Personal Data Protection
At BM-CNC, Radovljica, d.o.o., Alpska cesta 43, 4248 Lesce (hereinafter referred to as the “Data Controller”), we value your privacy and are committed to ensuring the highest level of protection of your personal data. When providing our services or conducting business via telecommunication means, we guarantee that your data is processed in accordance with applicable European legislation (the General Data Protection Regulation – GDPR) and national legislation of the Republic of Slovenia (the applicable Personal Data Protection Act, the Electronic Communications Act, and the Electronic Commerce Market Act).
The purpose of this Personal Data Protection Statement (hereinafter referred to as the “Statement”) is to inform you about the purposes for which your personal data will be collected and used, as well as your rights regarding the data we store about you and how you can exercise those rights.
BM-CNC, Radovljica, d.o.o. is committed to ensuring that all personal data collected through our website or by telecommunication means (e.g., electronic correspondence) will be used in accordance with this Statement. Your personal data will not be sold, rented, or otherwise transferred to third parties, except in cases required by law.
The provisions of this document apply to the collection and processing of all personal data gathered and processed by BM-CNC, Radovljica, d.o.o. (hereinafter referred to as the “Controller”).
Data Controller details:
BM-CNC, Radovljica, d.o.o.
Alpska cesta 43
4248 Lesce
Company registration number: 5773440000
VAT number: 43251323
Phone: +386 (0)41 66 33 02
Email: info@bm-cnc.com
Data Controller
The provisions of this document apply to the collection and processing of all personal data gathered and processed by BM-CNC, Radovljica, d.o.o. (hereinafter referred to as the “Controller”).
Data Controller details:
BM-CNC, Radovljica, d.o.o.
Alpska cesta 43
4248 Lesce
Company registration number: 5773440000
VAT number: 43251323
Phone: +386 (0)41 66 33 02
Email: info@bm-cnc.com
What Personal Data Do We Collect?
1. Basic contact information
· Email address
· First and last name
· Telephone number
2. Website usage data
· IP address
· Date and time of website visit
· Duration of visit
· Location or access point data
· Pages visited
· Configuration settings and similar information
The Controller does not collect or process your personal data unless you provide it voluntarily or consent to it – for example, when contacting us via contact form, email, or telephone – or where there is a legal basis or legitimate interest for such processing.
Legal Basis and Purpose of Processing
We process personal data when necessary to fulfill our legal obligations or contractual commitments to you. Personal data may also be processed based on your consent, which you can withdraw at any time.
Retention of Personal Data
Basic contact information is stored as long as necessary for communication purposes. Personal data obtained based on your consent is stored until your consent is withdrawn.
Data collected to fulfill contractual obligations is stored for five (5) years after the contract has been fulfilled.
After the retention period expires, personal data will be permanently and securely deleted or anonymized, rendering it non-identifiable.
Provision of Personal Data
Providing your personal data is voluntary. However, failure to provide certain categories of data may result in our inability to provide services or conclude a contract.
Access to Personal Data
Access to your personal data is restricted to authorized personnel within BM-CNC, Radovljica, d.o.o., and third parties (data processors) with whom BM-CNC, Radovljica, d.o.o. has concluded data processing agreements.
Data processors perform personal data processing services in accordance with the terms of the contract concluded between them and BM-CNC, Radovljica, d.o.o.
Data processors are prohibited from transferring personal data to third countries or international organizations.
Your Rights Regarding Personal Data
You may request at any time that BM-CNC, Radovljica, d.o.o. inform you whether it processes your personal data, which data it processes, the purpose of processing, who the data recipients are, and the period of data retention or the criteria used to determine it. You may also request information about the existence of automated decision-making, the logic involved, and its potential consequences.
You may also request the correction of inaccurate data or restriction of processing when:
· You contest the accuracy of the data for a period allowing verification of accuracy;
· The processing is unlawful, but you oppose the deletion of the data and request restriction instead;
· The Controller no longer needs the data, but you require it for the establishment, exercise, or defense of legal claims.
When the conditions set out in Article 17 of the GDPR are met, you may request the erasure of all your personal data (“right to be forgotten”), especially where the data were collected based on consent that has since been withdrawn.
You may also request a copy of your personal data in a structured, commonly used, and machine-readable format, and you may transfer such data to another controller without hindrance.
If you believe that BM-CNC, Radovljica, d.o.o. or another person is unlawfully processing your personal data, you have the right to file a complaint with the Information Commissioner of the Republic of Slovenia.
Exercising Your Rights
All requests related to the above rights should be submitted to any of the contact points listed in Section 1 of this document.
We may require proof of identity before processing your request. If you cannot reliably verify your identity, your request may be denied.
We will respond to your request as soon as possible once it has been received and verified, and no later than within 15 days of receipt.
