Privacy policy

1. About the Privacy Policy

The purpose of this policy is to notify the visitors of our website, buyers in our online shop and other persons with the  purposes and principles relating to processing of personal data in On Parole Productions Prnaver in Gregorc, d.n.o.

This policy also further clarifies the conditions for consent, how long we keep your data, the rights of natural persons regarding the processing of personal data and the rights of natural persons in the event that the regulations on the safety of personal data are infringed.

Per the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) the following information are part of this Policy:
• fontact information of On Parole Productions, d.n.o.,
• purposes, basis and types of processing personal data,
• how long we keep personal data,
• rights of natural persons regarding the processing of personal data,
• right to file a complaint about the processing of personal data.

2. Controller of personal data

The controller of personal data is On Parole Productions Prnaver in Gregorc, d.n.o., which treats personal data in accordance with its legal and regulatory rules.

Information about the controller:

On Parole Productions Prnaver in Gregorc storitve in trgovina, d.n.o., Ulica španskih borcev 3, 1420 Trbovlje, registration number: 1657747000, VAT: SI64920828, registered at the District court of Ljubljana on 10.12.2001, nr. 061/13543100, director Matija Prnaver.

3. Personal data that On Parole, d.n.o. collects

On Parole Productions, d.n.o. collects the following categories of personal data:

1. Data you submit yourself

• when you register as a user of On Parole Productions, d.n.o. services,
• when you order goods,
• when you cancel an order, 
• when you register to our newsletter,
• when you browse through our content, 
• when you ask us questions, file a complaint, return a product, etc.

2. Data you create while using our services

• mostly when you post a question, comment or rate our products.   

3. Data from other sources

• e.g. information if your credit or pay card is valid and you can use it to pay for your order, which is provided by the issuer of your credit or pay card.

4. The purposes of legal grounds for the processing of data  

In accordance with regulations on the protection of personal data On Parole Productions, d.n.o. as the collector of personal data must ensure for any kind of transmission of personal data, that it is later possible to determine what categories of personal data were transmitted, to who, when and on which legal grounds, for which purpose and/or reasons and/or what kind of procedure, except if another law states otherwise. 

Processing necessary for compliance with a legal obligation:

On Parole Productions, d.n.o. processes personal data of the users of our online shop for the purpose of realization of orders, sending newsletters, executing our legal obligations (e.g. yearly financial reports), solving complaints, analysing business, planning, monitoring statistics and behavior of buyers etc., all in accordance with the Obligations Code, Electronic Commerce Market Act and Consumer Protection Act.

On Parole Productions, d.n.o. processes the following data about the users of our online shop (name and surname, date of birth, address, citizenship number, VAT number, card number, e-mail).

Processing necessary for the performance of a contract:

On Parole Productions, d.n.o. also processes data necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, specifically contracts of distance sales, electronic sales contracts and other contracts for services which On Parole Productions, d.n.o. provides. On Parole Productions only processes data which are not processed on a legal basis (and are mentioned above) but are needed for a contract and for the exercising the rights and fulfulling contractual obligations of On Parole Productions, d.n.o.

On the grounds of a contractual relationship On Parole Productions, d.n.o. only processes personal data if it is needed for the performance and/or conclusion of a contract. Personal data is processed until the purpose of the contract is fulfilled and/or in accordance with limitation periods, especially when the processing of personal data is needed for the performance and/or conclusion of a contract, except when the storage period is determined by law. In this event On Parole Productions, d.n.o. stores data in line with the lawful obligation (more on this in paragraph five of this Policy).

Processing necessary for the purpose of the legitimate interests pursued by On Parole Productions, d.n.o.:

On Parole Productions, d.n.o. can process data on the basis of the legitimate interest On Parole Productions, d.n.o. pursues or is pursued by a third party, except where such interests are overriden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. When further usage of data is in question On Parole Productions, d.n.o. performs an assesment in accordance to the General Data Protection Regulation (GDPR).

In accordance to GDPR direct marketing is a legitimate interest.

On the basis of legitimate interest On Parole Productions, d.n.o. can contact data subjects in order to determine their satisfaction with the services even when this is not strictly necessary for the performance of a contract, for the purpose of the improvement of services. On Parole Productions, d.n.o. weighs this interest with the interest of data subjects and does not contact those subject that have objected to this.

Based on legitimate interest On Parole Productions, d.n.o. can proccess data in a strictly necessary and proportionate scope.

