Privacy Policy

The RADIOSHOP online shopping center respects your privacy and undertakes to carefully protect the personal data obtained through the registration form and not to forward it to a third party or use it for other purposes. We reserve the right to use your personal data exclusively for the successful implementation of sales and delivery services.

YOUR CONSENT TO THE COLLECTION AND PROCESSING OF PERSONAL DATA

By registering in the RADIOSHOP online shopping center and agreeing to the general terms and conditions, you agree to your personal data being included in the list of registered RADIOSHOP users and agree to the use of your data exclusively for the successful implementation of sales and delivery services in the RADIOSHOP online shopping center.

PROTECTION OF PERSONAL DATA

RADIOSHOP is committed to protecting the personal information you provide to us. In order to prevent unauthorized access to or disclosure of this information, maintain the accuracy of personal information, and ensure its use, we use appropriate technical and organizational procedures to secure the information we collect.

PERSONAL DATA PROTECTION AND PRIVACY

VEDOVA d.o.o., Kostanjevica 6, 5213 Kanal, Slovenia, e-mail address [email protected]
(hereinafter: the company VEDOVA d.o.o. or the provider or controller of personal data) hereby announces

At VEDOVA d.o.o. we value your privacy, so we always carefully protect your data.
All information provided is protected from unauthorized third parties, which ensures you a carefree
and smooth business with VEDOVA d.o.o.
This privacy policy may be changed or amended at any time, without prior warning or notification.
By using the provider's websites after a change or amendment, the individual confirms that he or she agrees with the changes and amendments.
Personal data protection means:

– We will never misuse your personal information in any way.
– We will never share your contact and personal information with any unauthorized third party.
– You can quickly and easily unsubscribe from any of our emails or other forms of communication at any time.

All our online activities are in accordance with European legislation (Regulation (EU) 2016/697 on the protection of individuals with regard to the processing of personal
data and on the free movement of such data,
(General Data Protection Regulation or GDPR) and the Council of Europe conventions (ETS No. 108, ETS No. 181, ETS No. 185, ETS No. 189))
and the national legislation of the Republic of Slovenia (Personal Data Protection Act (ZVOP-1, Official Gazette of the Republic of Slovenia, No. 94/07),
Electronic Commerce Act (ZEPT, Official Gazette of the Republic of Slovenia, No. 96/09 and 19/15) etc.).
The Privacy Policy addresses the handling of information that the provider obtains about you when you visit and use our website
or provide it to it in another way.
Collection and processing of personal data:

Personal data is information that identifies you as an identified or identifiable natural person.
An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name,
an identification number, location data, an online identifier or to one or more factors
specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

The provider does not collect your personal data, except when you enable it or consent to it, i.e. when ordering products or services.
The provider collects and processes (uses) your personal data for the following purposes, namely:

– ensuring that you access and use your online account with the provider and the provider's online shop and
for technical reasons of administration on the provider's website,
– concluding and performing the contract concluded with the provider, including the provider's fulfillment of your orders
(delivery of products and provision of services), communication with you,
– verifying your payments and fulfilling other obligations of the provider and/or your obligations
(the provider's legitimate interest in processing your personal data, point (f) of Article 6 (1) GDPR),
– ensuring that you can access specific information available to you on the provider's website and in
your online account/profile provided by the provider,
– any other purposes for which you specifically agree when cooperating with the provider.

The provider collects and processes your personal data on the following legal grounds:

– law,
– contractual relationships and
– individual consent.

The period of time during which the Provider stores the collected data is defined in more detail in the Personal Data Retention section
of this Policy.

In the event that the provision of personal data is a contractual obligation, an obligation necessary for the conclusion and performance of a contract
with the provider, or a legal obligation, you must provide personal data; if you do not provide personal data,
you cannot conclude a contract with the provider, and the provider cannot provide you with services or supply you with products under the contract,
as it does not have the necessary data to perform the contract.

Personal information:

The Provider, in accordance with the purposes defined in this policy, collects the following personal data:

– basic data about the user (name and surname, address of residence, date of birth, contact details and data on communication
with the operator (e-mail address, telephone number, date, time and content of postal or e-mail communication);
– data about the user's purchases and issued invoices (date and place of purchase, purchased items, prices of purchased items,
total purchase amount,
– payment method, delivery address, invoice number and date of issue, code of the person who issued the invoice, etc.)
and data on resolving product complaints;
– data about the user's use of the operator's website (dates and times of visits to the website, visited pages or URLs,
time spent on each page, number of pages visited, settings made on the website)

Storage of personal data:

The Provider will store your personal data only for as long as necessary to fulfill the purpose for which
the personal data was collected and further processed (e.g. to ensure that you access and use your online account
with the Provider and the Provider's online store, for the Provider to fulfill your orders, verify your payments and fulfill
other obligations of the Provider and/or your obligations, to ensure that you can access specific information made available to you.
Those personal data that the Provider processes on the basis of the law are stored by the Provider for the period prescribed by law.

