and its brands, invitations to events, organizing prize games, other marketing campaigns, with publications by Emporij d.o.o., its partners, on social networks, event website, organizer's website and event partners' websites, in electronic newsletters, on portals and channels of media houses that show interest, and in publications and other promotional activities of the organizer.

 

5. Photography at Social Events

Social events organized by Emporij d.o.o. may be photographed or recorded. Images or video materials may be used and publicly published by Emporij without restrictions. 

 

6. Retention Period

The retention period for personal data depends on the basis for processing and the purpose of processing each category of personal data. Personal data are stored for no longer than 10 years or only as long as necessary to achieve the purpose for which they were collected or further processed. Personal data processed based on consent are kept until the consent is revoked, if earlier. Personal data are deleted, destroyed, blocked, anonymized, or pseudonymized after fulfilling the purpose of processing, unless another legal basis exists or if necessary for the establishment, exercise, or defense of legal claims.

 

7. Transfer/Export of Personal Data

Emporij may transfer parts of individuals' personal data to business partners if the transfer is necessary for the performance of a contract and support of business processes in the execution of the contract, if individuals have given their consent for this. More detailed information about data transfer to business partners within Slovenia or to third countries and data processing contracts with standard contractual clauses can be obtained based on a request sent to the email address: info@emporij.net.

In the case of data export to third countries, it is carried out based on EU standard contractual clauses.

Personal data (photo, video, and audio content) are exported to third countries (Meta is a signatory to the "Data Privacy Framework") by being published on social networks.

 

8. Rights of the Data Subject

  • Right of access by the data subject:
    If an individual wishes to obtain information about the personal data the controller, Emporij d.o.o., holds about them, they have the right to request the following information: the purpose of processing, users of personal data, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period, where processing of personal data is based on individual consent, the existence of the right to withdraw consent at any time, in case personal data were not collected from the individual to whom they relate, all available information regarding their source, the right to lodge a complaint with the Information Commissioner, the existence of the right to request from Emporij access to, correction or deletion of personal data or restriction of processing concerning the individual, the existence of the right to object to such processing, the existence of the right to data portability.
  • Right to rectification:
    The individual has the right to have Emporij correct inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, the individual has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

  • Right to erasure:
    The individual has the right to have Emporij delete personal data concerning them without undue delay, and Emporij must delete personal data without undue delay where one of the following grounds applies: (1) personal data are no longer necessary for the purposes for which they were collected or otherwise processed, (2) the individual withdraws consent on which the processing is based and where there is no other legal ground for the processing, (3 ) the individual objects to the processing and there are no overriding legitimate grounds for the processing, (4) personal data have been unlawfully processed, (5) required by law.

  • Right to restriction of processing:
    The individual has the right to restrict processing by Emporij where one of the following applies: (1) the individual contests the accuracy of the data, for a period enabling Emporij to verify the accuracy of the personal data, (2) the processing is unlawful and the individual opposes the erasure of the personal data and requests instead the restriction of their use, (3) Emporij no longer needs the personal data for the purposes of the processing, but they are required by the individual for the establishment, exercise, or defense of legal claims, (4) the individual has objected to processing pending the verification whether the legitimate grounds of the controller override those of the individual.

  • Right to data portability:
    The individual, to whom the personal data relate, has the right to receive the personal data concerning them, which they have provided to Emporij, in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller without hindrance from Emporij, where the processing is based on written consent and carried out by automated means.

  • Right to object:
    The individual, to whom the personal data relate and whose processing is necessary for the purposes of legitimate interests, has the right to object to such processing. In this case, Emporij must cease processing personal data, unless it demonstrates compelling legitimate grounds for the processing which override the interests of the individual. An individual whose personal data are processed for direct marketing purposes has the right to object to such processing, and Emporij must in this case cease processing personal data for these purposes. The individual can exercise their rights described above in a way that allows their identification, by sending a request to the email address: info@emporij.net. Emporij is obliged to respond to the individual's request in a concise, transparent, understandable, and easily accessible form, and in clear and simple language, in writing or electronically, without undue delay and at the latest within one month from receiving the individual's request.

