Privacy Policy
Last updated: 19.06.2024
Table of Contents
- 1. Personal data controller
- 2. Scope of this Privacy Policy
- 3. Personal data we process
- 4. Purposes and legal bases for processing
- 5. Recipients and disclosure of personal data
- 6. Transfers to third countries
- 7. Retention periods
- 8. Your rights
- 9. Cookies and similar technologies
- 10. Data security
- 11. Changes to this Privacy Policy
- 12. Contact
1. Personal data controller
The controller of your personal data is:
NOVATEL, družba za informacijske tehnologije d.o.o.
abbreviated company name: NOVATEL d.o.o.
address: Bukovžlak 101, 3000 Celje, Slovenia
company registration number: 3359948000
tax number: SI63790033
website: https://novatel.si/
email: info@novatel.si
telephone: +386 82 800 820
For questions regarding personal data protection or to exercise your rights, please contact us at
info@novatel.si.
2. Scope of this Privacy Policy
This Privacy Policy explains how we process the personal data of visitors and users of
novatel.si, particularly when you:
- visit or use the website,
- complete a contact form or submit an enquiry,
- request information about services, offers or a subscription relationship,
- report a fault, submit a complaint or request support,
- use the online shop or shopping cart, or place an order,
- consent to the use of analytical, functional or advertising technologies.
Additional privacy notices, contractual terms and specific legislation may apply to the conclusion and performance
of subscription agreements, telecommunications services, telephone number portability, service billing and other
specialised services. This Privacy Policy does not replace such documents.
3. Personal data we process
3.1 Personal data you provide
Depending on how you use the website, we may process the following personal data in particular:
- your first and last name,
- the name of your company or organisation when you act on its behalf,
- your email address and telephone number,
- the content of your message, enquiry, fault report or complaint,
- information about the service, package, product or solution in which you are interested,
- information required to prepare an offer, process an order or conclude an agreement,
- delivery and billing addresses, order details and other information required for an online purchase, where enabled,
- other information that you voluntarily provide in a form or message.
Please do not submit special categories of personal data or other confidential information through website forms,
unless this is necessary and expressly requested for the performance of a particular service.
3.2 Website usage data
When you visit the website, technical information may be recorded automatically, including your IP address,
the date and time of access, browser type, operating system, device information, approximate location,
pages visited, referring page, website performance information, and security and server logs.
3.3 Cookie and consent data
Depending on your choices, we may process data obtained through essential, analytical, functional and advertising
cookies and similar technologies. The consent management system may also record your consent preferences,
the date of your choice and limited technical information required to demonstrate that choice.
3.4 External content and links
The website may contain links to or embedded content from external providers, such as videos, maps,
social networks or other online services. Where required, external content is generally loaded only after
you have given your consent. The privacy policies of the relevant providers apply to processing carried out
on external websites.
4. Purposes and legal bases for processing
We process personal data only for specified and lawful purposes and where an appropriate legal basis exists
under Article 6 of the General Data Protection Regulation (GDPR).
- Communication and responding to enquiries
Purpose: to respond to your question, provide information or prepare an offer, and conduct further communication.
Legal basis: taking steps at your request before entering into a contract or performing a contract
(Article 6(1)(b) GDPR), or our legitimate interest in efficient business communication (Article 6(1)(f) GDPR). - Preparing offers, ordering services and concluding agreements
Purpose: to prepare an offer, assess the feasibility of providing a service, and conclude and perform a contractual relationship.
Legal basis: Article 6(1)(b) GDPR and compliance with legal obligations under Article 6(1)(c) GDPR. - Online shop and order processing
Purpose: to manage the shopping cart, process purchases, payments and delivery, issue invoices,
and handle returns and complaints.
Legal basis: Article 6(1)(b) GDPR and Article 6(1)(c) GDPR. - Fault reports, technical support and complaints
Purpose: to identify the request, communicate with the user, resolve the fault, handle the complaint
and document the activities performed.
Legal basis: Article 6(1)(b), Article 6(1)(c), or our legitimate interest under Article 6(1)(f) GDPR. - Business records and compliance with legal obligations
Purpose: accounting, tax compliance, document retention, handling claims and cooperating with competent authorities.
Legal basis: Article 6(1)(c) GDPR. - Direct marketing and notifications
Purpose: to send notifications, offers or news where you have subscribed or where such communication
is permitted under applicable legislation.