The Provider stores personal data that the Provider processes for the purpose of performing a contractual relationship with an individual for the period
necessary to perform the contract and for 5 years after its termination, except in cases where a dispute arises between you and the Provider
in relation to the contract; in such a case, the Provider stores the data for 5 years after the finality of a court or arbitration decision
or settlement or, if there was no court dispute, for 5 years from the date of a peaceful resolution of the dispute.

The Provider stores personal data processed by the Provider based on the individual's personal consent permanently
until the individual revokes this consent.
The Provider deletes such data before revocation only when the purpose of processing the personal data has been achieved.

Contractual processing of personal data:

As an individual, you are aware of and agree that the provider may entrust certain tasks related to your data to other persons
(contractual processors). Contractual processors may process the entrusted data exclusively on behalf of the provider,
within the limits of the provider's authorization (in a written contract or other legal act) and in accordance with the purposes
defined in this privacy policy.

The contractual processors with which the provider cooperates are: Shipping carriers, DPD, accounting services, law firms
and other legal advice providers, data processing and analytics providers, IT system maintainers,
email sending providers.

The provider will not provide your personal data to unauthorized third parties.

The provider or the provider's contractual processors will not export the personal data they process to third countries,
which you as an individual are aware of and agree to.

Freedom of choice:

You control the information you provide about yourself. If you choose not to provide your information to the provider,
you will not be able to access some areas or features of the website.

If your personal information (postal code, email address, physical address, telephone number) changes, please
inform us of the changes by email at [email protected].
Automatic recording of information (non-personal data):

Whenever you access the website, general, non-personal data (number of visits, average time spent on the website,
pages visited) is automatically recorded (not as part of a login). We use this information to measure the attractiveness of our website
and to improve its content and usability. Your data is not subject to further processing and is not passed on to third parties.

Cookies:

Cookies are inconspicuous documents that are temporarily stored on your hard drive and allow the provider to recognize
your computer the next time you visit the website.
The provider uses cookies only to collect information regarding the use of the website.

Advertising cookies anonymously track an individual's use of the Provider's website only
if the individual agrees to the use of cookies on the website.
The Provider will use this data to measure the effectiveness of advertising and optimize the effectiveness of advertising only
if the individual expressly consents to this.
Security:

The provider makes great efforts to ensure the security of personal data.
Your data is protected at all times against loss, destruction, falsification, manipulation and unauthorized access
or unauthorized discovery.
Consent of a minor in relation to information society services:

Minors under the age of 16 should not provide any personal information to the website or otherwise without the permission
(consent or approval) of the holder of parental responsibility for the child (one of the parents or guardians).
The Provider will never knowingly collect personal information from persons who are known to be minors (under the age of 16),
or use it in any way or disclose it to an unauthorized third party without the permission of the holder of parental responsibility for the child.

This does not affect the general contract law of the Member States, such as rules on the validity, formation or effect of a contract
relating to a child.

The provider, taking into account available technology, shall make reasonable efforts in such cases to verify
whether the holder of parental responsibility for the child has given or approved consent.
Rights of the individual regarding data processing:

If you have any questions regarding our privacy policy or the processing of your personal data,
please feel free to contact us. Write to us at [email protected] or call us at 070 832 736.
We will inform you of your request – in writing and in accordance with the regulations.

To ensure fair and transparent processing, you as an individual have the following rights under the regulations:

Right to withdraw consent: if you, as an individual, have consented to the processing of your personal data (for one or more specific purposes),
you have the right to withdraw your consent at any time, without this affecting the lawfulness of the data processing
carried out on the basis of consent until its withdrawal;

Consent can be revoked by a written statement sent to the controller, listed on the website www.radioshop.si.

Withdrawal of consent to the processing of personal data does not have any negative consequences or sanctions for the individual.
However, it is possible that the controller may no longer be able to provide the individual with
one or more of its services after withdrawal of consent to the processing of personal data, if these are services that cannot be provided without personal data.

Right of access to personal data: as an individual, you have the right to obtain confirmation from the provider (personal data controller)
whether personal data concerning you are being processed, and, where this is the case, access to personal data and certain information
(on the purposes of processing, on the types of personal data, on users, on retention periods or criteria for determining periods,
on the existence of the right to rectification or erasure of data,
the right to restriction and objection to processing and the right to complain to a supervisory authority, on the source of the data
if the data was not collected from you, on the existence of automated decision-making, in
particular profiling, the reasons for it and the significance and consequences of such processing for you,
and other information in accordance with Article 15 of the GDPR);

Right to rectification of personal data: As an individual, you have the right to obtain from
the provider, without undue delay, the rectification of inaccurate personal data concerning you.
As an individual, you have the right, taking into account the purposes of the processing, to have incomplete data completed,
including by providing a supplementary statement;

Right to erasure of personal data (“right to be forgotten”): As an individual, you have the right to obtain from
the provider the erasure of personal data concerning you without undue delay,
and the provider must erase the data without undue delay where one of the following reasons exists:

(a) the data are no longer necessary for the purposes for which they were collected or otherwise processed,
(b) if you withdraw your consent and there is no other legal basis for the processing,
(c) if you object to the processing and there are no overriding legitimate grounds for the processing,
(d) the data have been processed unlawfully,
(e) the data must be erased for compliance with legal obligations under EU law or the law of the Member State to which the provider is subject,
(f) the data were collected in connection with the offer of information society services.

