INFORMATION TO CUSTOMERS REGARDING DATA PROCESSING (PRIVACY POLICY)
1. Information about the controller:
EOS KSI, Upravljanje trejatev d.o.o., Letališka cesta 33, 1000 Ljubljana (hereinafter: operator)
2. Contact details of data protection officer (DPO):
MIKROCOP information engineering and services d.o.o., Ulica Ambrožiča Novljana 7, 1000 Ljubljana
Grega Vozel, DPO
dpo@mikrocop.com
tel. no. +386 (0)1 5874 280
3. Nature and purpose of data processing, legal basis, retention period
a. The operator processes the name, surname and e-mail address of interested business partners for the purpose of sending news with offers of real estate and receivables, as well as information about current auctions. The legal basis for the processing of personal data is the provision of Article 6 (1) a of the General Data Protection Regulation (hereinafter: GDPR) - consent of the data subject.
We will retain your personal data for 1 year, after which we will delete it.
b. When you visit our website https://eos-nepremicnine.si/ , your device's browser automatically sends data to our website's server. This data is temporarily stored in a log file. The following data is collected without your intervention and is automatically deleted after 3 days:
• IP address of the computer from which the data was obtained;
• date and time of access;
• name and URL address of the obtained file;
• the website from which you accessed it (referring URL);
• a web page obtained from our website;
• your computer's browser and possibly the operating system and the name of your access provider.
The specified data is processed for the following purposes:
• to ensure a smooth connection to the website
• to ensure comfortable use of our website
• to analyze the security and stability of the system and
• for other administrative purposes.
The legal basis for data processing is Article 6 (1) (f) GDPR. Our legitimate interest stems from the above-mentioned data collection purposes. We do not use the data in any way to draw conclusions about you (profiling).
In addition, when you visit our website, we use the following cookies that are absolutely necessary for the system to function:
4. Permitted processing and transmission of data
Personal data from point 3 will be accessed by the company Dizajn Projekt, d.o.o., Viškovo 42A, Viškovo, Croatia (hereinafter: the processor), which designed and maintains the online platform for the controller.
Method of data processing:
• acquisition of data: personal data of data subject is obtained by registering on the portal for news and notices regarding real estate and claims.
• entry of data into records, data retention and record keeping: the controller and processor have the authority to enter obtained personal data into their own records.
• use of data: the controller and processor may use the obtained data only for the purposes referred to in point 3. The processor may not use the obtained personal data for any other purpose
• transmission of data to third parties: the controller may forward the obtained personal data to a processor, who processes them on behalf and for the account of the controller
• return, deletion or destruction of data: after cancellation of consent and at the latest after 1 year of obtaining the data.
Personal data will be stored on the processor's servers. The servers are located in the EU, so there is no export of data to third countries.
Access to personal data is granted to authorized persons of the controller, processor.
5. Your rights:
The individual has the rights listed below in relation to personal data. Submit your request for information in writing to the address of the controller or the DPO.
The controller fulfills justified requests within one month, in the case of complex requests or a large number of requests, the deadline for fulfillment can be extended by another two months.
6. Individual rights:
a) Withdrawal of consent: Data subject has the right to withdraw consent (consent) for processing when the processing is based on consent, without affecting the legality of the processing based on consent before its withdrawal.
b) The right to access data: upon his request, we inform the data subject whether personal data is being processed in relation to him, and when this is the case, we provide the following information:
- types of personal data;
- user categories to whom personal data has been or will be disclosed;
- retention period;
- the existence of the right to request from the controller the correction or deletion of personal data or the restriction of data processing in relation to the data subject to whom the personal data refer or the existence of the right to object to such processing;
- the right to file a complaint with the Information Commissioner;
- when personal data are not collected from the data subject, all available information regarding their source;
- the existence of automated decision-making, including the creation of profiles, and meaningful information about the reasons for it, as well as the meaning and intended consequences of such processing for the data subject .