Legal basis: consent under Article 6(1)(a) GDPR or legitimate interests under Article 6(1)(f) GDPR,
where such use is permitted. You may withdraw your consent at any time. - Website analytics
Purpose: to measure traffic, understand website use, resolve issues and improve content.
Legal basis: consent under Article 6(1)(a) GDPR for analytical cookies. - Advertising and campaign performance measurement
Purpose: to measure advertising performance, limit repeated advertisements, conduct remarketing
and personalise advertising.
Legal basis: consent under Article 6(1)(a) GDPR for advertising cookies and similar technologies. - Website security and proper operation
Purpose: to protect forms, prevent spam and abuse, detect errors, maintain system security,
and manage sessions, shopping carts and user preferences.
Legal basis: our legitimate interest under Article 6(1)(f) GDPR, necessity for the performance
of a requested service and compliance with legal obligations.
Requirement to provide personal data
Providing personal data through website forms is generally voluntary. However, if you do not provide information
required to process your request, prepare an offer, process an order or conclude an agreement,
we may be unable to respond or provide the requested service.
Automated decision-making
We do not use the website to carry out automated decision-making that produces legal effects or similarly
significantly affects you. Advertising technologies may involve limited profiling to display more relevant
advertisements, but only where you have given your consent.
5. Recipients and disclosure of personal data
Depending on the purpose, your personal data may be processed by or disclosed to:
- authorised employees and contractors of the controller,
- hosting, email, backup and information technology service providers,
- website development, maintenance and technical support providers,
- consent and cookie management service providers,
- analytics, advertising, form protection and external content providers where you have consented,
- payment, accounting, delivery or logistics service providers where necessary to process an order,
- business partners or subcontractors where necessary to prepare an offer or perform the requested service,
- competent public authorities, courts or other recipients where disclosure is required by law.
Contractual processors may process personal data only to the extent necessary to provide their services,
in accordance with our instructions and subject to appropriate contractual, organisational and technical safeguards.
6. Transfers to third countries
When certain external providers are used, such as analytics, advertising, form protection, video or other
online service providers, personal data may be processed or accessed from outside the European Union
or the European Economic Area.
Where required, such transfers are carried out on the basis of an adequacy decision adopted by the European Commission,
standard contractual clauses, supplementary safeguards or another appropriate legal basis under the GDPR.
7. Retention periods
- Enquiries and general communication:
until the communication has been concluded and for a further reasonable period required to document agreements,
handle follow-up questions or protect legal claims. - Offers, agreements and orders:
for the duration of the preparation and performance of the contractual relationship, and after its conclusion
for the periods required by accounting, tax, telecommunications and other applicable legislation or limitation periods. - Fault reports, support and complaints:
until the matter has been resolved and for a further period required to document the activities performed
and handle potential claims. - Direct marketing data:
until you unsubscribe, object or withdraw your consent. Evidence of consent or withdrawal may be retained
for as long as necessary to demonstrate compliance. - Technical and security logs:
generally for a shorter period, unless longer retention is required due to a security incident,
the prevention of abuse or the establishment, exercise or defence of legal claims. - Cookies:
for the duration of the individual cookie, until deletion in your browser or until consent is withdrawn.
Personal data may also be deleted earlier where the purpose of processing has ceased and no other legal basis
exists for its continued retention.
8. Your rights
Subject to the conditions laid down in the GDPR, you have the right to:
- access your personal data,
- rectify inaccurate or incomplete personal data,
- erase personal data,
- restrict processing,
- data portability,
- object to processing based on legitimate interests,
- withdraw consent without affecting the lawfulness of processing carried out before withdrawal,
- receive information about the source of personal data where it was not obtained directly from you,
- lodge a complaint with a supervisory authority.
You may submit your request to info@novatel.si.
Before processing your request, we may ask you to provide additional information necessary to verify your identity.
You may lodge a complaint with the Information Commissioner of the Republic of Slovenia,
Dunajska cesta 22, 1000 Ljubljana, Slovenia.
9. Cookies and similar technologies
The website uses cookies and similar technologies for essential operation, storing consent preferences,
protecting forms, operating the online shop, website analytics, displaying external content and,
where permitted, measuring and personalising advertising.
You can manage your cookie preferences through the cookie banner or the
CookieYes preference centre. You may change or withdraw your consent at any time.
