Privacy policy

The purpose of the Agrosloven privacy policy (hereinafter: the policy) is to familiarize buyers, potential buyers or visitors to the Agrosloven website with the purposes and legal basis for the processing of personal data.

The company Agrosloven z.o.o., Trstenik 1C, 4204 Golnik (hereinafter: the company Agrosloven or the provider or controller of personal data) protects your personal data in such a way that their protection is guaranteed throughout the business.

At Agrosloven, we value your privacy, which is why we always carefully protect your data.

This privacy policy may be changed or amended at any time without prior warning or notice. By using the provider’s website after a change or amendment, the individual confirms that he agrees with the changes and amendments.

All our activities related to the processing of personal data are in accordance with applicable European legislation (mainly Regulation (EU) 2016/697 on the protection of individuals in the processing of personal data and on the flow of such data (General Data Protection Regulation or GDPR) and the conventions of the Council of Europe (ETS No. 108, ETS No. 181, ETS No. 185, ETS No. 189)) and the national legislation of the Republic of Slovenia (Act on Protection of Personal Data (ZVOP-1, Official Journal of the RS, No. 94/07) , the Act on Electronic Business on the Market (ZEPT, Official Journal of the RS, No. 96/09 and 19/15) etc.).

The privacy policy deals with the handling of personal data that Agrosloven receives from you when you visit and use Agrosloven’s websites or provide them in another way.

Controller and authorized person for data protection.

The controller of personal data is Agrosloven z.o.o., Trstenik 1C, 4204 Golnik.

The company Agrosloven has appointed an authorized person for data protection who can be reached at the e-mail address hi@smokyhub.com.

If you have any questions regarding the use of this policy or in connection with the exercise of your rights arising from this policy, please contact the authorized person for the protection of personal data, via the contact specified in the next point of the policy.

Information about the authorized person

Company Agrosloven z.o.o., Trstenik 1C, 4204 Golnik

Email address

hi@smokyhub.com (in case of GDPR-related issues, send a message with the subject “GDPR”)

Basic concepts

Personal data means any information on the basis of which an individual can be identified (this includes, for example, name, surname, e-mail address, telephone number, etc.).

Controller means the legal entity that determines the purposes and means of processing your personal data.

Processor means a legal or natural person that processes personal data on behalf of the controller.

Processing means the collection, storage, access and all other forms of use of personal data.

EEA stands for European Economic Area, which refers to all the member states of the European Union, Iceland, Norway and Liechtenstein.

Personal data

Personal data is information that identifies you as a specific or identifiable individual. An individual is identifiable when it can be directly or indirectly determined, in particular by specifying an identifier such as name, identification number, location data, online identifier, or by specifying one or more factors that characterize the individual’s physical, physiological, genetic , mental, economic, cultural or social identity.

The provider collects the following personal data in accordance with the purposes defined below in this policy:

• basic information about the user (name and surname, residential address, date of birth, location);
• contact information and information about your communication with the controller (email address, phone number, date, time and content of postal or email communication
• information about the user’s purchases and issued invoices (date and place of purchase, purchased items, prices of purchased items, total purchase amount, payment method, delivery address, invoice number and date of issue, identifier of the person who issued the invoice, etc.) and data on resolving product complaints;
• data on the user’s use of the operator’s website (dates and times of website visits, pages or URLs visited, time spent on each page, number of pages visited, total time spent visiting the website, settings made on the website)
• personal data that the user provides voluntarily by filling out forms, e.g. in the context of prize games or the use of configurators or questionnaires to identify the optimal products for the user’s needs;
• other data that the user voluntarily provides to the provider when making a request for certain services, insofar as this data is necessary for the performance of the service. The provider does not collect or process your personal data, except when you enable it or consent to it, e.g. through the use of the website, when ordering products or services, when you subscribe to receive an e-magazine, participate in a prize game, etc. The provider also processes your data when there is a legal basis for the collection of personal data, a contractual basis or when the provider has a legitimate interest in the processing.

We also obtain your personal data based on the use of cookies on our website. You can read more about the use of cookies here.

The provider collects only those personal data that are relevant and necessary to fulfill the purposes for which this data is processed.

The time period during which the Provider stores the collected data is defined in more detail in the Personal Data Storage chapter of this Policy.