Based on the request, controller makes a copy of the personal data that is being processed and forwards it to the data subject.
c) Right to rectification: data subject may at any time request that the controller correct inaccurate data or complete incomplete data relating to him.
d) The right to delete data (the so-called right to be forgotten): An data subject can request that his personal data be deleted in the following cases:
- personal data are no longer needed for the purposes for which they were collected or otherwise processed;
- the data subject revokes the consent on the basis of which the processing takes place and when there is no other legal basis for the processing;
- the data subject objects to the processing of personal data, and there are no overriding legal reasons for their processing;
- personal data were processed illegally;
- personal data must be deleted to fulfill a legal obligation in accordance with EU law or Slovenian law.
e) Right to restriction of processing: An data subject may request that the processing of data relating to him be restricted when:
- the data is not accurate,
- the processing is illegal, but the data subject does not want us to delete the data,
- the data subject has filed an objection regarding the processing.
f) The right to data portability: data subject may request a printout of the data he/she has provided to the controller, whereby the processing of this data is based on consent and the processing is carried out by automated means. The data output will be prepared in a machine-readable format.
g) Right to appeal: An data subject can file a complaint with the Information Commissioner if he believes that his personal data is being processed illegally or if he believes that his rights have been violated, and he can also appeal to the competent court.
7. Protection of personal data
All data will be strictly protected in accordance with the GDPR, national law and the internal acts of EOS KSI and will not be used for other non-agreed purposes. The company implements appropriate technical and organizational measures to ensure a high level of security of personal data in its information systems and to ensure the rights of data subject.
8. The right to file a appeal with the supervisory authority
If you believe that data processing violates the provisions of the GDPR or national law you have the right to file a complaint with the supervisory authority in accordance with Article 77 of the GDPR, namely at the address:
Republic of Slovenia
Information Commissioner
Dunajska cesta 22
1000 Ljubljana
T: 01 230 97 30
F: 01 230 97 78
E-mail: gp.ip@ip-rs.si
This policy comes into effect on 09/22/2022
In Ljubljana, 22.09. 2022 EOS KSI, d.o.o.
1. Information about the controller:
EOS KSI, Upravljanje trejatev d.o.o., Letališka cesta 33, 1000 Ljubljana (hereinafter: operator)
2. Contact details of data protection officer (DPO):
MIKROCOP information engineering and services d.o.o., Ulica Ambrožiča Novljana 7, 1000 Ljubljana
Grega Vozel, DPO
dpo@mikrocop.com
tel. no. +386 (0)1 5874 280
3. Nature and purpose of data processing, legal basis, retention period
a. The operator processes the name, surname and e-mail address of interested business partners for the purpose of sending news with offers of real estate and receivables, as well as information about current auctions. The legal basis for the processing of personal data is the provision of Article 6 (1) a of the General Data Protection Regulation (hereinafter: GDPR) - consent of the data subject.
We will retain your personal data for 1 year, after which we will delete it.
b. When you visit our website https://eos-nepremicnine.si/ , your device's browser automatically sends data to our website's server. This data is temporarily stored in a log file. The following data is collected without your intervention and is automatically deleted after 3 days:
• IP address of the computer from which the data was obtained;
• date and time of access;
• name and URL address of the obtained file;
• the website from which you accessed it (referring URL);
• a web page obtained from our website;
• your computer's browser and possibly the operating system and the name of your access provider.
The specified data is processed for the following purposes:
• to ensure a smooth connection to the website
• to ensure comfortable use of our website
• to analyze the security and stability of the system and
• for other administrative purposes.
The legal basis for data processing is Article 6 (1) (f) GDPR. Our legitimate interest stems from the above-mentioned data collection purposes. We do not use the data in any way to draw conclusions about you (profiling).
In addition, when you visit our website, we use the following cookies that are absolutely necessary for the system to function:
| Name | Cookie PHPSESSID |
| Provider | The owner of this website |
| Purpose | This cookie is used by the application server. It is essential for the proper functioning of the application software. It does not store personal data. |
| Cookie name | jsessionid |
| Cookie validity | Session cookie - deleted when you exit the browser. |
| Name | cookieconsent_status |
| Provider | The owner of this website |
| Purpose | Necessary cookie that stores cookie banner confirmation. |
| Cookie name | cookieconsent_status |
| The validity of the cookie | 60 days |
4. Permitted processing and transmission of data
Personal data from point 3 will be accessed by the company Dizajn Projekt, d.o.o., Viškovo 42A, Viškovo, Croatia (hereinafter: the processor), which designed and maintains the online platform for the controller.
