PRIVACY POLICY

Privacy Policy

Date of publication of the latest version of the Policy: 24 May 2018

Controller and contact details

This Policy applies to the processing (use) of any personal data by Orca Energija d.o.o. (Controller) or on behalf of the Controller.

Information on the Controller:
Orca Energija d.o.o.
Vodovodna ulica 30C, 2000 Maribor
Registration No.: 8171459000
Phone: 02 320 71 80
E-mail:info@orcaenergy.eu

Introductory provisions

Orca Energija d.o.o. respects your right to privacy and strives for the highest level of protection of your personal data. In the provision of our services, we are obliged to act in accordance with the laws and regulations that define the protection of personal data, in particular in accordance with the Personal Data Protection Act, Article 45a. of the Consumer Protection Act, the Electronic Communications Act and the EU General Data Protection Regulation ( In the provision of our services, we are obliged to act in accordance with the laws and regulations that define the protection of personal data, in particular in accordance with the Personal Data Protection Act, Article 45a. of the Consumer Protection Act, the Electronic Communications Act and the EU General Data Protection Regulation ( GDPR).

Orca Energija d.o.o. undertakes to use the collected personal data in accordance with this Privacy Policy, not to sell, lend or in any other way transmit your personal data to third parties, except in cases specified by law.

Procedures for the protection of personal data

If you provide us with any personal data via the website, e-mail, telephone or in any other way, we will respect your privacy in accordance with the GDPR regulation and applicable law. Our Data Protection Policy is as follows:

We inform the users exactly how and for what purpose we will process the data;
we do not rent, sell or allow any third party to use data about the Users of our website;
we regularly check and update our databases so that they contain as little incorrect data as possible.

We store personal data in computer form. Our computer system is protected by technical and organisational measures that prevent accidental or unlawful destruction, loss, alteration and unauthorised disclosure or access to your personal data.

What personal data we process

Basic contact information (name, surname, gender – for addressing purposes, address, telephone number, e-mail);
Information about the use of our websites (clicks on links, time spent) and information regarding the response to our e-mails (we only track the anonymised cumulative percentage of opened e-mails and clicks on links);
Information we need to fulfil the order and contract.

Legal basis for processing personal data

We process your personal data on the following legal bases:

when necessary to fulfil our legal obligations (e.g. issuing invoices for a purchased service or product);
when the processing of your personal data is necessary for the conclusion and fulfilment of the contract that you entered into with us or because you wanted an offer from us;
when you have given consent for the processing of your personal data for an individual purpose of processing, whereby you always have the right to withdraw your consent;
when we have a legitimate interest in processing your personal data.

Purposes of personal data processing

We may use your personal data for one or more of the following purposes:

communicating with you regarding the provision of our services and responding to your inquiries;
conclusion of a contract and fulfilment of the obligations arising from the concluded contract;
marketing communications (sending e-mail, regular mail and SMS messages) in accordance with your given consent;
to enforce any legal claims and settle disputes;
for statistical analyses on the sale of our services and products and on the use of our websites – anonymised data is used,

Any personal data you provide to us will be treated confidentially and will be used only for the purposes for which they were provided. If there is a need for further processing of your data for another purpose, we will first ask for your consent.

Voluntary provision of data and consequences of non-provision

The provision of personal data is voluntary. You are not obliged to provide us with personal data, but if you do not provide the data, you will not be able to receive certain services or enter into a contract with us. We will indicate for which data the non-provision causes such consequences each time we obtain personal data from you.

Who has access to your personal data

We do not transmit your personal data and do not make it available to third parties (outside Orca Energija d.o.o.) except to those who have a written contract with us, on the basis of which they perform specific tasks related to data processing and are obliged to comply with the legislation regarding processing and protection of personal data (so-called contractual processors). The contractual processors to whom we provide personal data are:

sales advisors for contact regarding the preparation of an offer;
contractual companies engaged in the sale and implementation of photovoltaic power plants;
e-mail provider (SqualoMail);
SMS and MMS messages provider (e-Poštar);
accounting service Pro-fin d.o.o.;
business partners for product delivery,
business partners for servicing and installation of products.

Contractual processors may only process personal data within the framework of our instructions and may not process personal data for their own purposes. Together with their employees, they are committed to protecting the confidentiality of your personal data. Contractual processors do not transmit personal data to third countries.

The SqualoMail service monitors the success rate of sent e-mails by collecting data on opened e-mails, clicks on links, e-mail clients and browsers, approximate location, IP address, logins and unsubscribes, and failed e-mail delivery.

Retention period

Personal data processed based on your consent are stored permanently or until you withdraw such consent. do preklica te privolitve z vaše strani. We keep data on issued invoices for 10 years from the date of issue. We keep the data necessary for the conclusion and fulfilment of the contract between us for another 5 years from the fulfilment of the contract.

We store data about which services or products you have purchased from us permanently or until we receive your request for the erasure of such data. dokler ne prejmemo vaše zahteve za izbris podatkov. After the retention period has expired, we effectively erase or anonymise personal data, which means that we process them in such a way that they can no longer be linked or attributed to you.

Your rights

We will take all necessary measures to ensure that your data are treated securely, in accordance with this Privacy Policy. You have the right to access the personal data we keep about you and the right to rectification or erasure of your data. You also have the right to restrict the processing of your data. The data subject may at any time request that Orca Energija d.o.o.:

allow the rectification of inaccurate personal data relating to the data subject and allow the data subject to supplement incomplete personal data;
allow the enforcement of the right to erasure of personal data (i.e. "right to be forgotten") if the conditions from Article 17 of the GDPR are met;
allow the enforcement of the right to limit processing;
allow the enforcement of the right to object to processing;
allow the enforcement of the right to data portability and provide the data subject with the data in a commonly used and machine-readable format or provide it directly to another controller;
allow the enforcement of the right to withdraw consent when personal data are processed on the basis of consent, whereby the withdrawal of consent shall not affect the legality of the data processing that was carried out until its withdrawal;
provide additional information about the data subject's right to file a complaint with the competent supervisory authority.

Orca Energija d.o.o. will also provide other information to the data subject at their request in accordance with the applicable legislation regarding the data subject's personal data that it processes.

Procedure for exercising rights

You can address your requests regarding the exercise of rights in relation to personal data in writing to the contact listed at the top of this document under Controller and contact information.

For the purposes of reliable identification in the event of exercising rights in relation to personal data, we may request additional information from you, and we may refuse to take action only if we prove that we cannot reliably identify you.

Orca Energija d.o.o. undertakes to respond to the requests of the data subject without undue delay no later than 15 days from the receipt of the request or at the latest within the statutory time limits. najkasneje pa v zakonsko predpisanih rokih.

Unsubscribing from the newsletter

If you no longer wish to receive e-mail newsletters, you can unsubscribe using the automatic unsubscribe link in each e-mail, or by sending us an e-mail with the content "UNSUBSCRIBE" to the e-mail address info@orcaenergy.eu.

Amendments to the Privacy Policy

We reserve the right to adjust this Privacy Policy from time to time, if necessary, to actual conditions and personal data protection legislation The applicable Privacy Policy is published on our website and the information board in the information office of Orca Energija d.o.o.

This Privacy Policy was updated on 24 May 2018. maja 2018.

Maribor, 25.5.2018