Legal basis for data processing

The provider collects and processes your personal data on the following legal bases:

• Processing based on the law
• Processing on the basis of a contract
• Processing based on individual consent
• Processing based on legitimate interest
• Processing on the basis of a contract

We need your data when it is necessary for the conclusion, implementation and fulfillment of contractual obligations. The transmission of personal data is voluntary in this case.

If you do not provide personal data, you cannot conclude a contract with the provider, nor can the provider provide you with services or deliver products.

Processing on the basis of given consent

We process your data when you give us your express consent. When processing is based on consent, we will make sure in advance that all the information you need to make your decision is available to you. You can withdraw your consent at any time. If you revoke your consent, the provider will not be able to provide you with certain services.

Processing based on legitimate interest

The provider may also process data on the basis of a legitimate interest, for which the provider strives, except when such interests are overridden by the interests or fundamental rights and freedoms of the individual to whom the personal data relate, which require the protection of personal data. In the case of using a legitimate interest, the provider always performs an assessment in accordance with the General Data Protection Regulation.

In case of processing based on legitimate interest, the user has the right to object. You can read more about your rights in the continuation of the policy.

Processing based on the law

We process your personal data when such processing is required by legislation that binds us (e.g. tax legislation mandates the retention of issued invoices). We process this personal data in accordance with the requirements of the law.

Purposes of personal data processing

The provider collects and processes your personal data for the following purposes

Communicating with you regarding the provision of our services and responding to your inquiries

This includes, in particular, notifications and responses to inquiries, resolution of complaints, completion of satisfaction surveys, etc. We carry out the aforementioned processing on the basis of the legitimate interest of ensuring effective communication and successful operation of the company in relation to users.

Conclusion and fulfillment of obligations arising from the concluded contract

Conclusion and implementation of the contract concluded with the provider, including the provider’s fulfillment of your orders (delivery of products and provision of services), communication with you, verification of your payments and fulfillment of other obligations of the provider and/or your obligations. We process personal data on the basis of a contract and a pre-contractual relationship.

If you do not provide us with all the information necessary to conclude the contract, we reserve the right to postpone or cancel the order.

Direct notification of customers about special offers, discounts and other content via email or SMS

In Agrosloven z.o.o. on the basis of Act ZEKom-1 (Act on Electronic Communications of the Republic of Slovenia, which is implemented on the basis of Directive 2002/58/EC of the European Parliament and the Council of July 12, 2002), we inform our customers about our products, services and content. The buyer can request the termination of this type of communication and processing of personal data at any time (right to object). The buyer can terminate this type of communication at any time via the unsubscribe link in the received messages or by sending a written request to the email address naslovhi@smokyhub.com. In this case, we process your data on the basis of the law.

Direct notification of special offers and other content via email

In Agrosloven z.o.o. based on your consent, we will inform you about our products, services, discounts and content via email. The customer can at any time request the termination of this type of communication and processing of personal data in such a way as to revoke the consent. The given consent can be revoked at any time via the contacts listed on the website www.smokyhub.com/kontakt.

Directly informing customers about special offers and other content via phone calls and regular mail

In Agrosloven z.o.o. based on the given consent, we occasionally inform customers about our products, services, discounts and contents via phone calls and regular mail. The customer can at any time request the termination of this type of communication and processing of personal data in such a way as to revoke the consent. The given consent can be revoked at any time via the contacts listed on the website www.smokyhub.com/kontakt.

General statistical processing of data on customers and their orders and potential customers (contacts) for the purposes of internal sales analysis, repeat purchases, aggregate customer behavior, advertising optimization and business optimization

In Agrosloven z.o.o. we carry out general statistical processing of data on customers and their orders and potential customers (contacts), on the basis of which we perform internal analyzes of sales, repeat purchases and aggregate customer behavior and monitor and optimize our business efficiency and optimize our advertising, e.g.:

• We monitor sales through our sales channels
• We monitor how many customers make repeat purchases, how quickly and at what value
• We monitor general statistical sales data, such as the average value of the basket, the number of products per order, and the like

We monitor responses to e-mails, SMS messages, phone calls and various advertising messages and optimize our advertising based on this (we decide what, where, to whom and how to advertise)

This type of statistical monitoring allows us to generally optimize business and advertising and, based on this, also offer affordable products and services to users. The said processing of personal data is based on the legitimate interest of the successful business of the provider and the provision of quality services to users.