The list of cookies may change due to updates to the website, plugins or external service providers.
To maintain the most accurate list, a new CookieYes scan should be carried out regularly and the results
should be aligned with the table below.
9.1 Essential cookies
Essential cookies enable the basic operation of the website, store your consent choices,
protect against abuse and support essential online shop functions.
| Cookie | Duration | Description |
|---|---|---|
cookieyes-consent | 1 year | Stores the user's consent preferences so that the selected settings can be respected on future visits. |
_GRECAPTCHA | Up to 6 months | Google reCAPTCHA may use this cookie to identify automated requests and protect forms from spam and abuse. |
rc::a | Persistent local storage | Google reCAPTCHA may use this technology to distinguish between human and automated requests. |
rc::b | Session | Google reCAPTCHA may use this technology to protect the website from spam and abuse. |
rc::c | Session | Google reCAPTCHA may use this technology to protect the website from spam and abuse. |
rc::f | Persistent local storage | Google reCAPTCHA may use this technology for risk assessment and form protection. |
Note: when reCAPTCHA is used, Google may also process technical data such as your IP address,
browser and device information, and information about your interaction with the website.
9.2 Online shop and WordPress cookies
These cookies are created only when you use features that require them, such as the shopping cart,
user login, password-protected content or the website administration area.
| Cookie | Duration | Description |
|---|---|---|
woocommerce_cart_hash | Session | WooCommerce may use this cookie to detect changes to the contents of the shopping cart. |
woocommerce_items_in_cart | Session | WooCommerce may use this cookie to store whether the shopping cart contains any items. |
wp_woocommerce_session_* | Generally 2 days | Contains a user session identifier and enables the user to be linked to the contents of their shopping cart. |
wordpress_test_cookie | Session | Checks whether the browser supports cookies. |
wordpress_logged_in_[hash] | Session or until logout | Maintains the user's login where login functionality is enabled. |
wordpress_sec_[hash] | Session or until logout | Security cookie used for WordPress login. |
wp-settings- | 1 year | Stores display preferences for logged-in users. |
wp-settings-time- | 1 year | Stores the timestamp of the user's settings. |
wp-postpass_[hash] | Generally 10 days | Enables access to password-protected content. |
9.3 Analytical cookies
Analytical cookies are used to understand how the website is used, for example by measuring the number
of visitors, sessions, viewed pages and traffic sources. They are loaded only on the basis of your consent.
| Cookie | Duration | Description |
|---|---|---|
_ga | Generally up to 2 years or in accordance with the service settings | Google Analytics uses this cookie to distinguish visitors and prepare website usage statistics. |
_ga_* | Generally up to 2 years or in accordance with the service settings | Google Analytics uses this cookie to store and count page views and maintain session status. |
9.4 Advertising cookies
Advertising cookies may be used to measure advertising effectiveness, conduct remarketing and display
more relevant content. They are loaded only on the basis of your consent.
| Cookie | Duration | Description |
|---|---|---|
_fbp | Generally up to 3 months | Meta may use this cookie to measure interactions and advertising performance and to conduct remarketing. |
9.5 External video content
The website may contain embedded video content, such as YouTube videos. Following your consent,
the provider may set its own cookies or use similar technologies to play videos, store preferences,
measure views and provide advertising. The names and duration of these technologies are determined
by the external provider and may change.
9.6 Managing cookies
- you may change your consent preferences at any time through the cookie banner or preference centre,
- you may delete or block cookies through your browser settings,
- refusing non-essential cookies should not prevent access to the website's basic content,
- blocking essential cookies may affect the operation of the shopping cart, forms, login and other essential functions.
10. Data security
We use reasonable technical and organisational measures to protect personal data against unauthorised access,
disclosure, alteration, loss, destruction or other unlawful processing. Access to personal data is restricted
to persons who require it to perform their duties.
Despite the security measures applied, complete security of data transmitted over the internet cannot be guaranteed.
We therefore recommend that you do not submit passwords, copies of identity documents or other particularly sensitive
information through unsecured forms, unless we provide an appropriate secure method of transmission.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time due to changes in legislation, services, the website,
service providers or our personal data processing practices. The version published on this page,
together with the stated date of the last update, is the applicable version.
12. Contact
For questions regarding privacy or to exercise your rights, please contact:
info@novatel.si.
NOVATEL d.o.o.
Bukovžlak 101
3000 Celje
Slovenia