Method of data processing:
• acquisition of data: personal data of data subject is obtained by registering on the portal for news and notices regarding real estate and claims.
• entry of data into records, data retention and record keeping: the controller and processor have the authority to enter obtained personal data into their own records.
• use of data: the controller and processor may use the obtained data only for the purposes referred to in point 3. The processor may not use the obtained personal data for any other purpose
• transmission of data to third parties: the controller may forward the obtained personal data to a processor, who processes them on behalf and for the account of the controller
• return, deletion or destruction of data: after cancellation of consent and at the latest after 1 year of obtaining the data.
Personal data will be stored on the processor's servers. The servers are located in the EU, so there is no export of data to third countries.
Access to personal data is granted to authorized persons of the controller, processor.
5. Your rights:
The individual has the rights listed below in relation to personal data. Submit your request for information in writing to the address of the controller or the DPO.
The controller fulfills justified requests within one month, in the case of complex requests or a large number of requests, the deadline for fulfillment can be extended by another two months.
6. Individual rights:
a) Withdrawal of consent: Data subject has the right to withdraw consent (consent) for processing when the processing is based on consent, without affecting the legality of the processing based on consent before its withdrawal.
b) The right to access data: upon his request, we inform the data subject whether personal data is being processed in relation to him, and when this is the case, we provide the following information:
- types of personal data;
- user categories to whom personal data has been or will be disclosed;
- retention period;
- the existence of the right to request from the controller the correction or deletion of personal data or the restriction of data processing in relation to the data subject to whom the personal data refer or the existence of the right to object to such processing;
- the right to file a complaint with the Information Commissioner;
- when personal data are not collected from the data subject, all available information regarding their source;
- the existence of automated decision-making, including the creation of profiles, and meaningful information about the reasons for it, as well as the meaning and intended consequences of such processing for the data subject .
Based on the request, controller makes a copy of the personal data that is being processed and forwards it to the data subject.
c) Right to rectification: data subject may at any time request that the controller correct inaccurate data or complete incomplete data relating to him.
d) The right to delete data (the so-called right to be forgotten): An data subject can request that his personal data be deleted in the following cases:
- personal data are no longer needed for the purposes for which they were collected or otherwise processed;
- the data subject revokes the consent on the basis of which the processing takes place and when there is no other legal basis for the processing;
- the data subject objects to the processing of personal data, and there are no overriding legal reasons for their processing;
- personal data were processed illegally;
- personal data must be deleted to fulfill a legal obligation in accordance with EU law or Slovenian law.
e) Right to restriction of processing: An data subject may request that the processing of data relating to him be restricted when:
- the data is not accurate,
- the processing is illegal, but the data subject does not want us to delete the data,
- the data subject has filed an objection regarding the processing.
f) The right to data portability: data subject may request a printout of the data he/she has provided to the controller, whereby the processing of this data is based on consent and the processing is carried out by automated means. The data output will be prepared in a machine-readable format.
g) Right to appeal: An data subject can file a complaint with the Information Commissioner if he believes that his personal data is being processed illegally or if he believes that his rights have been violated, and he can also appeal to the competent court.
7. Protection of personal data
All data will be strictly protected in accordance with the GDPR, national law and the internal acts of EOS KSI and will not be used for other non-agreed purposes. The company implements appropriate technical and organizational measures to ensure a high level of security of personal data in its information systems and to ensure the rights of data subject.
8. The right to file a appeal with the supervisory authority
If you believe that data processing violates the provisions of the GDPR or national law you have the right to file a complaint with the supervisory authority in accordance with Article 77 of the GDPR, namely at the address:
Republic of Slovenia
Information Commissioner
Dunajska cesta 22
1000 Ljubljana
T: 01 230 97 30
F: 01 230 97 78
E-mail: gp.ip@ip-rs.si
This policy comes into effect on 09/22/2022
In Ljubljana, 22.09. 2022 EOS KSI, d.o.o.