As an individual, however, you do not have the right to erasure of data in certain cases described in Article 17(3) of the GDPR;

Right to restriction of processing: As an individual, you have the right to obtain from the provider restriction of processing where one of the following applies:

(a) if you contest the accuracy of the data for a period enabling the provider to verify the accuracy of the data,
(b) the processing is unlawful and you oppose the erasure of the data and instead request the restriction of their use,
(c) the provider no longer needs the data for the purposes of the processing, but you need them for the establishment,
exercise and defence of legal claims,
(d) you have lodged an objection to the processing, pending verification whether the legitimate grounds of the provider override your grounds;

Right to data portability: As an individual, you have the right to receive personal data concerning you,
which you have provided to the provider, in a structured, commonly used and machine-readable format,
and you have the right to transmit this data to another controller without hindrance from the provider to whom the personal data were provided,
namely when:

(a) the processing is based on consent or a contract and
(b) the processing is carried out by automated means.

As an individual, when exercising the aforementioned right to portability, you have the right to have personal data transferred directly from
one controller (provider) to another, where this is technically feasible;

Right to object to processing: As an individual, you have the right, on grounds relating to your particular situation,
to object at any time to processing of personal data which is necessary for the performance of tasks carried out in the public interest
or in the exercise of official authority vested in the provider (point (e) of Article 6 (1) GDPR)
or which is necessary for the legitimate interests pursued by the provider or a third party (point (f) of Article 6 (1) GDPR),
including profiling based on said processing; the provider shall cease processing the personal data
unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms,
or for the establishment, exercise or defence of legal claims.

Where personal data are processed for marketing purposes, the individual has the right to
object at any time to processing of data concerning him or her for such marketing purposes,
including profiling to the extent that it is related to such direct marketing;
where the individual objects to processing for direct marketing purposes, the data shall no longer be processed for such purposes.

Where data are processed for scientific or historical research purposes or statistical purposes,
the individual shall have the right, on grounds relating to his or her particular situation,
to object to processing of data concerning him or her, unless the processing is necessary for the performance of a task
carried out for reasons of public interest;

Right to lodge a complaint with a supervisory authority: without prejudice to any other (administrative or other)
legal remedy, you as an individual have the right to lodge a complaint with a supervisory authority, in particular in the country
where you have your habitual residence, where your place of work is located or where the infringement is alleged to have occurred
(in Slovenia this is the Information Commissioner), if you consider that the processing of personal data concerning you infringes
the regulations on the protection of personal data.

Without prejudice to any other (administrative or non-judicial) remedy, you as an individual have the right to an effective
remedy against a legally binding decision of the supervisory authority concerning you, as well as in the event
that the supervisory authority does not handle your complaint or does not inform you of the status of the case or of the decision on the complaint within three months.
The courts of the Member State in which the supervisory authority is established shall have jurisdiction for proceedings against the supervisory authority.

An individual may address all requests regarding the exercise of rights regarding personal data, in writing,
to the controller, namely to one of the contacts listed on the website www.radioshop.si.

For the purposes of reliable identification in the event of exercising rights related to personal data, the controller may
request additional information from the individual, and may refuse to take action only if it proves that it cannot reliably identify the individual.

The controller must respond to the request of an individual exercising his or her rights in relation to personal data
without undue delay and no later than one month from the receipt of the request.
Notification to the supervisory authority of a personal data breach

In the event of a personal data breach, the Provider is obliged to notify the competent supervisory authority,
unless it is likely that the breach does not adversely affect the rights and freedoms of individuals.
Where there is a suspicion that a criminal offence has been committed,
the Provider is obliged to notify the police and/or the competent prosecutor's office of the breach.

In the event of a breach that may result in a high risk to the rights and freedoms of individuals,
the Provider is obliged
to notify the individuals to whom the personal data relates of the breach immediately or, where this is not possible, without undue delay.
The notification to the individual must be made in an intelligible and clear language.
Announcement of changes

Any changes to our privacy policy will be posted on this website.
By using the website, you acknowledge that you accept and agree to the full contents of this privacy policy.

Legal notice
The www.radioshop.si online store and all data on it are protected by the Copyright Act and may not be reproduced or used without prior written permission. Trademarks and logos of recognized companies are owned by them and are used for informational purposes and easier understanding only.