Personal Data Controller and Contact Information
This policy applies to the processing (use) of any personal data carried out by the company Evegreen (the controller) or carried out on behalf of the controller.
Controller Information:
EVEGREEN, Environmental Consulting
Šaleška cesta 2a
3320 Velenje
Slovenia
VAT ID: SI 83857052
Company Reg. No.: 8294461000
Phone: +386 31 668 209
Email: domen.straser@evegreen.eu
Which Personal Data Do We Process?
– Basic contact information (name, phone number, email address);
– Data on the use of our websites (clicked links, time spent) and data regarding responses to our emails (whether the email was opened, which links were clicked);
– Data required to fulfill a contract and deliver purchased goods (item purchased, price, delivery address, delivery time, payment method, payment date, complaint data, invoice information, etc.).
Legal Bases for Personal Data Processing
We may process your personal data based on the following legal grounds:
– when required to fulfill our legal obligations (e.g. issuing invoices for purchased goods);
– when processing is necessary for the performance of a contract concluded with you or because you requested an offer from us;
– when you have given your consent for the processing of your personal data for a specific purpose, which you may withdraw at any time;
– when we have a legitimate interest in processing your personal data (e.g. when we send you an email if you abandoned your shopping cart on our website).
Purposes of Personal Data Processing
Your personal data may be used for one or more of the following purposes:
– to communicate with you regarding the provision of our services and responding to your inquiries;
– to conclude contracts and fulfill obligations arising from such contracts;
– for marketing communications (sending emails and SMS messages);
– to assert legal claims and resolve disputes;
– for statistical analyses regarding sales and website usage.
Retention Period of Personal Data and What Happens Afterwards
We retain your basic personal data for as long as you remain a registered user on our websites.
Personal data processed based on your consent is retained permanently or until you withdraw your consent.
Invoice-related data is stored for 10 years from the date of issuance.
Data necessary for the conclusion and fulfillment of a contract is stored for 5 years after the contract is fulfilled (e.g. delivery of goods).
After the retention period expires, personal data is permanently and effectively deleted or anonymized, meaning it can no longer be associated with or attributed to you.
Voluntary Data Provision and Consequences of Non-Provision
Providing personal data is voluntary. You are not obliged to provide your personal data, but if you do not, we cannot enter into a contract with you (as the data is necessary for order fulfillment). Each time we request your personal data, we will specify which data is necessary and what consequences arise if not provided.
Who Has Access to Your Personal Data?
We do not share or disclose your personal data to third parties outside of Evegreen, except to those with whom we have a written agreement (data processors), who carry out certain tasks related to data processing and are legally obligated to comply with data protection laws.
Data processors include:
– marketing service providers;
– email service providers;
– SMS service providers;
– software solution providers;
– delivery services.
Processors may process personal data only under our instructions and may not use it for their own purposes. They are bound, along with their employees, to maintain the confidentiality of your personal data.
Data processors do not transfer personal data outside of the European Economic Area (EEA – EU member states, Iceland, Norway, Liechtenstein).
Your Rights Regarding Personal Data, Consent Withdrawal, and Consequences
You have the following rights regarding your personal data:
You may request from us at any time:
– confirmation whether we process your personal data;
– access to your personal data and the following information: processing purposes; types of personal data; recipients or categories of recipients to whom the data has been or will be disclosed, especially recipients in third countries or international organizations; the anticipated retention period or the criteria used to determine it; existence of automated decision-making, including profiling, the logic involved, and the consequences;
– one (free) copy of your personal data in a format of your choice (if requested electronically, the copy will be provided in electronic form unless you request otherwise); additional copies may incur a reasonable fee;
– correction of inaccurate personal data;
– restriction of processing under the following conditions:
– if you contest the accuracy of the data (for a period allowing verification);
– if processing is unlawful and you oppose erasure;
– if the data is no longer needed but required for legal claims;
– deletion of all personal data (right to be forgotten) under the conditions of Article 17 of the GDPR, especially if you withdraw your consent;
– receipt of personal data in a structured, commonly used, machine-readable format and the right to transmit it to another controller;
– cessation of processing for direct marketing purposes, including profiling;
– not to be subject to a decision based solely on automated processing, including profiling (under Article 22 GDPR);
– the right to file a complaint with the Information Commissioner if you believe your data is being processed unlawfully.
How to Exercise Your Rights
You may send your requests in writing to any of the contact details listed above under Personal Data Controller and Contact Information.
To ensure reliable identification, we may request additional data before fulfilling your request and may refuse action only if we cannot reliably identify you.
We must respond to your request without undue delay and no later than one month from the date of receipt.
Any changes to our privacy policy will be published on this website.