Privacy Protection
When accessing our website, your browser transfers certain data to our web server. These transfers are of a technical nature and are necessary to access the desired information. For the purpose of ensuring the security of our information system, we automatically collect data in the web log about your IP address, date and time of access, time zone difference compared to Greenwich Mean Time (GMT), request content (specific page), access status or HTTP status code, amount of data transferred, the website requesting access, and your browser (operating system software version, browser language settings). You cannot use our website without providing at least your IP address, which will be recorded in the web log.
We will collect this data to ensure network and information security with the aim of preventing accidental events or illegal or malicious acts. The processing is therefore necessary due to our legitimate interests and is based on point (f) of Article 6 of the General Data Protection Regulation (GDPR).
Web log personal data will be processed for a maximum of 6 months, after which the data will be deleted unless we have another legitimate reason for further processing.
Contact Information
The personal data controller is: COST IN d.o.o. Vogrsko 157k, 5293 Volčja Draga, Slovenia, +386 5 301 2330, info@costin.si. The collected personal data will be processed by our employees and processors performing tasks within the scope of website operations.
Right of Access to Data
You have the right to check whether we are collecting personal data about you and, in this case, you have the right to access this data. If you wish to verify whether we are collecting personal data about you, you can request this in writing by email or post.
Right to Erasure (Right to be Forgotten)
You have the right to have us delete personal data concerning you without undue delay, and we as the controller have the obligation to delete your personal data without undue delay in the following cases:
Deletion will not be performed if the processing of personal data is necessary:
- if you object to the processing (see right to object),
- if we processed the personal data unlawfully,
- if we must delete the personal data to fulfill requirements in regulations,
- for fulfilling a legal processing obligation based on regulations,
- for asserting, exercising, or defending legal claims.
If you wish to have your personal data deleted, you can request this in writing by email or post. The right to erasure can only be exercised in the limited cases listed above.
Right to Rectification
You have the right to have us rectify inaccurate personal data concerning you without undue delay.
Taking into account the purposes of processing, you have the right to complete incomplete personal data, including by providing a supplementary statement.
If you wish to have your personal data corrected, you can request this in writing by email or post.
Right to Restriction of Processing
You have the right to obtain restriction of processing of your personal data in the case of:
If you request restriction for the stated reasons, we can only store your personal data, and can perform all other types of processing only:
- if you contest the accuracy of the data, for a period that allows us to verify the accuracy of the personal data,
- if the processing is unlawful and you object to the deletion of personal data and instead request restriction of its use,
- if we no longer need your personal data for processing purposes, but you need them for asserting, exercising, or defending legal claims,
- if you have filed an objection to processing, until it is determined whether our legitimate reasons prevail over your reasons.
With your consent, for asserting, exercising, or defending legal claims, to protect the rights of another natural or legal person, or due to an important public interest of the Union or Member State.
Before revoking (i.e., terminating) the restriction of personal data processing, we must inform you of the revocation.
If we have rejected your request for data deletion or you wish to only restrict the processing of your personal data, you can request by email or post that we restrict the processing of your personal data. The right to restriction can only be exercised in the limited cases listed above.
Right to Data Portability
Data that you have provided to us and that we have collected during your use of the service can be transferred. You can request the data in a portable format personally at our headquarters.
Right to Lodge a Complaint with the Supervisory Authority
Without prejudice to any other administrative or legal remedy, you have the right to lodge a complaint with the supervisory authority, particularly in the Member State where you have your habitual residence, where your place of work is located, or where the alleged infringement occurred, if you believe that the processing of personal data concerning you violates the General Data Protection Regulation.
The supervisory authority with which the complaint is lodged will inform you of the status of the matter and the decision on the complaint, including the possibility of a legal remedy under Article 78 of the General Data Protection Regulation.
As a data subject, you have the right to file a complaint at the following address:
Republic of Slovenia, Information Commissioner, Zaloška 59, 1000 Ljubljana, phone: 01 230 97 30, email: gp.ip@ip-rs.si
The Information Commissioner will inform you of the status of the matter and its decision on the complaint in accordance with regulations.
Personal Data Processors
Web hosting is provided by our processor.
Transmission of Personal Data
We will not transmit personal data to third parties or to third countries, except in cases specified by law, which mainly refers to cases where authorized persons or bodies would request the data.
