Processing of personal data
At A-STAR d.o.o., we are aware of the importance of the security of personal data of individuals, and therefore we carefully respect and enforce the applicable national and European legislation in this area. We process personal data in order to provide the best user and consumer experience in relation to our products and services, and we also ensure the highest level of care in terms of security and discretion when storing and processing your personal data. All our practices related to personal data comply with the current legislation in force in the area of personal data protection. We ensure that your personal data is stored appropriately and in accordance with due diligence, we ensure that the purposes for which we process your personal data are adequately controlled and we enable you to exercise all the rights you have under current applicable legislation.
As an individual, you have the right to request:
to be informed about which of your personal data we process and for what purposes; to have your personal data rectified in the event of incompleteness in our database; to have your personal data transferred from our database to another processor or controller of personal data; to object in the event that the processing is for direct marketing purposes, including the creation of user profiles, and we have a duty to ensure that these rights are exercised. You can find out more about your data protection rights below.
Legal bases for processing
A-STAR d.o.o., only processes your personal data if it has a legal or other basis to do so. Thus, we process data on the following grounds: your direct consent in the context of the contact form and the use of web analytics; for the performance of the contract concluded between us as the service provider and you as the customer of the service; for the purpose of carrying out pre-contractual measures; legitimate interest, which mainly relates to the direct marketing of our services; and to comply with legal obligations, in particular in the event of non-compliance with the contractual obligations and the corresponding appropriate sanctions.
The data we process and our purpose
Data obtained through the contact form and online purchase
The data we obtain from the contact form is your name, surname, telephone number, email address and the service(s) you require. We collect it in a secure way. We use it for the purpose of responding to your enquiry/fulfilling our obligations under the sales contract and further business cooperation. We do not use this information for marketing purposes unless you explicitly agree to this purpose.
Information obtained on the basis of a contract
The information we obtain on the basis of the contract is the name of the company, address, tax and registration number and the name, surname and e-mail address of the contact person. We need this information for the smooth running of our work, for invoicing and, at a later stage, for possible recovery.
Information obtained from public records
The information we obtain from public records is the name of the company, its address and its tax number. We need them to issue an invoice. It is not our business practice to collect data from databases for marketing purposes. We process data of natural persons at the request of our clients and under contract with them. It is the client’s responsibility to ensure that the data is collected in a lawful manner. We obtain all the necessary information to ensure that the data has indeed been obtained in a lawful manner. For the purpose of marketing our services, we advertise on various platforms (Google Adwords, Facebook Ads Manager) using the data we obtain through advertising tools. These tools do not give us access to specific personal data, but allow us to profile visitors to our website on the basis of this data, which is anonymised. We do this to ensure that our marketing is targeted to those who are interested in our advertising services and that they receive advertisements that are relevant to them. Processing of personal data when you visit the website www.sollstar.com. To ensure the best user experience on our website, we use the advanced web analytics program Google Analytics. The purpose is to ensure that the website works smoothly for you as a user and that it is optimised for the benefit of all our visitors. As a user of our website, you have the right to opt-out of the processing of this data immediately upon visiting the front page. You can avoid this processing by setting the appropriate cookie settings when you visit the website or by setting the appropriate cookie settings on the web browser you are using. If you decide that you wish to consent to the use of web analytics, you may do so in the same way as you have opted out or opted in. You can change this on the front page of the website. If you consent to data processing (accept cookies on the site), we obtain your anonymised IP address. This means that all your personal data is encrypted and not available to us.
Rights of data subjects whose personal data is processed
Individuals whose personal data we process have the right to request from A-STAR d.o.o.: access to personal data, rectification of personal data, erasure of personal data from the personal data file, and restriction of the processing of personal data. As an individual, you also have the right to object to processing and the right to the portability of your personal data. You can exercise your rights by submitting a written request by email to email@example.com. We will decide on your request within one month of receiving your request. We may extend this period by up to two additional months in the event of complexity and a large number of requests, of which you will be informed.