Processing data on unclaimed remote orders for the purpose of fraud prevention

In Agrosloven z.o.o. on the basis of our legitimate interest, we process data on sent and uncollected remote orders, thereby determining whether/and which customers over-proportionally order products remotely with payment upon collection and then do not collect these products, which causes us business damage that we want to prevent .

When we identify such customers, we disable them from ordering products with payment upon collection in the online store, but they are still enabled to order products with immediate prepayment by payment cards or bank transfer.

Automatic email communication with the user based on his or of her starting the online purchase process

In Agrosloven z.o.o. on the basis of our legitimate interest, we occasionally send email messages related to their unfinished purchase to potential customers who have added selected products to their shopping basket but have not completed the purchase, with the aim of attempting to complete the purchase or offering help and information in this regard.

If you do not want this, you can stop this type of data processing at any time or by sending a written request to naslovhi@smokyhub.com.

Use of the Google Remarketing service

Using the Google Remarketing service allows Google to show you Google ads for our products based on the products you have seen (pages you have visited) on Agrosloven websites, on other websites and in applications (including YouTube).

With cookies, Google “remembers” your device and your visit to the Smokyhub website and the product(s) viewed. When you visit a website or use an app that is part of the Google Display Network, Google may show you an ad for the product you are viewing.

To use the Google Remarketing service, your name, email and phone number are processed and sent to Google, but in anonymous form. Despite the use of the Google Remarketing service, the Agrosloven company cannot determine that you made a purchase on the Agrosloven website by clicking on a specific Google ad.

Personal data is processed for this purpose only on the basis of your consent, which you can withdraw at any time by sending us a written request to our email address hi@smokyhub.com.

Asserting legal claims, protecting our rights and resolving disputes

We collect personal data for the defined purpose in accordance with the law.

Legal obligations

We collect your data to fulfill legal obligations, e.g. storing invoices for the purposes of tax legislation. We process your data only to the extent necessary to fulfill legal requirements.

Storage of personal data

The provider will keep your personal data only as long as it is necessary to fulfill the purpose for which the personal data was collected.

Those personal data that the Provider processes on the basis of the law, the Provider keeps for the period prescribed by law.

Those personal data that the Provider processes for the purpose of carrying out a contractual relationship with an individual, the Provider keeps for the period necessary for the execution of the contract and for another 5 years after its termination, except in cases where there is a dispute between you and the Provider regarding the contract ; in such a case, the Provider keeps the data for 5 years after the finality of the court or arbitration decision or settlement or, if there was no legal dispute, 5 years from the date of peaceful resolution of the dispute.

Those personal data that the Provider processes on the basis of the individual’s personal consent, the Provider keeps permanently, until this consent is revoked by the individual. The provider deletes such data before cancellation only when the purpose of personal data processing has already been achieved.

After the retention period has expired, the controller effectively and permanently deletes or anonymizes the personal data so that they can no longer be linked to a specific individual.

The hand operator defines in more detail:

Communicating with you regarding the provision of our services and responding to your inquiries

12 months from the end of the communication

Conclusion and fulfillment of obligations arising from the concluded contract

5 years from the execution of the contract

Direct notification of customers about special offers, discounts and other content via email or SMS

Until cancellation

Processing data on unclaimed remote orders for the purpose of fraud prevention

5 years from the start of processing

Automatic email communication with the user based on his or of her starting the online purchase process

Until cancellation

Google Remarketing

Until cancellation

Contractual processing of personal data

The provider can entrust individual tasks related to the processing of your data to other persons (contractual processors). Contract processors may process confidential data exclusively on behalf of the provider, within the limits of the provider’s authorization (in a written contract or other legal act) and in accordance with the purposes defined in this privacy policy.

Contract processors with whom the provider cooperates are:

• accounting service; law firms and other providers of legal advice;
• data processing and analytics providers;
• maintainers of IT systems;
• email providers (eg Mailerlite and others);
• providers of payment systems such as Bankart and others);
• providers of online advertising solutions (e.g. Google, Facebook).

