At Kontron, d. o. o., Ljubljanska cesta 24a, 4000 Kranj (hereinafter referred to as “Kontron” or the “Controller”) is aware of our responsibility to handle the personal data of our customers, potential customers, visitors to Kontron websites and all individuals who disclose personal data to us upon contact (hereinafter referred to as: “Users”), and we therefore adopt this Personal Data Protection Policy (hereinafter: the “Policy”), which informs our Users in a transparent, comprehensible and simple manner about the purposes, the legal basis for the processing of their personal data and their rights in relation to the processing, as guaranteed by the Personal Data Protection Act (ZVOP-2, Official Gazette of the Republic of Lithuania, No. 163/2022) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1), as last corrected by the Corrigendum (OJ L 127, 23.5.2018, p. 2 (hereinafter referred to as the “General Data Protection Regulation”).
Terms such as “controller”, “processing”, “restriction of processing”, “processor”, “profiling”, “pseudonymisation”, “third party” and “company” used in this Policy shall have the meanings set out in the General Data Protection Regulation.
A user is any legal or natural person who uses or visits the www.kontron-slovenia.com website (hereinafter referred to as “User”).
The Policy, in accordance with the General Data Protection Regulation, governs the following areas:
Personal data is information that identifies you as an identified or identifiable individual. A user is identifiable when he or she can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or by reference to one or more factors specific to the user’s physical, physiological, genetic, mental, economic, cultural or social identity.
The Controller collects the following personal data in accordance with the purposes set out below in the Policy:
The controller of the personal data processed in accordance with the Personal Data Protection Regulation is Kontron, d. o. o., Ljubljanska cesta 24a, 4000 Kranj, Slovenia (hereinafter referred to as the “Controller”). The Controller does not collect or process the user’s personal data except when the user makes it possible for the Controller to do so or agrees to do so, i.e. when ordering products or services, subscribing to receive newsletters, participating in a prize draw, etc., where there is a lawful basis for the collection of personal data, where processing is necessary for the performance of a contractual obligation or where processing is necessary for the pursuit of legitimate interests pursued by the controller (“legitimate interest”).
The Data Protection Contact Person can be contacted at email@example.com.
Kontron cooperates with third parties with whom we have concluded contracts for the processing of personal data (hereinafter referred to as “Contract Processors”). The Contract Processors have access only to the personal data which they strictly need to provide the services they perform for us and only for the purpose of carrying out tasks on our behalf and may not use it for any purpose other than those set out in the contract for the processing of personal data. The contract processors with whom we work are obliged to protect personal data.
Kontron does not transfer the personal data collected to third parties, third countries or international organisations.
The exception to this is the statistical data on the visit and use of the websites, for which the Google Analytics web platform and the ActiveCampaign web platform are used to send electronic notifications, newsletters, current offers, electronic invitations to events and e-publications of Kontron.
Processing based on consent or acquiescence
Kontron will process your personal data based on your given consent for the following purposes:
In all cases where you have given your consent to the processing of your personal data, you may withdraw this consent at any time by emailing firstname.lastname@example.org.
Processing based on legitimate interests
Kontron collects and processes personal data based on legitimate interests pursued by us. We collect personal data based on legitimate interests for the following purposes:
For the above purposes, we collect and process the following personal data: the IP address, statistics on visits to Kontron websites, data on the number of clicks, click times, data on the incoming and outgoing websites, data on the type of client.
The personal data processed for the above purposes are not linked to the personal data of identifiable individuals.
Processing based on a contract
Kontron collects and processes personal data of individuals based on a contract or for the purpose of concluding a contract (sending offers) for the provision of a service.
Personal data collected based on a contract is necessary for the performance of the contractual obligation to supply the ordered service or to perform the ordered service in the context of the offer or the sending of the offer.
For this purpose, Kontron collects and processes the following data from the individual (person): name, surname, email address, street, postcode, city and country, as well as information about the payment, in case of collaboration.
For the purposes of business communication, Kontron collects and processes the following personal data: name and surname, email address, company name and country.
Processing based on a legitimate interest pursued by the controller
Kontron may also process data based on legitimate interest, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data. Where legitimate interest applies, the controller shall always carry out an assessment in accordance with the General Data Protection Regulation.
In certain cases, Kontron may adopt certain safeguards for the protection of your personal data, such as pseudonymisation, encryption, processing in aggregate form and/or removing certain types of personal data, to further process your personal data based on a legitimate interest collected on one of the above-mentioned legal bases (consent, contract).
