Personal Data Protection and Privacy Policy

We handle your personal data in accordance with the law, fairly, securely and transparently. We process personal data in accordance with European legislation (Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data – the General Data Protection Regulation (GDPR)), the applicable Slovenian legislation on personal data protection (ZVOP-2) and other legislation.

1. Data controller

ReFiT družba za vzdrževanje, načrtovanje in trgovino d.o.o.
Šmartinska cesta 32, 1000 Ljubljana
VAT ID: SI 10251456
E-mail: info@refit.si  ·  Phone: +386 (0)70 910 970

2. Purpose of processing

We process your personal data in order to fulfil contractual obligations, respond to enquiries, meet legal obligations (accounting, tax regulations), pursue legitimate interests (security) and on the basis of your consent (e.g. newsletters).

3. Types of data we collect

• Identification data (first name, surname, company name)
• Contact data (phone, e-mail, address)
• Content of enquiries and correspondence
• Technical data about your use of the website (see the Cookie Policy)

4. Legal bases

• Contractual obligation (Art. 6(1)(b) GDPR)
• Legal obligation (Art. 6(1)(c) GDPR)
• Legitimate interest (Art. 6(1)(f) GDPR)
• Consent (Art. 6(1)(a) GDPR)

5. Disclosure of data to third parties

We disclose your data only to contractual processors (accounting, IT maintenance, e-mail and cloud providers, advertising – where this is included on the basis of your consent). We do not sell data to third parties.

6. Retention period

We retain personal data only for as long as is necessary for the purpose for which it was collected. Enquiries are generally kept for up to two years from the last contact, unless a different period follows from the content.

7. Your rights

• the right of access to data
• the right to rectification of inaccurate data
• the right to erasure («the right to be forgotten»)
• the right to restriction of processing
• the right to data portability
• the right to object to processing
• the right to withdraw consent
• the right to lodge a complaint with the supervisory authority (Information Commissioner, www.ip-rs.si)

You can exercise your rights by submitting a written request to info@refit.si or by post to the address above.

8. Security measures

We implement appropriate technical and organisational measures to protect personal data against loss, destruction, unauthorised access or disclosure (HTTPS, access rights, regular updates, confidentiality commitments by employees).

9. Cookies

For details on the use of cookies, see the Cookie Policy.

10. Changes to the policy

We reserve the right to change this policy. The current version is always published here.