The provider will not forward your personal data to unauthorized third parties.

Contractual processors may only process personal data within the framework of the controller’s instructions and may not use personal data to pursue any personal interests.

The administrator and users do not export personal data to third countries (outside the member states of the European Economic Area – EU members and Iceland, Norway and Liechtenstein) and to international organizations, except in the USA – all contractual processors in the USA are included in the Privacy Shield program.

Freedom of choice

You control the information you provide about yourself. If you decide not to provide your data to the provider, then we will not be able to provide you with certain services.

Individuals who wish to unsubscribe from the Agrosloven e-newsletter should notify us at the e-mail address info@agrosloven.si. If your personal information changes (postal code, e-mail address, physical address, telephone number), please inform us of the changes at the e-mail address hi@smokyhub.com.

Automatic recording of information (non-personal data)

Whenever you access the website, general, non-personal data (number of visits, average time spent on the website, pages visited) is automatically recorded (not as part of the registration). We use this information to measure the attractiveness of our website and to improve its content and usability. Your data is not subject to further processing and is not forwarded to a third party.

Cookies

Cookies are invisible files that are temporarily stored on your hard drive and allow the provider to recognize your computer the next time you visit the website. The provider uses cookies only to collect information concerning the use of the website and to optimize its internet advertising activities.

Advertising cookies monitor the individual’s use of the Provider’s website, unless the individual does not agree to the use of cookies on the page.

You can read more about cookies and their use here.
Safety

The provider makes great efforts to ensure the security of personal data. Your information is protected against loss, destruction, falsification, manipulation and unauthorized access or disclosure at all times.

To protect personal data, we implement organizational and technical measures such as:

• employee training;
• careful selection and control of contract processors;
• backup of electronically stored data;
• regular maintenance and updating of computer equipment;

Consent of a minor in relation to information society services

Minors under the age of 16 should not submit any personal information to websites or otherwise without the permission (consent or approval) of the holder of parental care for the child (one of the parents or guardians). The provider will never knowingly collect personal data from persons known to be minors (under the age of 18), or use it in any way or disclose it to an unauthorized third party without the permission of the child’s guardian.

This does not affect the general contract law of the Member States, such as the rules on the validity, formation or effect of a contract in relation to a child.

In such cases, taking into account available technology, the provider makes reasonable efforts to verify whether the holder of parental care for the child has given or approved consent.

Individual rights regarding data processing

If you have any questions regarding our personal data protection policy or the processing of your personal data, you can contact us at any time. Email us at hi@smokyhub.com. Based on your request, we will provide you with the required data or (in accordance with the law) ensure the realization of your rights.

You have the following rights in relation to processing:

Right to withdraw consent: if you, as an individual, have consented to the processing of your personal data (for one or more specified purposes), you have the right to withdraw this consent at any time, without affecting the lawfulness of data processing based on consent. performed until its cancellation.

Consent can be revoked by a written statement sent to the controller at one of the contacts listed on the website https://www.smokyhub.com/kontakt.

Revocation of consent to the processing of personal data does not have any negative consequences or sanctions for the individual. However, it is possible that the controller may no longer be able to provide one or more of its services to an individual after the withdrawal of consent to the processing of personal data, if these are services that cannot be provided without personal data (e.g. benefit club or personalized notification).

Right of access to personal data: as an individual, you have the right to receive confirmation from the provider (personal data manager) as to whether personal data is being processed in relation to you, and, when this is the case, access to personal data and certain information (on the purposes of processing, on types of personal data, on users , on retention periods or criteria for determining periods, on the existence of the right to correction or deletion of data, the right to limit and object to processing and the right to appeal to the supervisory authority, on the source of the data, if the data was not collected from you, on the existence of automated acceptance decision, including the creation of profiles, the reasons for it and the meaning and consequences of such processing for you, and other information in accordance with Article 15 GDPR);

Right to rectification of personal data: as an individual, you have the right to have the provider correct inaccurate personal data relating to you without undue delay. As an individual, taking into account the purposes of the processing, you have the right to complete incomplete data, including submitting a supplementary statement;

The right to erasure of personal data (“right to be forgotten”): as an individual, you have the right to have the provider delete personal data relating to you without undue delay, and the provider must delete the data without undue delay when one of the following reasons exists:

• the data are no longer needed for the purposes for which they were collected or otherwise processed,
• if you revoke your consent and there is no other legal basis for the processing,
• if you object to the processing and there are no overriding legitimate grounds for the processing,
• the data was processed illegally,
• the data must be deleted to comply with legal obligations under EU law or the law of the Member State applicable to the provider,
• the data was collected in connection with the offer of information society services.