Processing on the grounds of consent given by the data subject:

On Parole Productions, d.n.o. may ask data subjects' to give their consent to the processing of personal data needed to assess certain personal aspects of the data subject, e.g. the analysis of personal tastes, interests and behavior of a data subject (profiling) for the purpose of accommodated offers of services to the subject including informing, direct marketing and market research. In such cases the processing of personal data is performed in regards with the scope of personal data, intent and channels for informing which the data subject has agreed to, up untill the withdrawal of consent. The informing about the processing of personal data is performed in the way which the data subject decided on in the consent.

Consent is valid only when given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of the data subject's agreement to the processing of personal data relating to him or her, such as by a written statement, including by electronic means, or an oral statement.

The data subject has the right to withdraw his or her consent at any time in the same way that it was given, or in another way determined by On Parole Productions, d.n.o. whereas On Parole Productions, d.n.o. has the right to identify such a subject. Withdrawal or change of consent only effects data which is processed on the grounds of consent. The last data subject's consent that On Parole Productions, d.n.o. receives is valid.  The revocation of consent does not effect the lawfulness of processing which was carried out on the grounds of consent unill its revocation.

5. How long we keep your personal data?

We store your personal data as long as they are necessary for the realization of the intent of their processing, untill you revoke your consent for the processing of personal data for individual or all purposes of processing or based on the storage period as prescribed by the Electronic Commerce Market Act.

When a buyer purchases goods in our online store he or she concludes a buyer-seller contract in electronic form with us. The storage of the data on the grounds of a buyer-seller contract is demanded by the Electronic Commerce Market Act. All orders conducted in an online shop must be archived for a period of 10 years.

Clearance data and connected contact data about data subjects can be stored untill full payment and/or as long as the limitation periods of each individual claim are running (one to five years). Receipts are stored for 10 years after the end of the year in which they were issued in accordance with the Value Added Tax Act.

Personal data processed on the grounds of your consent is stored for the shortest possible time period or untill you revoke your consent. The revocation of consent does not effect the lawfulness of processing which was carried out on the grounds of consent unill its revocation. After the purpose of processing is fulfilled the data is deleted, destroyed, blocked or made anonymous, unless law states otherwise.

6. Who processes personal data?

Personal data of data subjects can be processed by the following:

• employees of On Parole Productions, d.n.o. (in line with their contractual obligations and regulations),
• public authorites when exercising their legal obligations (e.g. Financial Administration of the Republic of Slovenia),
• contractual processors of personal data with which On Parole Productions, d.n.o. decided a contract on the processing of personal data, 
• other persons if you have given your consent,
• other persons only if they have a legal basis.

In the above mentioned users are also companies that provide On Parole Productions, d.n.o. with technical support (e.g. webmasters, developers of software solutions, etc.) and persons and/or companies that provide On Parole Productions, d.n.o. with services like accounting, postal services, legal services, etc.

Some organizations and/or companies which are our contractual processors may have their seat outside the EU, in countries that don't have laws that protect personal data in the same way that the laws in the EU and/or Slovenia do. If your personal data is transmitted to third countries (outside EU) we will ensure proper measures for the safety of personal data and basic rights and liberties of data subjects, according to EU and Member State regulations and this Privacy Policy, by using suitable mechanisms like binding business rules, standard contractual clauses etc.

7. Rights of natural persons on which personal data apply

On Parole Productions, d.n.o. provides information on action taken on a request about the rights to the data subject without undue delay and in any event within one month of receipt of the request. That period my be extended by two further months where necessary, taking into account the complexity and number of requests. On Parole Productions, d.n.o. shall inform the data subject of any such extensions within one month of receipt of the request, together with the reasons for the delay.

On Parole Productions, d.n.o. accepts demands on the rights of data subjects via e-mail or by mail to On Parole Productions, d.n.o., Ulica španskih borcev 3, 1420 Trbovlje, Slovenia.

Where the data subject makes the request by electronic form means, the information shall be provided by electronic means where possible, unless otherwise requested by the data subject.

Where On Parole Productions, d.n.o. has reasonable doubts concerning the identity of the natural person making the request about one of his/her rights, On Parole Productions, d.n.o. may request the provision of additional information necessary to confirm the identity of the data subject.

Where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, On Parole Productions, d.n.o. may either:

– charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the actions requested; or
– refuse to act on the request.

