PERSONAL DATA PROTECTION

Privacy Policy

We take your privacy seriously. We process personal data lawfully, fairly and transparently and protect it in accordance with applicable data protection legislation.

This Privacy Policy explains what personal data PRO COMMERCE, d.o.o. processes, for what purposes and on which legal bases, how long we retain it, to whom it may be disclosed, and what rights you have in relation to the protection of your personal data. This Policy applies to data obtained through our website, online store and other communication channels.

1. Data Controller

PRO COMMERCE, d.o.o.
Stritarjeva ulica 5, 4000 Kranj, Slovenia
Company Registration No.: 5288886000
VAT No.: SI13625659
Email: info@procommerce.si
Phone: +386 (0)4 280 06 00

2. Personal Data We Process

Depending on how you interact or do business with us, we may process in particular:

  • the first and last name and contact details of the contact person,
  • company name and address and other information required for business cooperation,
  • email address and telephone number,
  • the content of messages, enquiries and other business communications,
  • information relating to quotations, orders, deliveries, complaints and invoices,
  • information you provide when using forms or other website functions,
  • technical data generated when using the website, such as IP address, browser and device information, and information related to the use of cookies.

3. Purposes and Legal Bases for Processing

Purpose Legal basis Examples
Enquiries and preparation of quotations Taking steps prior to entering into a contract or legitimate interests in B2B communications Responding to an enquiry, preparing a quotation, providing advice
Processing orders and managing contractual relationships Performance of a contract and legitimate interests in conducting business with legal entities Orders, deliveries, communications, complaints
Accounting and tax obligations Legal obligation Invoices, accounting records and other documentation required by law
Newsletters and electronic marketing where consent is required Consent Email newsletters and other marketing communications for which you have given valid consent
Security and reliable operation of the website Legitimate interests Preventing misuse, ensuring information security and resolving technical issues
Analytics and other optional technologies Consent, where required by law Optional analytics, performance or marketing cookies and related technologies

Where processing is based on legitimate interests, we take into account the nature of the data, the reasonable expectations of the individual, and their rights and freedoms. Individuals may object to such processing in the circumstances provided for by the GDPR.

4. Are You Required to Provide Personal Data?

Providing data required to prepare a quotation, enter into or perform a contract, or comply with legal obligations is necessary for us to provide the relevant service. If you do not provide such data, in certain cases we may be unable to prepare a quotation, process an order or provide another requested service.

Providing data for purposes based on consent is voluntary, and refusing to give consent does not affect your ability to do business with us.

5. Retention of Personal Data

We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as required by applicable legislation.

  • Enquiries and business communications: for as long as necessary to handle the enquiry and any subsequent business communication, or until the expiry of periods relating to potential legal claims.
  • Contractual and order documentation: for the duration of the business relationship and thereafter for as long as necessary to comply with legal obligations or to establish, exercise or defend legal claims.
  • Accounting and tax documentation: for the periods prescribed by applicable accounting and tax legislation.
  • Data processed on the basis of consent: until consent is withdrawn or the purpose for which consent was given has expired, unless otherwise provided by law.
  • Technical data and cookies: according to the purpose and duration of the relevant cookie or technology.

Once the relevant retention period has expired, we delete or anonymise the data, or otherwise cease processing it, unless another lawful basis exists for its continued retention.

6. Who We May Share Personal Data With

We disclose personal data only where necessary for a specific purpose and where an appropriate legal basis exists. Recipients or categories of recipients may include:

  • hosting, IT support and technical maintenance providers,
  • providers and technical operators of the online store platform,
  • delivery services, logistics partners and other service providers required to fulfil an order,
  • accounting, legal and other professional service providers where necessary,
  • competent public authorities where disclosure is required by law,
  • other service providers we use for our business operations or website functionality where they have access to personal data.

Where an external service provider acts as a processor of personal data on our behalf, the processing is governed in accordance with applicable data protection legislation and the provider may process the data only for the