Confidentiality Notice

When you visit our website for a short time, or until the end of the session at the most, we save your IP address. If our system detects that you have not performed any activities that could threaten the functioning of our website, this data is automatically deleted. 

If the system detects that you have performed any activities that are obviously illegal or aimed at disabling use of the website, your IP address is permanently saved and put on the black list of IP addresses by our system and, consequently, further use of the website is disabled.  

More details

Legal basis for the personal data processing: on the basis of own legal interest (Article (6(1)f of the General Data Protection Regulation), the controller also processes personal data to ensure the safety of the website and in order to prevent any illegal activities on the website (such as hacking, abuse of passwords, etc.).

Categories of users: website hosting as well as providers of security solutions. These users process personal data exclusively according to the controller’s instructions and under its supervision.  

Personal data is transferred to the USA on the basis of the standard contractual clauses (confirmed by Commission Decision no. 2010/87/EU), which are included in the personal data processing contract concluded with the provider in accordance with Article 28 of the General Data Protection Regulation (GDPR).

Storage period: until the end of the session at the longest (general rule) or permanently (in cases of attempted abuse).

Individual rights: objection, access to data, correction, limitations to processing. These rights can be enforced by sending a written application to the controller’ postal address or an email address to: [email protected]

Right to complain: complaints or appeals relating to personal data protection should be made to the information commissioner of the Republic of Slovenia.  

By registering for any of our events, it is considered that a contract has been drawn up between the controller and the user, whose content can be found in the General Terms and Conditions of Business. In order to know who has registered for an event and to enable them to take part in this event, as well as who the invoice should be sent to and to which email address information about the event should be sent, we require some personal data from you. If you do not wish to submit your personal data, unfortunately you will not be able to register for the event. 

More details

Legal basis for the personal data processing: implementation of Article (6(1)b of GDPR.

Storage period: 5 years from the end of the event or settlement of all obligations.

Users: website hosting provider, ERP provider, host email provider

Personal data is transferred to the USA on the basis of the standard contractual clauses (confirmed by  Commission Decision no. 2010/87/EU), included in the personal data processing concluded with the provider in accordance with Article 28 of GDPR.

Individual right: access to data, correction, limitations to processing. These rights can be enforced by sending a written application to the controller’ postal address or an email address to: [email protected]

Right to complain:  complaints or appeals relating to personal data protection should be made to the information commissioner of the Republic of Slovenia. 

We are always delighted to receive messages from our customers. In such cases our communication will take place on the basis of our legal interest, which is shown through the controller’s communication with the general public. If you do not want your information to be disclosed, unfortunately we will not be able to answer your questions, offers, etc. You may stop the communication anytime (you must inform us of this) and  your personal data will consequently be deleted.  

More details

Legal basis: legal interest (communication with the general public – Article 6(1)f of GDPR.

Categories of users: website hosting provider. The users process personal data exclusively according to the controller’s instructions and under its supervision. 

Personal data is transferred to the USA on the basis of the standard contractual clauses (confirmed by Commission Decision no. 2010/87/EU), which are included in the personal data processing contract concluded with the provider in accordance with Article 28 of the General Data Protection Regulation (GDPR).

Storage period: until the end of communication. Prior to that, you can request that the controller removes your data from its communication channels, and your personal data will consequently be destroyed if there is no other legal basis for further personal data processing (e.g. a contract).

 Individual rights: access to data, correction, limitation to processing, transferability. These rights can be enforced by sending a written application to the controller’ postal address or an email address to: [email protected]

Right to complain:  complaints or appeals relating to personal data protection should be made to the information commissioner of the Republic of Slovenia.

If you are interested in working with us (for example, by phone or through our website), or if you want us to send you an offer, we will commence a negotiation phase for the conclusion of a contract, which according to the GDPR means that the legal basis for processing your personal data will be ‘implementation of measures prior to the conclusion of a contract’. If you do not want to disclose your personal data, we will not be able to conclude a contract with you.  

If we find common ground and conclude a contract, we will also submit our offers on the basis of our legal interest (notification of our services) to your postal address or by phone. We will only process your email details and text notifications for the purpose of direct marketing if you give us your consent to do so at the time of conclusion of the contract or did not expressly state that you do not wish this.

You may unsubscribe from receiving direct marketing by sending us an email to: [email protected] or (in the case of email) by clicking on the link in the message received.

More details

Legal basis: implementation of measures prior to the conclusion of a contract and (in the case of conclusion of a contract) implementation of the contract - 6(1)b GDPR.

