PERSONAL DATA PROCESSING
1. Data Controller and Contact Details
At Birografika BORI d.o.o., we recognize the importance of protecting personal and other confidential business information of our business partners, visitors to the BORIklik web portal located at www.boriklik.si, and all stakeholders therein. Therefore, we strictly comply with the provisions of the General Data Protection Regulation, national legislation, and our internal rules on the protection of personal and other confidential business data. We implement organizational, physical, technical, and informational measures to protect personal data against destruction, loss, alteration, unauthorized disclosure, or access.
This policy applies to the processing (use) of any personal data of users of the BORIklik web portal, which is located at www.boriklik.si and is carried out by Birografika BORI d.o.o. (the controller) or on behalf of the controller.
Controller details:
Birografika BORI d.o.o.
Linhartova cesta 1
1000 Ljubljana
Registration number: 5183472000
Phone: 01 47 20 410
Email: info@birografikabori.si
Which personal data we process
- data collected during registration on the BORIklik web portal (first and last name, address, delivery address, email address, telephone number),
- data provided when placing an order (first and last name, delivery address, billing address, email address, telephone number, photographs showing any information related to a specific or identifiable individual, payment details, details of the time and subject of purchase)
- data for order fulfillment (first and last name, delivery address, billing address, email address, telephone number, details of the time and subject of purchase, quantity purchased, price, payment method, payment date, invoice details, images showing any information related to a specific or identifiable individual),
- data related to the use of BORIklik for analytics (link clicks, time spent) and data related to BORIklik users’ responses to commercial messages (whether and when a message was opened, which links the user clicked), with analytics data being anonymized,
- data for processing any of your inquiries, complaints, claims and other requests (first and last name, address, email address, telephone number, details of the time, content, manner, and subject of handling these requests),
- based on your explicit consent and solely for the purposes for which you gave consent upon registration in BORIklik.
2. Purposes and Legal Bases for the Processing of Personal Data
At Birografika BORI d.o.o., we process customers’ personal data within and for the purpose of fulfilling contractual relationships. Based on a contractual legal basis, personal data are processed to the extent necessary for the conclusion and performance of contracts, during negotiation phases, after receipt of an offer or inquiry from an individual, during the execution of an order, and in the claims handling phase.
We also process individuals’ personal data based on certain statutory legal grounds, such as international treaties, EU regulations, and national laws, which require that in certain cases we provide personal data to state authorities and other controllers to fulfill our or their legal obligations or competences.
Birografika BORI d.o.o., on the basis of legitimate interest, processes personal data for the purpose of reducing the risk of hacker attacks and other unauthorized intrusions into information systems or their components (ensuring information security, reducing the risk of unauthorized access to important business information, personal data, and the information system), for collecting orders and executing purchases via the BORIklik web portal, optimizing business decisions (protection of our economic interests), and for statistical processing aimed at preparing anonymized reports for management and supervisory bodies.
In certain cases, we ask users of the BORIklik web portal and other individuals to consent to the processing of their personal data for notifications, direct marketing, and marketing research. In such cases, processing takes place within the scope permitted by the individual's statement, for the purposes and through the agreed communication channels, until consent is withdrawn.
|
PURPOSE OF PROCESSING |
LEGAL BASIS |
|
Access and registration on the BORIklik web portal |
Contractual processing based on the General Terms and Conditions of Business of the BORIklik web portal |
|
Submitting an order via the BORIklik web portal |
Contractual processing based on the General Terms and Conditions of Business of the BORIklik web portal |
|
Execution of the order via the BORIklik web portal |
Contractual processing based on the General Terms and Conditions of Business of the BORIklik web portal |
|
Support to the visitor of the BORIklik web portal by email, chat, or telephone regarding a purchase |
Contractual processing based on the General Terms and Conditions of Business of the BORIklik web portal |
|
Resolution of complaints, claims, and other requests related to a purchase |
Contractual processing based on the General Terms and Conditions of Business of the BORIklik web portal |
|
Detection, prevention, and combating of fraudulent and illegal activities on the BORIklik web portal |
Legitimate interest of Birografika BORI d.o.o. |
|
Monitoring interactions between the visitor and experts via email, chat, or telephone in order to improve our services, train our employees, and strengthen potential relationships with our customers |
Legitimate interest and contractual processing based on the General Terms and Conditions of Business of the BORIklik web portal |
|
Customer relationship management through social networks |
Legitimate interest of Birografika BORI d.o.o. |
|
Analyzing browsing on the BORIklik web portal exclusively to improve our services |
Legitimate interest of Birografika BORI d.o.o. |
|
Conducting statistical studies on the usage and services of the BORIklik web portal |
Legitimate interest of Birografika BORI d.o.o. |
|
Collection and management of opinions about products, services, and service performance for customers |
Legitimate interest and contractual processing based on the General Terms and Conditions of Business of the BORIklik web portal |
|
Management of requests regarding the right of withdrawal, rectification, and objection |
Legal basis |
3. Cookies
Cookies are small text files that most websites store on users' devices used to access the internet. Their storage is entirely under the user's control, as the browser in use can limit or disable cookie storage.
