PRIVACY POLICY
DATA CONTROLLER AND CONTACT DETAILS
This Privacy Policy applies to the processing of personal data carried out by:
Realna kreacija, Urša Cunk s.p.
Pod gozdom cesta IV 35
1290 Grosuplje, Slovenia
Company Registration Number: 9179518000
Tax Number: 86860674
Email: jure.jbb999@gmail.com
Website: www.jbb.si
PERSONAL DATA WE PROCESS
Depending on how you interact with us, we may process:
basic contact information, such as your first name, surname, email address and telephone number;
information required to process and deliver your order, such as your address, postal code, city and country;
information relating to your order, purchased product or service, price, payment method and payment date;
information relating to invoices, complaints and other communications concerning your order;
information you voluntarily provide when registering for JBB workshops or otherwise interacting with JBB.
LEGAL BASIS FOR PROCESSING PERSONAL DATA
We may process your personal data:
where processing is necessary to comply with our legal obligations, for example issuing and retaining invoices;
where processing is necessary to enter into or perform a contract with you or to fulfil your order;
where you have given your consent for a specific purpose; you may withdraw your consent at any time;
where we have a legitimate interest in processing your personal data, provided that your rights and interests do not override that interest.
PURPOSES OF PROCESSING
We may use your personal data for:
processing orders, payments and product deliveries;
providing our services;
registrations and communications relating to JBB workshops;
communicating with you and responding to your enquiries;
issuing invoices and complying with legal obligations;
marketing communications where an appropriate legal basis exists;
establishing, exercising or defending legal claims and resolving disputes;
analysing sales of our products and services and the use of our website.
RETENTION OF PERSONAL DATA
We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as required by applicable law.
Personal data processed on the basis of consent is retained until consent is withdrawn or until the data is no longer required for the purpose for which it was collected.
Information relating to invoices and other accounting records is retained in accordance with applicable statutory retention periods.
Information necessary for a contractual relationship may also be retained after the relationship has ended where this is necessary to comply with legal obligations or to establish, exercise or defend legal claims.
VOLUNTARY PROVISION OF PERSONAL DATA
Providing personal data is generally voluntary. However, where certain information is necessary to process an order, deliver a product, provide a service or enter into a contract, we may be unable to provide the relevant product or service if you do not provide that information.
ACCESS TO YOUR PERSONAL DATA
We do not sell your personal data.
Your personal data may be accessed by service providers that we use to operate our business, such as providers of hosting, email, accounting, IT, delivery or other support services.
Where such providers act as data processors, they may process personal data only in accordance with our instructions and applicable law and may not use it for their own purposes.
YOUR RIGHTS
Subject to applicable data protection law, you may have the right to:
obtain confirmation as to whether we process your personal data;
access your personal data;
request correction of inaccurate or incomplete data;
request deletion of your personal data where the legal requirements are met;
request restriction of processing;
request data portability where applicable;
object to processing based on legitimate interests;
withdraw your consent where processing is based on consent;
object to the use of your personal data for direct marketing.
If you believe that the processing of your personal data infringes applicable data protection law, you may lodge a complaint with the Information Commissioner of the Republic of Slovenia.
EXERCISING YOUR RIGHTS
Requests relating to your personal data may be sent to:
jure.jbb999@gmail.com
Where we have reasonable doubts regarding your identity, we may request additional information necessary to confirm it.
We will respond to your request without undue delay and generally no later than one month after receiving it. Where permitted by the GDPR, this period may be extended by up to two additional months due to the complexity or number of requests. If an extension is required, we will inform you within the initial one-month period and explain the reasons for the delay.