Privacy
Policy

We collect, process, store and protect personal data in accordance with applicable personal data protection legislation, electronic communications legislation and the General Data Protection Regulation (EU) 2016/679 (GDPR).

1) Controller of personal data

The controller of your personal data is: PeK Automotive d.o.o., Obrtniska ulica 17, 1370 Logatec.

Registration number: 8451273000
Tax code: SI 41693744
Telephone: +386 30 777 050
E-mail: legal@pekauto.com

The controller does not have a Data Protection Officer. If you have any questions regarding the processing of your personal data, you can contact us by telephone or by email listed above.

2) How we obtain your personal data

We process and collect personal data if you provide it to us or we obtain it from your visit to the website when:

• you use or visit our website, we obtain personal data through cookies or other technologies;
• you sign up for our newsletter;
• you contact us through various channels, including social media;
• you send an inquiry or enter into a contract with us;
• similar cases where you have chosen to provide us with your personal data.

3) Types of personal data, purposes of processing your personal data and legal basis

Any personal data you provide to us will be treated confidentially and will only be used for the purposes for which we obtained it. If there is a need to further process your personal data for another purpose, we will contact you and request your consent.

How we obtain your personal data and what personal data we process

When you visit our website: We obtain technical information that we automatically collect when you use our website. This information may include, but is not limited to, device data, log data, web requests, data sent in response to such requests, browser type, browser language, timestamp for the request, and other anonymous statistics related to the use of our website. This information, by itself, cannot be used to identify or contact you.

However, if we automatically combine this information with other, non-personal information, we will treat the combined information as personal information in accordance with our Privacy Policy. We obtain this information through use of cookies and other technologies.

Until you provide your personal data, such as your name or email address, any data that we automatically collect when you use the website remains anonymous data through which we cannot and do not identify you.

When you fill in the contact forms on our website: For the purposes of conducting our business, sending you an offer based on an inquiry received, recruitment purposes, and newsletter sign-up, we collect the following personal data:

• name and surname, address, and place of residence;
• email address;
• telephone number;
• any other personal data that you voluntarily enter in the form on the website or provide to us by e-mail or telephone.

Legal bases and purposes for processing personal data

We only process your personal data:

• based on your prior consent, Article 6(1)(a) GDPR;
• if processing is necessary for the performance of our contractual obligations towards you or to take steps at your request prior to entering into a contract, Article 6(1)(b) GDPR;
• if processing is necessary for compliance with legal obligations, Article 6(1)(c) GDPR;
• if processing is necessary for our legitimate interests, Article 6(1)(f) GDPR.

Examples of processing based on legitimate interests include optimizing the website, answering questions you send us through various channels, ensuring the security of IT systems, and preventing abuse or fraud.

4) Transfers of personal data to third parties and third countries

We may share your personal data with third parties only as set out in our Privacy Policy:

• With our service providers, business partners and contractors: These entities provide services on our behalf or support our business operations. We disclose your personal data where necessary to fulfill our obligations to you and only to the minimum extent possible.
• With law enforcement authorities: We may report practices that we reasonably believe to be unlawful or that may assist law enforcement investigations against unlawful activity.
• When required by law: We may disclose your personal information when required by law, regulation or official order, to protect the safety of any person, to prevent fraud or abuse, or to protect our rights or property.

We do not transfer the personal data collected to other third parties or to third countries without an adequate level of protection.

5) Consent of a minor

We are committed to protecting children's online privacy and internet safety. We do not offer goods and services to children, nor do we knowingly collect or solicit personal information from children under the age of 15.

If we receive communications that we reasonably and intelligently believe to be from a child under the age of 15, we will not retain them. We encourage parents or guardians to regularly check and monitor children's use of email and other online activities.

6) Automated decision-making and profiling

Individuals' personal data is not subject to automated decision-making, nor are they subject to profiling.

7) Data protection

We are committed to protecting your personal data and have implemented appropriate security measures to guard against unauthorized access, alteration, disclosure, or destruction of data. These measures include internal reviews of our data collection, storage, and processing practices.

We restrict access to personal information to our employees, service providers, and representatives who need to know it to develop or improve our services.

Please be aware that our website provides links to other websites that are not owned or operated by us. Your use of third-party services is optional. We are not responsible for the content or practices of third parties.

8) Information on the rights of the individual

You have the right to:

• withdraw consent to the processing of personal data at any time;
• be informed and obtain confirmation as to whether we are processing your personal data;
• access and receive a copy of your personal data;
• correct inaccurate personal data and complete incomplete personal data;
• request erasure in specific cases;
• request restrictions on processing in certain cases;
• data portability, where applicable;
• object to processing based on legitimate interest, including direct marketing;
• challenge decisions based solely on automated processing, including profiling;
• lodge a complaint with a supervisory authority.

You can lodge a complaint with the Information Commissioner, Dunajska 22, 1000 Ljubljana:
E-mail: gp.ip@ip-rs.si
Telephone: +386 1 230 97 30
Website: www.ip-rs.si

You may contact us at any time via e-mail: legal@pekauto.com and/or at +386 030 777 050 regarding any of the above rights.

We will ensure that your request is fulfilled within one month at the latest. The first copy of your personal data in electronic or physical form is free of charge, however each additional copy may be subject to a fee.

9) Retention period of personal data

We will retain personal data for as long as necessary to fulfill the purpose for which the personal data was collected and further processed. Personal data processed on the basis of consent will be stored until consent is withdrawn. Personal data collected on the basis of legitimate interest will be retained for 5 years.

Anonymized data may be kept for longer in a manner and form that prevents the data from being traced back to you.

The retention period may vary depending on applicable sectoral legislation. Where such legislation mandates specific retention periods, we will delete the personal data after the legally prescribed period has expired.

10) Security

All personal data will be strictly protected in accordance with applicable data protection regulations and the internal rules of the controller. The Company will implement appropriate technical and organizational measures to ensure the security of personal data and safeguard the rights of data subjects.

Despite our efforts to ensure security, our systems may be subject to hacking. In the event of modification, disclosure or destruction of personal data, the data subject will be notified by e-mail.

11) Links to other websites

Our website may contain links to third-party websites. These sites have their own privacy policies, which you should read yourself as we do not accept responsibility for them.

12) Links to social networks

Our website may contain links to social networks, including Facebook and LinkedIn. When you click on the icon for any social network, you will be redirected to the respective platform. Processing of personal data by these social networks is conducted by the respective social networks in accordance with their privacy policies.

Facebook: processing of personal data is made by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Privacy Policy: facebook.com/privacy/policy

LinkedIn: processing of personal data is made by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Privacy Policy: linkedin.com/legal/privacy-policy

13) Changes to the Privacy Policy

We reserve the right, at our sole discretion, to update, modify or replace any part of the Privacy Policy by posting the update or modification on the website without prior notice. Any changes will become effective as of the date of public posting of the amended Privacy Policy on our website.