Access to your personal data or information about processing
You always have the right to know whether personal data concerning you is being processed. Where this is the case, we will provide you with access to your personal data and the following information: the purpose(s) of the processing; the types of personal data; the users to whom the personal data have been or will be disclosed; the envisaged period of retention of the personal data or, if this is not possible, the criteria used to determine this period; where the personal data are not collected from you, any available information regarding their source. The information on the processing of personal data is free of charge, except where the data subject’s requests are manifestly unfounded or excessive, in particular because they are repetitive. In such a case, the controller may: a) charge a reasonable fee, taking into account the administrative costs of providing the information or communication or of carrying out the requested action, or refuse to act on the request.
Right to rectification
As an individual, you have the right under the law to have inaccurate personal data relating to you rectified and, taking into account the purposes of the processing, to have incomplete personal data completed.
Right to erasure
You have the right to have your personal data erased where one of the following grounds applies: the personal data is no longer necessary for the purposes for which it was collected or otherwise processed; where you withdraw the consent on which the processing is based and where there is no other legal basis for the processing; where you object to the processing and there are no overriding legitimate grounds for processing; or where the personal data has been unlawfully processed.
Right to restriction of processing
You have the right to have us restrict the processing of your personal data where one of the following applies: where you contest the accuracy of the data for a period of time that allows us to verify the accuracy of the personal data; the processing is unlawful and you object to the erasure of the personal data and instead request the restriction of its use; we no longer need your personal data for the purposes of the processing, but you need it for the establishment, exercise or defence of legal claims; where you have lodged an objection to the processing based on our legitimate interests, pending verification that our legitimate grounds override yours; or where you have lodged an objection to processing based on our legitimate interests. If the processing of personal data has been restricted, it shall be processed only with your consent, with the exception of its storage, or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person. We are obliged to inform you before revoking the restriction of the processing of your personal data.
Right to data portability
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, and the right to have that data transferred to another controller where the processing is based on your consent or is carried out by automated means. At your request, where technically feasible, personal data may be directly transferred to another controller.
Right to object
Where we process your data on the basis of legitimate interest for marketing purposes, including profiling, you may object to such processing at any time.
Right to lodge a complaint with the Information Commissioner
If we do not decide on your request within the statutory time limit or if we refuse your request, you have the right to lodge a complaint with the Information Commissioner.
Period of retention of personal data
We retain data for no longer than is necessary to fulfil the purpose for which it was collected or further processed or until the expiry of the limitation periods for compliance with the obligation or the statutory retention period. We retain data on subscribers or customers whose processing is based on law after the termination of the service relationship until full payment for the services has been made, but at the latest until the expiry of the limitation period for our claims for the provision of the services or the performance of the contract, except where a longer retention period is provided for by law. Other data we obtain on the basis of your consent are retained for the duration of the cooperation and for 2 years after termination, unless a longer retention period is provided for by law. If the customer who has given consent to the processing of personal data has not entered into a business relationship with us, their consent will be valid for 2 years from the date on which it was given. As a taxable person under the law governing value added tax, we are required to ensure that invoices are kept for 10 years after the end of the year to which they relate. After the expiry of the retention period, the data shall be erased, destroyed, blocked or anonymised, unless otherwise provided by law for a specific type of data.
Information about the controller
Your personal data is collected and processed by A-STAR d.o.o., MESTNE NJIVE 23, 8000 NOVO MESTO. The data protection officer designated by the controller can be reached by e-mail: firstname.lastname@example.org.
In the absence of specific areas covered by these terms and conditions for the processing of personal data, the applicable legislation shall apply instead. We reserve the right to modify these terms and conditions of processing. We will inform you of the amendment by posting it on our official website or by other appropriate means. The amendment will be published on the official website one month prior to its entry into force. The present processing conditions are valid and applicable from 15 March 2022.