However, as an individual, in certain cases described in paragraph 3 of Article 17 of the GDPR, you do not have the right to delete data;

Right to restriction of processing: as an individual, you have the right to have the provider restrict processing when one of the following cases exists:

• if you dispute the accuracy of the data for the period that allows the provider to verify the accuracy of the data,
• the processing is illegal and you object to the deletion of the data and instead request a limitation of their use,
• the provider no longer needs the data for processing purposes, but you need them to assert, implement and defend legal claims,
• you have objected to the processing until it is verified whether the provider’s legitimate reasons prevail over your reasons;

The right to data portability: as an individual, you have the right to receive the personal data relating to you that you have provided to the provider in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another controller without being the provider to whom the personal data was provided obstructed, namely when:

• the processing is based on consent or on a contract and
• the processing is carried out by automated means.

As an individual, when exercising the aforementioned right to portability, you have the right to have personal data directly transferred from one operator (provider) to another, when this is technically feasible;

The right to object to processing: as an individual, based on reasons related to your particular situation, you have the right to object at any time to the processing of personal data, which is necessary for the performance of tasks in the public interest or in the exercise of public authority assigned to the provider (point (e) of the article 6 (1) GDPR) or is necessary due to the legitimate interests pursued by the provider or a third party (point (f) of Article 6 (1) GDPR), including the creation of profiles based on the said processing; the provider stops processing personal data, unless it demonstrates imperative legitimate reasons for processing that override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.

Where personal data is processed for marketing purposes, the individual has the right to object at any time to the processing of data relating to him for the purposes of such marketing, including profiling to the extent related to such direct marketing; when an individual objects to processing for direct marketing purposes, the data is no longer processed for these purposes.

When data is processed for scientific or historical research purposes or statistical purposes, the individual has the right to object to the processing of data concerning him for reasons related to his special situation, unless the processing is necessary for the performance of the task being carried out for reasons of public interest;

The right to lodge a complaint with a supervisory authority: without prejudice to any other (administrative or other) legal remedy, you as an individual have the right to lodge a complaint with a supervisory authority, in particular in the country of your habitual residence, your place of work or in where the violation allegedly occurred (in Slovenia, this is the Information Commissioner), if you believe that the processing of personal data concerning you violates regulations on the protection of personal data.

Without prejudice to any other (administrative or extrajudicial) remedy, you as an individual have the right to an effective legal remedy, namely against the legally binding decision of the supervisory authority in relation to it, as well as in the case when the supervisory authority does not consider your complaint or you are does not inform about the status of the case or about the decision on the appeal within three months. Courts of the Member State in which the supervisory authority has its seat are competent for proceedings against the supervisory authority.

An individual can address all requests regarding the exercise of rights in relation to personal data, in writing, to the controller, namely to one of the contacts listed on the website https://www.smokyhub.com/kontakt.

For the purposes of reliable identification in the case of exercising rights in relation to personal data, the administrator may request additional data from the individual, and may refuse to take action only if he proves that he cannot reliably identify the individual.

The controller must respond to the individual’s request, with which he/she exercises his/her rights in relation to personal data, without undue delay and no later than one month after receiving the request.

Notification to the supervisory authority about a breach of personal data protection

In the event of a violation of the protection of personal data, the Provider is obliged to notify the competent supervisory authority, except when it is probable that the rights and freedoms of individuals were not threatened by the violation. When there is a suspicion that a crime has been committed at the time of the violation, the Provider is obliged to inform the police and/or the competent prosecutor’s office about the violation.

In the event that it is a violation that may cause a great risk to the rights and freedoms of individuals, the Provider is obliged to report the violation immediately or when it is not possible, without undue delay, to inform the individuals to whom the personal data refer. The notification to the individual must be made in understandable and clear language.

Announcement of changes

Any changes to our privacy policy will be posted on this website.

Published on 08/08/2024