Birografika BORI d.o.o. also collects personal data when visiting the BORIklik web portal through cookies, for the purposes of correctly displaying content, enabling the functionality of forms, the shopping cart, and other essential website elements.
Essential cookies are critical, and without them the BORIklik web portal owned or operated by Birografika BORI d.o.o. does not function. They are set upon the first interaction with the BORIklik web portal.
You can read more about the use and types of cookies in the General Terms of Business of the BORIklik web portal
4. Data Retention Periods
We retain the basic personal data provided during the registration of a user account on the BORIklik web portal for as long as you have an active user account.
We retain data relevant to the conclusion and fulfillment of the contract between the buyer and Birografika BORI d.o.o. for an additional 5 years from the date of contract fulfillment (delivery of goods).
Personal data processed based on the buyer's consent are retained indefinitely or until the withdrawal of that consent, unless specified otherwise at the time of consent.
Data processed based on legal obligations are retained in accordance with the requirements of the applicable legal regulations.
After the retention period expires or upon withdrawal of consent, we effectively delete or anonymize personal data, meaning they can no longer be linked to the customer.
5. Voluntariness of Providing Data and Consequences of Non-Submission
Providing personal data is voluntary. You are not obliged to provide personal data; however, if you do not provide it, it may not be possible to offer certain services or conclude a contract, which is fundamental to the sales–purchase process. We will specify on each occasion which data are required and the consequences of not providing them.
6. Access to Personal Data
Access to personal data is permitted only to those employees and contractual processors, to the extent and for the purposes strictly necessary for the smooth operation of business processes, the provision of services of the BORIklik web portal, ensuring information security, and fulfilling legal rights and obligations as well as rights and obligations arising from contractual relationships with web portal users.
We do not disclose personal data or make them available to third parties (outside of Birografika BORI d.o.o.), except those who have a written contract with us under which they perform certain tasks related to data processing and are obliged to comply with data protection legislation (so-called contractual processors). The contractual processors to whom we provide personal data are:
- marketing service providers;
- email delivery service providers;
- graphic and printing service cooperators;
- developers and maintainers of the BORIklik web portal software and information security engineers.
Contractual processors may process personal data only within the scope of our instructions and may not process it for their own purposes. They, along with their employees, are obligated to maintain the confidentiality of personal data.
Contractual processors do not transfer personal data to third countries (outside the EEA – EU member states plus Iceland, Norway, and Liechtenstein).
We are required to provide personal data at the request of state authorities or institutions based on their legal powers.
7. Rights Regarding Personal Data
As a user of the web portal, you have the following rights regarding personal data:
- that you may at any time request from us:
- confirmation of the processing of personal data;
- access to your personal data and the following information: the purpose of processing; the type of personal data; the recipients or categories of recipients to whom personal data have been or will be disclosed; the envisaged retention period of personal data or, if that is not possible, the criteria used to determine that period;
- a (free) copy of personal data (if the request is made by electronic means and you do not request otherwise, the copy will be provided in electronic form); additional copies may be subject to a fee;
- rectification of inaccurate personal data;
- restriction of processing when:
- you contest the accuracy of personal data, for a period enabling us to verify the accuracy of the personal data;
- the processing is unlawful and you oppose the erasure of personal data and request the restriction of their use instead;
- the erasure of all personal data (the right to be forgotten) if the conditions laid down in Article 17 of the GDPR are met, especially when you withdraw consent to the processing of personal data;
- withdrawal of consent with future effect;
- ceasing the use of personal data for notifications, direct marketing, and marketing research by Birografika BORI d.o.o.
- the right to lodge a complaint with the Information Commissioner if you believe that the processing of personal data infringes the GDPR.
8. Procedure for Exercising Rights
You can submit your requests regarding the exercise of rights concerning personal data by written request to: Birografika BORI d.o.o., Linhartova 1, 1000 Ljubljana, marked “for GDPR,” or in writing by email to: boriklik@birografikabori.si.
For reliable identification when exercising rights concerning personal data, we may request additional information from the BORIklik web portal user and may refuse to act only if we cannot reliably identify the user.
We must respond to your request to exercise your rights regarding personal data without undue delay and at the latest within one month of receiving your request.
Published: 17.4.2025