Respectfully,

in the document below, we present the information that we collect about you in our company, for what purpose we collect it and how long we keep it. Your rights related to personal data collection are also listed.

Your personal data is processed by the company:

CREATIVE37 D.O.O.
Cesta v Gorice 34c
1000 Ljubljana
E-mail: info@creative37.com

If you have any questions regarding the processing of personal data, the administrator is available for you through the contacts above.

We only process your personal data when we have a suitable legal basis to do so. We also process your personal data based on the pre-defined purposes that are collected below.

Giving your personal data to us is freely given, except when the necessity for processing is determined by legislation. In that case, you are obligated to provide your personal data. We need certain data to carry out our activities, we will not be able to offer our services to you without your personal data (for example, if you do not give us your e-mail address, we cannot send you our newsletter).

We only keep personal data for as long as it is necessary to fulfill the purpose for which the data was collected. After the retention period has passed or the purpose has been achieved, the data is deleted and destroyed so that it cannot be reconstructed.

The company does not perform automated individual decision making and profiling.

For easier understanding, we have collected all the processing purposes, types of personal data we collect, legal basis, and periods for which the personal data will be stored below in a quick overview.

EXECUTION OF SERVICES

• Category of personal data: First and last name, contact persons, workplace, company information, payment information.

• Legal basis: Contractual relationship.

• Retention period: 5 years after the conclusion of the contractual relationship.

PROCESSING REQUESTS (REGARDLESS OF THE COMMUNICATION CHANNEL)

• Category of personal data: First and last name, e-mail, telephone number, company data, other information submitted by the individual as part of the request.

• Legal basis: Pre-contractual relationship.

• Retention period: 1 year from last communication.

PUBLISHED CUSTOMER REVIEWS ON OUR WEBSITE AND SOCIAL MEDIA PLATFORMS

• Category of personal data: First and last name, a photo, company information.

• Legal basis: Consent.

• Retention period: Until withdrawal of consent.

PERFORMING A FREE WEBSITE ANALYSIS

• Category of personal data: First and last name, company data, e-mail, telephone number.

• Legal basis: Legitimate interest in presenting the way our company works to a wider audience.

• Retention period: 1 year from last communication.

EXERCISING OUR RIGHTS AND DEFENSE AGAINST CLAIMS

• Category of personal data: The set of data depends on the individual legal process.

• Legal basis: Law.

• Retention period: In accordance with the law.

We do not transfer personal data to countries outside the European Union or the EEA, any transfer is based on the EU-US Data Privacy Framework.

We use the following types of contract data processors in our work:

• bulk email sender service,

• hosting provider,

• accounting service,

• legal counseling,

• cloud service provider.

We may share personal data with state authorities for court proceedings and protection of our interests.

Your transmitted personal data is protected through the implement of technical and organizational measures. These are:

• establishing a restriction on access to personal data,

• physical security measures for our business premises,

• ensuring the regular updating and maintenance of the hardware, software and application equipment that we use for the processing of personal data.

Despite the security measures in place, a security incident may occur. For this purpose, we have established a system of up-to-date and rapid action in accordance with the standards of the legislation.

If a security incident occurs where there is a possibility that the rights of individuals have been threatened, we will notify the competent authority immediately, but no later than within 72 hours. When a personal data breach is likely to result in a high risk to the rights and freedoms of the data subject, the controller should without undue delay communicate it to him.

With regards to the processing of personal data, you have the following rights:

• Access to personal data: you can request information about whether we process personal data about you, access your personal data and information about the processing we carry out.

• Rectification of inaccurate personal data: if our data is incomplete or inaccurate, you can request a correction.

• Restriction of processing : you can request that we temporarily limit the processing of your personal data, e.g. for the duration of the rectification of inaccurate personal data that we process about you.

• Right to erasure of personal data: you can request a deletion of your personal data, but we will not delete data that we process for reasons of a contractual relationship (one that is still legally binding) and data that we process based on law and regulation.

• Printout of personal data information: you can request that we provide you with the personal data in a structured, commonly used, and machine-readable format.

• Revocation of consent: you can revoke your consent to the processing of personal data at any time, without negative consequences for you. You can withdraw your consent by sending us an e-mail to info@creative37.com.  After revocation of consent, we will no longer be able to provide you with certain services.

• Objection to the processing of personal data: you have the right to object to the processing of personal data when it comes to the processing of personal data for direct marketing purposes, including profiling. You submit your objection by sending us an e-mail to info@creative37.com.

• The right to data portability: you can request a printout of the personal data that you have provided us with and a transfer of this data to another controller. We will, as per your request, transfer the personal data directly to another controller when this is technically feasible.

You can exercise your rights by sending us an e-mail to info@creative37.com.  We will respond to your requests as soon as possible, but within 30 days at the latest. In case of extensive requests, we can also extend the 30-day deadline, which we will inform you about.

We reserve the right to request additional personal data from you when we cannot reliably identify you based on the personal data you have provided. If you refuse to provide such personal data, we will reject your request.

If you think that there has been a violation of the protection of personal data, you can submit a report to the Information Commissioner. More information on the authority of the Information Commissioner can be found at www.ip-rs.si.

All information regarding the processing of personal data can be found in this document.

The latest version of our privacy policy will always be available on our website https://creative37.com/en. For any additional questions or clarifications, we are available at: info@creative37.com.