On Parole Productions, d.n.o. grants the following rights to natural persons regarind the processing of personal data:
a) right of access,
b) right of rectification,
c) right to be forgotten,
d) right to restriction of processing,
e) right of portability,
f) right to object.

a) right to access

The data subject has the right to obtain from On Parole Productions, d.n.o. confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:

- the purposes of the processing,

- the categories of personal data concerned,

- the recipients or categories of recipient to whom the personal data have been or will be disclosed,

- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period,

- the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing,

- the right to lodge a complaint with a supervisory authority,

- where the personal data are not collected from the data subject, any available information as to their source,

- the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

If a data subject demand so, On Parole Productions, d.n.o. will provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, On Parole Productions, d.n.o. may charge a reasonable fee based on administrative costs.

b) right to rectification

The data subject has the right to obtain from On Parole Productions, d.n.o. without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

c) right to erasure

The data subject has the right to obtain from On Parole Productions, d.n.o. the erasure of personal data concerning him or her without undue delay and On Parole Productions, d.n.o. has the obligation to erase personal data without undue delay where one of the following grounds applies:

- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

- the data subject withdraws consent on which the processing is based and where there is no other legal ground for the processing;

- the data subject objects to the processing pursuant and there are no overriding legitimate grounds for the processing,

- the personal data have been unlawfully processed;

- the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;

- the personal data have been collected in relation to the offer of information society services,

Where On Parole Productions, d.n.o. has made the personal data public and is obliged to erase the personal data, On Parole Productions, d.n.o., taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

d) right to restriction of processing

The data subject has the right to obtain from On Parole Productions, d.n.o. restriction of processing where one of the following applies:

- the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;

- the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;

On Parole Productions, d.n.o. no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;

the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.

e) right to data portability

The data subject has the right to receive the personal data concerning him or her, which he or she has provided to On Parole Productions, d.n.o., in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

 - the processing is based on consent,
 - the processing is carried out by automated means.

f) right to object

The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. On Parole Productions, d.n.o. shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims. Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

You can exercise the above stated rights with a written demand addressed to On Parole Productions, d.n.o., Ulica španskih borcev 3, 1420 Trbovlje, Slovenia or via e-mail info@on-parole.com. In the same way you can permanently or temporarely, completely or partially cancel your consent for the processing of personal data, if you have given such a consent.

8. Right to complaint

In On Parole Productions, d.n.o. we strive to protect your personal data with dilligence and appropriate technological and organizational means of transmission protection and filing of personal and other confidential data. Nevertheless we would like to inform you that you have the right to lodge a complaint if you feel that your personal data is not processed according to the rules on protection of personal data. 

Data subjects can lodge a complaint about the processing of personal data via e-mail info@on-parole.com or by mail on On Parole Productions d.n.o., Ulica španskih borcev 3, 1420 Trbovlje, Slovenia.

Additionally data subjects on which personal data apply may lodge a complaint directly to the supervisory authority – Informacijski pooblašÄ¨enec RS, Zaloška 59, 1000 Ljubljana, Slovenia – if they feel their personal data is not processed according to according to Union or Member state rules on protection of personal data.  

If a data subject exercised his or her right to access at On Parole Productions, d.n.o. and feels that he or she did not receive the right data or did not receive all the data, he or she can lodge a complaint to On Parole Productions, d.n.o., before lodging a complaint to the supervisory authority, in 15 days. On Parole Productions, d.n.o. must decide on the new complaint in five working days.

9. Ensuring accurate, complete and up-to-date data

On Parole Productions, d.n.o. strives to ensure accurate and up-to-date personal data which can be achieved in line with regulations and/or data subjects' consent. Complete and up-to-date data can only be used for purposes determined by the Consumer Protection Act and Electronic Commerce Market Act and no other means unless you have given your consent.

On Parole Productions, d.n.o. is aware that the privacy of our users is crucial, therefore we treat their personal data with care and dilligence and in accordance with rules and regulations of the Republic of Slovenia and internal rules of On Parole Productions, d.n.o. Accesss to personal data is granted only to authorized personnel and contractual processors and in the scope and intent that is needed to conduct working processes, providing company services and exercising the rights and duties from contracts concluded with the users. 

10. Changes of the Privacy Policy

On Parole Productions, d.n.o. reserves the right to occasionaly update the Privacy Policy, based on feedback from users and/or in the event the regulations are changed. The change of the Policy is marked with the date of its last update.

In the case of major updates or changes of how On Parole Productions, d.n.o. uses personal data data subject will be notified about this via a notice on our website or by e-mail (if a consent for this is given), beforehand.

On Parole Productions, d.n.o. recomends to users that they regularely inspect this policy and be informed on how On Parole Productions, d.n.o. protects their privacy.

11. Additional information

For additional information about the processing of personal data or if you have suggestions for improvements you can contact us via info@on-parole.com or write to us: On Parole Productions, d.n.o., Ulica španskih borcev 3, 1420 Trbovlje, Slovenia.

12. Validity of the Privacy Policy

This Policy comes to effect on 25.05.2018 and is in use until its revocation or its provisions are changed.