One of the guiding principles and core values of the digital agency Kokos Agency d. o. o., Vevška cesta 52, 1260 Ljubljana – Polje (hereinafter: Kokos Agency) is consistent respect for rights and compliance with the law.
We recognise our responsibility when handling the personal data of our clients, prospective clients, visitors to Kokos.agency websites and all individuals who disclose their personal data when contacting us (hereinafter: users). We undertake to use users’ personal data exclusively for the purposes set out in this document (Privacy and Personal Data Protection Policy).
This Privacy and Personal Data Protection Policy (hereinafter: the Policy) describes how we collect users’ personal data, the purposes for which we collect it, the security measures we use to protect it, the persons with whom we share it and your rights concerning personal data protection.
The protection and handling of users’ personal data is fully aligned with the provisions of the General Data Protection Regulation (Regulation (EU) 2016/679, hereinafter: GDPR) and other legal regulations governing the field of personal data protection. Our activities comply with European legislation and the conventions of the Council of Europe (ETS No. 108, ETS No. 181, ETS No. 185, ETS No. 189)) as well as the legislation of the Republic of Slovenia (the Personal Data Protection Act (ZVOP-1, Official Gazette of the Republic of Slovenia, No. 94/07) and the Electronic Commerce Market Act (ZEPT, Official Gazette of the Republic of Slovenia, No. 96/09 and 19/15)).
Personal data means any information about characteristics, circumstances, conduct or relationships relating to an identified or identifiable natural person, regardless of the form in which it is expressed. An identifiable natural person is someone who can be identified directly or indirectly through identification numbers (such as a personal identification number (EMŠO), tax number, health insurance number, telephone number or vehicle registration number), or by reference to factors specific to their physical, physiological, mental, economic, cultural or social identity (such as employment, address, role, position or status within an organisation).
In accordance with the purposes set out below in this Privacy Policy, the website owner collects the following personal data:
Processing of personal data means any operation or set of operations performed on personal data that is processed automatically, or that forms or is intended to form part of a personal data filing system when processed manually. This includes collection, acquisition, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, communication, dissemination or otherwise making available, alignment or combination, blocking, anonymisation, erasure or destruction. Processing may be manual or automated.
The website owner collects and processes users’ personal data on the following legal bases:
The website owner does not collect or process users’ personal data unless users provide it or consent to the processing:
The period for which the website owner retains collected data is described in more detail in the Personal Data Retention section.
Kokos Agency d. o. o. collects and processes users’ personal data for the following purposes:
Where providing personal data is a contractual requirement, a requirement necessary to enter into and perform a contract with the provider, or a legal obligation, we will need to ask you to provide your personal data. If you do not provide it, you will be unable to enter into a contract with the provider, and the provider will be unable to perform the services or supply the products under the contract.
The Data Protection Officer at Kokos Agency d. o. o. is Boštjan Kovač, reachable at bostjan.kovac@kokos.agency.
Kokos Agency d.o.o. does not disclose users’ collected personal data to third parties or third countries, except in the circumstances described below.
The exceptions include:
We retain personal data that you provide to Kokos Agency d. o. o. with your explicit consent when registering, subscribing to newsletters, downloading e-publications or submitting an enquiry until you withdraw your consent.
You may withdraw your consent to the collection and processing of personal data at any time. Withdrawal does not affect the lawfulness of collection and processing carried out before consent was withdrawn.
We retain all other personal data processed as part of a contractual relationship in accordance with applicable law.
We use multiple layers of protection to safeguard personal data. Personal data is stored digitally, and our computer systems are protected by technical and organisational measures designed to prevent accidental or unlawful destruction, loss or alteration, and unauthorised disclosure of or access to your personal data.
Personal data obtained on the basis of consent may be processed and retained for as long as the purpose exists or until the individual withdraws their consent.
Personal data processed on the basis of a contract may be processed and retained for five years after both parties have fulfilled their contractual obligations. Invoices are retained for ten years after the end of the year to which the invoice relates, in accordance with the law governing value added tax.
Kokos Agency d.o.o. may process an individual’s personal data for its own purposes until consent is withdrawn by requesting removal of the personal data from the database. Otherwise, it will be retained only for as long as necessary to achieve the purpose for which it was collected: ten years for registered users; five years after both parties have fulfilled their contractual obligations for all other users; until a subscriber unsubscribes from newsletters; or until the controller ceases trading.
While personal data is being managed, an individual may request access to and updating of their data in the database. In accordance with the Value Added Tax Act, the company retains invoices for ten years after the end of the year in which the invoice was issued.
Under applicable law, an individual has the right to withdraw consent at any time and to request access to, rectification or erasure of personal data, or restriction of its processing.
You may withdraw your consent to personal data processing at any time. Send your request by email to kokos@kokos.agency or by post to Kokos Agency d. o. o., Vevška 52, 1260 Ljubljana – Polje.
An individual may also submit a complaint concerning the processing of their personal data to the address above.
An individual may also submit a complaint concerning the processing of their personal data directly to the competent supervisory authority, the Information Commissioner of the Republic of Slovenia.
