Purposes of Personal Data Processing
The company (controller) Optimaplus d.o.o., Alpska cesta 62, 4248, processes personal data (first and last name, address, email address, telephone number, and information about the event the person attended or the product they ordered) solely for the following purposes:
To maintain records of participants in the controller’s events, including a record of how many events (and which ones) an individual has attended.
To maintain records of customers of products and services published on the website of Optimaplus d.o.o., www.davidhriberski.com.
To send email messages (newsletters) for the purpose of providing information about training, new products, new content on the website www.davidhriberski.com, services, or events within the company Optimaplus d.o.o., or events in which the aforementioned company participates or which it recommends.
To review sent email messages: which ones the individual opened or did not open, which links they opened or clicked (which content they read or viewed), and for how long they read or viewed individual content.
To segment individuals based on the information from the previous point and to subsequently send tailored (personalized) email messages with the aim of better (more relevantly) informing individuals and achieving a higher response rate to sent emails.
For the purpose of analyzing the user journey on the website: where the user arrived from (source of traffic), to monitor their time spent on the website, which pages they visited, and which content they downloaded or viewed.
All analysis and data management is solely for the internal records of Optimaplus d.o.o.
Ljubljana, 17 May 2018
Personal Data Protection
The company Optimaplus d.o.o. operates in accordance with the Personal Data Protection Act (ZVOP-1, Official Gazette of the RS, No. 94/2007) and the EU General Data Protection Regulation (Regulation (EU) 2016/679), and in the context of personal data protection, we guarantee the individual the following rights:
The right to request from the company Optimaplus d.o.o., as the controller of personal data, access to personal data and the following information at any time:
The purposes of the processing.
The types of personal data, the users or categories of users to whom personal data have been or will be disclosed.
The envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period.
The existence of automated decision-making, including profiling.
The reasons for it, as well as the significance and the envisaged consequences of such processing for the individual.
– A free copy of the personal data in a format specified by the individual (if the request is made by electronic means, and unless otherwise requested, the copy shall be provided in electronic form). For any further copies requested, the controller may charge a reasonable fee based on administrative costs.
– The correction of inaccurate personal data.
– The restriction of processing where:
* the individual contests the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data,
* the processing is unlawful, and the individual opposes the erasure of the personal data and requests the restriction of their use instead,
* the controller no longer needs the personal data for the purposes of the processing, but they are required by the individual for the establishment, exercise, or defense of legal claims.
– The erasure of all personal data (right to be forgotten), if the conditions set out in Article 17 of the General Data Protection Regulation are met, and in particular, in the case where I withdraw this consent for the processing of personal data.
– The receipt of personal data in a structured, commonly used, and machine-readable format, with the right to transmit those data to another controller without hindrance from the original controller.
– The cessation of the use of personal data for direct marketing purposes, including profiling.
– The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the individual or similarly significantly affects them, if the conditions set out in Article 22 of the General Data Protection Regulation are met.
– The right to lodge a complaint with the Information Commissioner against the controller if the individual believes that the processing of their personal data infringes the General Data Protection Regulation.
Procedure for Exercising the Individual’s Rights
I am aware that I can address all the above-mentioned requests concerning the exercise of rights in relation to personal data in writing to the controller at the email address david@davidhriberski.com.
I am aware that for the purposes of reliable identification in the case of exercising rights related to personal data, the controller may request additional information from me, and may refuse to act only if it can demonstrate that it cannot reliably identify me.
I am aware that the controller must respond to my request, with which I exercise my rights in relation to the above-mentioned personal data, without undue delay and at the latest within one month of receipt of the request.