Privacy policy

General

The protection of your personal data is very important to us. That is why, together with quality content, we also guarantee your right to decide for yourself how your data is used. This privacy policy governs the collection, storage and processing of personal data that the controller collects from users.

Personal data is any data that relates to an identified natural person (individual), regardless of the form in which it is presented. It is data on the basis of which a person can be identified.

This personal data protection statement was last updated in January 2022.

Personal data controller

CarCenterCerar, Jure Cerar s.p., Trata 20, 1235 Radomlje

You can contact the person responsible for personal data protection at [email protected]

As a recipient or user, I allow the controller to collect, process and store the personal data provided, in accordance with the applicable personal data protection legislation.

Categories of personal data

Data obtained and stored by the controller of the personal data filing system:

• e-mail address;
• first name and surname;
• company name;
• postal address;
• telephone;
• mobile phone;
• title or gender, for personalised e-mail messages;
• which messages the user opened and which links in the messages the user clicked;
• which pages the user visited on the portal;
• past enquiries, purchases, invoices, support requests;
• the user’s IP addresses and cookie IDs.

Purposes of processing personal data

The controller will use the data obtained from users for the following purposes:

• communication relating to the subscription or (pre-)contractual relationship;
• running prize games;
• statistical and market analyses; tracking clicks and e-mail opens, and clicks on the website, for segmentation and for tailoring the content of e-mails;
• informing users and sending e-newsletters, articles and event notices by e-mail;
• direct marketing and sending offers by SMS/MMS, e-mail and push notifications, by post, on the website and in mobile apps, and making telephone calls;
• segmentation, profiling and automated processing in order to create personalised messages and offers that are more relevant to the user;
• displaying personalised ads on advertising platforms (Google and Facebook).

For e-mail messages sent, the controller records when individuals open the messages received and click on links in them. The controller also records page views and actions on the controller’s website. To deliver better and more targeted offers and to tailor messages and communication, the controller automatically processes, analyses and profiles the recorded data, and assesses user activity and measures user interest.

Retention period

We keep an individual’s personal data for an unlimited period, or until the individual withdraws consent to the storage and processing of their data. After an individual withdraws consent, we immediately, effectively and permanently delete their personal data.

If the purposes described above, for which we store and process personal data, ceased to exist in our company, we would immediately, effectively and permanently delete the data filing systems whose purpose has ceased.

Protection of personal data

The controller will protect the data obtained in accordance with the applicable personal data protection legislation and with its internal rules adopted on the basis of the law. It will provide appropriate organisational and technical protection. The controller will under no circumstances pass on or disclose the data obtained to third parties. The controller implements appropriate technical and organisational measures to protect personal data.

Users’ rights

In accordance with the provisions of the EU General Data Protection Regulation (GDPR), the personal data controller must, at the user’s request:

• Confirm whether or not data relating to the user is being processed, and give the user access to the personal data that relates to them.
• Provide a copy of the personal data that relates to the user.
• Allow the user to correct or complete their personal data.
• Allow partial or complete erasure of the personal data.
• Allow the transfer of the personal data to another provider of similar services.
• Allow partial or complete withdrawal of consent to the processing of personal data.

The controller will respect your request for withdrawal and will fully process the withdrawal of consent to the purposes of personal data processing within 15 days at the latest.

Any individual who believes that the controller has in any way violated their rights to the protection of their personal data may at any time lodge a complaint with the supervisory authority (the Information Commissioner of the Republic of Slovenia).

Every user can easily unsubscribe with one click in the footer of any e-mail received, or by sending an unsubscribe e-mail to [email protected] or by replying to a specific e-mail received.

Contract processors and storage location

The controller also passes the collected personal data to its contract processors, who may process the data only within the controller’s instructions and authorisations and who are bound, by a written contract with the controller, to ensure an adequate level of personal data protection, namely: for CRM, the e-mail marketing system and the marketing automation system. The provider stores the personal data filing systems within the EU and does not transfer them to third countries.

The controller may pass personal data to digital advertising platforms (Google, Facebook, LinkedIn and similar) and use their cookies, which allow the controller to create more precise segments, display targeted ads and carry out remarketing. As a result, the user receives more relevant ads from the controller on these platforms. This may involve transferring data to a contract processor outside the EU.