  • Right to lodge a complaint:
    If an individual believes that their rights have not been appropriately addressed by Emporij d.o.o., they have the right to file a request in accordance with the law governing the general administrative procedure, in which they request the supervision of the legality of the processing of their personal data and may also propose necessary action in the event of identified violations, so as to achieve the establishment of a lawful state, if they believe that personal data are being stored or otherwise processed contrary to the applicable regulations governing the protection of personal data, at the Information Commissioner of the Republic of Slovenia, gp.ip@ip-rs.si).

    Any changes to the Privacy Policy will be published on the EMPORIJ D.O.O. website.
     

9. Websites Owned by Emporij

The purpose of each website is to inform and acquaint the wider public about the activities and innovations of the company Emporij and the brands it markets.

 
The personal data controller, Emporij, owns the following websites:
• Emporij.net; emporij.net
• Why.si; why.si
• Cocktails.si; cocktails.si
• Registriraj.se; registriraj.se


All content located on the websites of Emporij is informative in nature and is intended primarily for informing. The website owner commits to doing everything in their power to ensure that the published data are true, reliable, and of high quality. However, they are not responsible for any content errors and for delays and deficiencies in entering up-to-date data. The website owner reserves the right to change content, specifications, and availability of services or products at any time and without prior notice.

If a website contains links to other websites that are completely independent of the aforementioned websites, Emporij is not responsible for the accuracy, completeness, or authenticity of the information contained in such links or on other websites. Access to such websites is at each individual's own risk .

 

10. Use of Cookies

An individual may delete, exclude, or conditionally use cookies with certain settings, but consequently, the individual will not be able to use all the features of the website to their fullest extent. The personal data controller may use data produced by cookies, separately or in combination with the personal data provided by the individual, to evaluate the use of the website, to produce reports on website activities, statistical data analysis, and to provide further services related to the use of the website.

More information at the page: emporij.net/piskotki



11. Consents Related to Signing Up for Emporij's E-Newsletters:

By completing the form to sign up for receiving e-newsletters from Emporij about current trends and news, offers, and prize games, the user agrees to the forwarding of data, which according to the law are considered personal data. In this case, these are:

  • email and IP address of the device from which the subscription is made.


Upon registration, the user has the option to agree to the use of personal data for the following purposes:

[1] Consent for notification or receiving information and notifications about new trends, events, new services or articles, and other interesting facts about Emporij.

  • use of data for sending regular e-newsletters about current trends and news from Emporij
  • use of data for occasionally sending other content, such as event notifications and similar
  • export, storage, and processing of data in a marketing automation tool, which allows us to send these newsletters
  • export, storage, and processing of data in a marketing automation tool that helps us continuously monitor your activities on all Emporij websites, allows us to perform the ordered services, contacting related to your activities on Emporij's websites, and aggregated and anonymized analyses of portal use and its contents.
  • All personal data are used exclusively for the purposes of performing our services, anonymized analysis, and optimizing our operations and are not accessible to the public, except in the case when the user expressly permits such purposes with specific consent
  • data processing with pseudonymization (so that they cannot be attributed to a specific individual)

By signing up for the e-newsletters of Emporij d.o.o., you declare that:

  • you agree to the processing of your personal data by the company Emporij d.o.o. (personal data controller and data processor),
  • you permit the company Emporij d.o.o., based on the data provided, to establish, collect, manage, use, process, and store your data in its contact databases and other data for the purposes defined above,
  • you are informed of the Privacy Policy of Emporij d.o.o., which is published on the website emporij.net, in which the rights related to the protection of personal data are defined,
  • you are over 18 years old and that the information you provide is true and reliable.

The company Emporij d.o.o. commits to processing the collected personal data only for the purposes defined above. In case there is a need for different processing or for forwarding data to third parties, we will contact you in advance and ask for your consent.