Personal Data Protection

GDPR, or the General Data Protection Regulation, establishes new rules in the field of personal data protection. In accordance with it, the following personal data protection policy is defined, which applies to the operations of the MADAL BAL d.o.o. online store, as well as to the operations of the MADAL BAL company in physical stores and other forms of our company's operations in the Republic of Slovenia.

Personal Data Protection Policy

1. Introductory Provision

2. Controller and Data Protection Officer

3. Purposes and Legal Bases for Personal Data Processing

4. Personal Data Retention Period

5. Individual Rights in Connection with Personal Data Processing

6. Right to Lodge a Complaint Regarding Personal Data Processing

7. Validity of the Personal Data Protection Policy

1. Introductory Provision

MADAL BAL d.o.o. recognizes and respects your trust, which you show by providing us with and allowing us to use your personal data. With this Personal Data Protection Policy (hereinafter: policy), we inform you about the purposes and legal bases for personal data processing by our company, as well as your rights in this area.

2. Controller and Data Protection Officer

The controller of personal data processed in accordance with this policy is MADAL BAL d.o.o., Vetrinjska 12, Maribor 2000 (hereinafter: MADAL BAL). The data protection officer can be reached at the email address andrej.sonc@madalbal.si.

3. Purposes and Legal Bases for Personal Data Processing

a) Processing based on the purchase agreement

The individual provided their data when making a purchase in the MADAL BAL online store or in physical form at one of our points of sale. Based on this legal ground, MADAL BAL performs the following processing:

Online store: online purchase execution, order status notification, delivery, payment execution, benefit allocation, complaint procedures, abuse detection, complaint procedures, abuse detection. Address and contact information are forwarded to the goods delivery company.

b) Processing based on consent

MADAL BAL may process personal data based on obtained consent from individuals to receive electronic messages according to the following categories:

- general electronic notifications regarding the operation of our stores.

- electronic notifications about new products in our sales program

- electronic notifications about seasonal discounts and promotions

- electronic notifications about workshops, lectures within our holistic program

The individual can give and withdraw consent at any time in the following way:

in writing to the address: MADAL BAL d.o.o., Vetrinjska ulica 12, 2000 Maribor or our email address: andrej.sonc@madalbal.si.

Data obtained based on consent for the purpose of sending electronic notifications are also used within the MailChimp messaging system to track the responsiveness statistics of sent emails.

4. Personal Data Retention Period

Retention periods vary depending on the collection of personal data, specifically:

a) Data on online store purchases are stored for 5 years

b) Data obtained based on consent for sending electronic notifications are stored until withdrawal of consent

5. Individual Rights in Connection with Personal Data Processing

Individuals have a number of rights in connection with personal data. MADAL BAL verifies the identity of the individual requesting their rights before exercising the right. The individual submits their request for access by email to andrej.sonc@madalbal.si or in writing to MADAL BAL d.o.o., Vetrinjska ulica 12, 2000 Maribor. MADAL BAL fulfills a justified request within 1 month; in case of complex requests or a larger number of requests, the fulfillment period may be extended by another 2 months. MADAL BAL informs the individual of such an extension and the reasons for it.

a) Right of access to data: at their request, we inform the individual whether personal data concerning them is being processed, in what form, and for what purposes.

the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;

the right to lodge a complaint with the Information Commissioner;

b) Right to rectification: The individual can at any time request that MADAL BAL correct inaccurate data or complete incomplete data relating to them.

c) Right to erasure of data (the "right to be forgotten"): The individual can request that their personal data be erased in the following cases

the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

the individual withdraws consent on which the processing is based, and where there is no other legal ground for the processing;

the individual objects to the processing of personal data, and there are no overriding legitimate grounds for the processing;

the personal data have been unlawfully processed;

the personal data have to be erased for compliance with a legal obligation in Union or Slovenian law.

d) Right to restriction of processing: The individual may request that the processing of data relating to them be restricted when: the data is inaccurate, the processing is unlawful, but the consumer does not want us to erase the data, MADAL BAL no longer needs the data for processing purposes, but the individual needs them for the establishment, exercise or defense of legal claims, the individual has objected to processing.

6. Right to Lodge a Complaint Regarding Personal Data Processing

The individual can send any complaint regarding the processing of personal data to the email address andrej.sonc@madalbal.si or by mail to: MADAL BAL d.o.o., Vetrinjska ulica 12, Maribor, 2000.

Also, every individual whose personal data is processed has the right to lodge a complaint directly with the Information Commissioner if they believe that the processing of their personal data violates applicable law.

7. Validity of the Personal Data Protection Policy

This policy is published on www.madal-bal.com and is valid from May 25, 2018 onwards.