In cases where direct marketing is carried out by email or phone: Article 6(1)f GDPR (legal interest is implementation of direct marketing that is also described under Article 72 of the Personal Data Protection Act of the Republic of Slovenia – ZVOP-1). In cases where an individual becomes a purchaser of the controller’s services, the legal basis is the second paragraph of Article 158 of the Electronic Communications Act of the Republic of Slovenia – ZEKom-1. In the remaining cases, the legal basis is the consent of an individual according to Article 6(1)a of the GDPR.

Categories of users: host e-mail provider, ERP provider.

Personal data is transferred to the USA on the basis of the standard contractual clauses (confirmed by Commission Decision no. 2010/87/EU), which are included in the personal data processing contract concluded with the provider in accordance with Article 28 of the General Data Protection Regulation (GDPR).

Storage period: 5 years from the expiry of the contract or settlement of all obligations. Personal data needed for tax purposes: 10 years.

Individual rights: objection, access to data, correction, limitations to processing. These rights can be enforced by sending a written application to the controller’ postal address or an email address to: [email protected]

Right to complain: complaints or appeals relating to personal data protection should be made to the information commissioner of the Republic of Slovenia.

Your personal data is processed by the joint operators Palsit d.o.o. and GDPR PLUS d.o.o. for the purpose of implementation of the membership benefits and payment of the membership fee for GDPR planet.

The processing described above means that your personal data is processed on the basis of implementation of the contract represented by the GDPR Planet General Terms and Conditions of Business.

More details

Joint operators: Palsit d.o.o., Mednarodni prehod Vrtojba 2A, 5290 Šempeter pri Gorici and GDPR PLUS d.o.o., Poljanska cesta 19, 1000 Ljubljana

Legal basis: implementation of measures prior to the conclusion of a contract and (in the case of conclusion of a contract) implementation of the contract - 6(1)b of the GDPR.

Categories of users: gdprplanet.com website hosting provider, ERP provider and host e-mail provider (in the EU).

Storage period: 5 years from the expiry of the contract or settlement of all obligations. Personal data needed for tax purposes: 10 years.

Individual rights: objection, access to data, correction, limitations to processing. These rights can be enforced by sending a written application to the controller’ postal address or an email address to: [email protected]

Right to complain:  complaints or appeals relating to personal data protection should be made to the information commissioner of the Republic of Slovenia. 

We will be pleased if you sign up for our newsletters. Since we also hate spam, we promise that we will try to send useful e-news and offers that you will be happy to read. We will try to send only essential e-news in order to avoid unnecessary mail in your email inbox.

We will only send you e-news if you give us your consent. You may unsubscribe from receiving e-news at anytime by clicking on the link in the received e-mail.

More details

Legal basis: consent according to Article 6(1)a of the GDPR or the option to unsubscribe according to the second paragraph of Article 158 of ZEKom-1.

Categories of users: website hosting as well as providers of security solutions. These users process personal data exclusively according to the controller’s instructions and under its supervision. 

Personal data is transferred to the USA on the basis of the standard contractual clauses (confirmed by Commission Decision no. 2010/87/EU), which are included in the personal data processing contract concluded with the provider in accordance with Article 28 of the General Data Protection Regulation (GDPR).

Storage period: until cancellation.

Individual rights: objection, access to data, correction, limitations to processing. These rights can be enforced by sending a written application to the controller’ postal address or an email address to: [email protected]

An individual may unsubscribe from receiving e-news by clicking on the link in the e-mail received.

Right to complain:  complaints or appeals relating to personal data protection should be made to the information commissioner of the Republic of Slovenia.

In some of our facilities we carry out video surveillance. Notices are posted in places where video surveillance is in operation.

Video surveillance is primarily designed to protect our employees as well as to protect our property. 

We carry out video surveillance on the basis of our legal interest, which is demonstrated according to the purposes indicated above, and described under Article 75 of ZVOP-1.

More details

Legal basis: protection of the operator’s property and employees, which represents the operator’s legal interest according to Article  6(1)f GDPR. The video surveillance is also defined under Article 75 of ZVOP-1.

Categories of users: there are no external users.  

Storage period: 6 months after creation of the video recording, after which the recording is automatically deleted.  

Individual rights: access to data (where an individual must indicate the approximate time when an individual appeared in the recording, otherwise it is not possible to  determine it), correction, objection, limitations to processing and deletion. These rights can be enforced by sending a written application to the controller’ postal address or an email address to: [email protected]

Right to complain: complaints or appeals relating to personal data protection should be made to the information commissioner of the Republic of Slovenia.