Here is the privacy policy document, in which you will find all the information about the processing of personal data carried out by PLV HAIR SLOVENIA.

The company takes special care in protecting your personal data. All provided personal data is treated confidentially and is used only for the purposes for which it was provided.

For better transparency, we offer you an interactive table of contents, which allows you to access the information that interests you the most more quickly.

Table of Contents

WHO PROCESSES MY PERSONAL DATA? ……………………………………………………1

DEFINITION OF TERMS…………………………………………………………………………1

HOW DO WE OBTAIN DATA? …………………………………………………. 2

WHICH PERSONAL DATA DO WE COLLECT AND PROCESS?……………………..2

WHY DO WE PROCESS YOUR PERSONAL DATA? ……………………………………………2

DO WE SHARE YOUR DATA WITH THIRD PARTIES? ……………………………………..3

FURTHER PROCESSING OF PERSONAL DATA IN AN AUTOMATED FORM……………………………………………………………………………………….3

HOW DO WE PROTECT YOUR PERSONAL DATA?……………………………………………………………………………………4

WHAT RIGHTS DO YOU HAVE? ………………………………………………………………………………………………………………..4

WEB PLUGINS………………………………………………………………………..5

CHANGES………………………………………………………………………………..5

CONTACT……………………………………………………………………………………5

1. Who processes my personal data?

The processing of personal data is carried out by the data controller:

Data about the controller:

Company Name: PLV HOUSE, hairdressing services and sales, Vita Udovič, s.p.

Address and post: Gubčeva cesta 1b, 8210 Trebnje

Tax number: SI 80088406

Company registration number: 8123365000

You can contact the controller at: info@plvhairslovenia.eu

2. Definition of terms:

“Personal data” means any information relating to an identified or identifiable individual (this includes name, surname, email address, phone number as well as identifiers unique to an individual’s physical, physiological, genetic, mental identity, etc.)

“Controller” means the natural or legal person, public authority, agency, or other body which alone or jointly with others determines the purposes and means of the processing of personal data.

“Processor” means a natural or legal person, public authority, or other body that processes personal data on behalf of the controller.

“Processing” means collecting, storing, accessing, and all other forms of using personal data.

3. How do we obtain data?

We obtain your personal data directly from you when providing our services or when you purchase our products. We also obtain your personal data indirectly, for example, through the use of our website or other digital tools.

4. Which personal data do we collect and process?

The data subject to processing includes data collected through direct communication with you, through various channels, inquiries, purchases, etc. Such personal data includes, for example:

• Basic personal data (name and surname, address);
• Contact data (email, phone number);
• Data about the selected product;
• Payment data.

5. Why do we process your personal data?

This privacy policy is intended for:

• PLV HAIR customers,
• Newsletter subscribers,
• Website visitors.

We process all personal data collected by the controller only when we have an appropriate legal basis and for specific purposes, defined in the table below. We process all personal data based on appropriate legal grounds, as outlined below. If we intend to process the data for a purpose not defined in this policy, we will notify you beforehand.

Providing personal data is voluntary unless required by law. In such a case, you are obliged to provide personal data. Certain personal data is necessary for us to provide services to you. If you choose not to provide us with data, we cannot provide certain services to you.

We process personal data only as long as necessary to fulfill the purpose for which the data was collected. After the retention period expires, the data is deleted or anonymized in a way that makes data reconstruction impossible.

6. Do we share your data with third parties?

We share your personal data with third parties in the following cases:

• Accounting service.

We provide personal data to third parties only when necessary to fulfill the purpose of personal data processing. Third parties can access and process your personal data only to the extent and in the manner defined by the contract we have with them. Third parties are not allowed to process personal data that is not necessary for the purpose for which they process personal data. All third parties are obliged to respect the level of personal data protection provided by the controller.

7. Further processing of personal data in an automated form

The controller does not carry out automated decision-making or profiling in the processing of personal data.

8. How do we protect your personal data?

We ensure the security of your personal data by implementing various technical and organizational measures, which include:

• Regular updating of our hardware and software;
• Protecting hardware and software with security software;
• Ensuring the limitation of unauthorized access to personal data.

We are aware that despite the security mechanisms we have established, a security incident can still occur. For this purpose, we have created a special protocol to handle such incidents quickly, efficiently, and in compliance with the law.

If a security incident occurs, where it is likely that the rights and freedoms of individuals are at risk, we will immediately, but no later than within 72 hours, notify the competent supervisory authority. If a security incident occurs that may pose a high risk to the rights and freedoms of individuals, we will also immediately notify the affected individuals.

9. What rights do you have?

Regarding the processing of your personal data, you have the following rights:

• Right to access and obtain a copy of personal data: This right allows you to obtain information about the processing of personal data, as well as to view or obtain a copy of your personal data that we hold about you.
• Right to rectification of personal data: You have the right to request the correction of inaccurate or incomplete data we hold about you.
• Right to restrict the processing of personal data: This right allows you to restrict processing, for example, during the period of decision-making on correction or objection by the controller.
• Right to erasure of personal data: This right allows you to request the deletion of data we hold about you in certain cases. When the legal basis for the processing of personal data is the law or a valid contract, we cannot delete your personal data.
• Right to withdraw consent: When we process your personal data based on consent, you have the option to withdraw your consent at any time. Withdrawing consent does not have negative consequences for you. Please note that after withdrawing consent, we may no longer be able to provide certain services.
• Right to object to the processing of personal data: This right is available to you when personal data is processed based on legitimate interests. It allows you to request the controller to stop processing. Please note that in certain cases, the controller may refuse such an objection. The controller will cease processing in any case if you object to direct marketing. You can submit a withdrawal of consent by sending an email to info@plvhairslovenia.eu.
• Right to data portability: This right allows you to request that your personal data be transferred to another controller in a machine-readable format. This is possible only if your data is processed by automated means and when it concerns data collected based on consent or a contractual relationship.

If you believe that there has been a violation of data protection, you can always file a complaint with the competent supervisory authority, which in Slovenia is the Information Commissioner.

We will process your requests regarding the above-defined rights as soon as possible, but no later than 30 days from receipt. If a particular request is so extensive that it will take longer to resolve, we will notify you in advance and provide you with an estimated time frame for the response.

We reserve the right to identify you in case of a request to exercise any of your rights. If you do not provide us with personal data in the request that allows us to reliably identify you, we will ask for additional personal data. If you do not provide us with additional personal data within the deadline, we will reject your request.

You can exercise your rights by writing to us at info@plvhairslovenia.eu.

10. Web plugins

On the website, you have the option to use web plugins. Please note that these plugins are managed by third parties, i.e., individual social networks.

The use of web plugins on the internet is at the user’s own risk. Each social network operates based on its own privacy policies, which are not related to the controller’s policies. The privacy policies of each social network are available on their websites.

The responsibility for interacting with the social network and any consequences arising from this interaction lies solely with the individual.

11. Changes

Any changes to our privacy policy will be published on this website. It is considered that you agree with the new version of the policy if you continue to use our website or other services subject to this policy after the change.

12. Have a question?

You can contact us at any time with additional questions regarding data protection by writing to us at info@plvhairslovenia.eu.