Kontron will process your personal data based on legitimate interest for the following purposes:
Marketing, business and other technical analysis, such as analysing and identifying which organisations visitors to Kontron websites at industry events come from and what roles they hold in those organisations.
Preventing abuse, ensuring security, asserting or defending claims in administrative and judicial proceedings. Thus, in the event of suspected abuse, the controller may process your personal data to an appropriate and proportionate extent for the purpose of identifying and preventing possible fraud or abuse and may, if appropriate, also transmit such data to the police, public prosecutor’s office or other competent authorities.
Direct marketing, including the creation of user profiles, based on personal data lawfully obtained in advance. You may object to the above processing at any time in accordance with the Right to object section of this Policy.
Kontron is committed to protecting your personal data. It prevents unauthorised access, use and disclosure by taking the following measures:
The controller shall not process personal data for longer than is necessary to achieve the purposes for which the personal data were collected and further processed.
Personal data processed by Kontron for the performance of contractual obligations shall be kept by Kontron for the period necessary for the performance of the contract and for 5 years after its termination, except in cases where there is a dispute between you and the controller in relation to the contract concluded. In such a case, Kontron shall retain the data for 5 years after the final judgment or arbitral award or settlement or, if there has been no litigation, for 5 years from the date of amicable settlement of the dispute.
Personal data processed by Kontron based on law shall be kept by Kontron for the period prescribed the applicable law.
Personal data processed by Kontron based on your personal consent or legitimate interest shall be retained by Kontron on a permanent basis, until your consent is withdrawn or until you request that the processing be discontinued. Kontron shall delete such data before revocation only if the purpose of the processing of the personal data has already been achieved or if required by law.
After the retention period has expired, Kontron will effectively and permanently delete or anonymise your personal data so that it can no longer be linked to you.
You have the right to obtain confirmation from Kontron as to whether Kontron is processing your personal data and, where this is the case, to obtain access to your personal data and the following information in relation to the processing of your personal data:
Upon your request, Kontron will provide you with one (1) free copy of your personal data being processed. For additional copies of the data requested or if the request is manifestly unfounded or excessive, if such requests are repetitive, Kontron will charge you reasonable costs.
You have the right to request Kontron to correct inaccurate personal data concerning you without undue delay. Considering the purposes of the processing, you have the right to have incomplete personal data completed, including by submitting a supplementary declaration.
You have the right to request Kontron to delete personal data relating to you without undue delay and Kontron must delete your personal data without undue delay in the following cases:
Where Kontron publishes your personal data in accordance with the Policy, Kontron shall take reasonable steps, including technical measures, to inform the controllers processing your personal data that the data subject has requested them to delete any links to, or copies of, that personal data.
You have the right to request that Kontron restrict the processing of your personal data where one of the following applies:
You have the right to receive personal data relating to you held by Kontron in a structured, commonly used and machine-readable format and to transmit that data to another controller without being prevented from doing so by Kontron, to which the personal data have been provided, where:
You have the right, on grounds relating to your situation, to object at any time to processing of your personal data, provided that the processing is based on legitimate interests pursued by Kontron or a third party. Kontron will cease processing personal data unless it demonstrates compelling reasons for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purposes of such marketing, including profiling where it is related to such direct marketing. If the direct marketing is based on consent, the right to object may be exercised by withdrawing the personal consent given.
All the above requests concerning the exercise of rights in relation to your personal data may be addressed in writing to the Controller, either by e-mail to email@example.com or by post to Kontron, d. o. o., Ljubljanska cesta 24a, 4000 Kranj.
If you make a request pursuant to the above paragraph by electronic means, the information will, as far as possible, be provided to you by electronic means, unless you request otherwise.
For the purposes of reliable identification, the controller may request from you, in order to exercise your rights relating to personal data, additional information necessary to confirm your identity, and may refuse to take action under this Chapter only if it demonstrates that it cannot identify you reliably.
The controller will respond to your request to exercise your rights in relation to your personal data without undue delay and at the latest within one month of receipt of the request. Kontron may extend the time limit for exercising the rights by a maximum of two additional months, taking into account the complexity and number of requests. If Kontron extends the time limit, it will notify you of any such extension within one month of receipt of the request, together with the reasons for the delay.
Right to file a complaint concerning the processing of personal data
In the event that the controller fails to respond to a data subject’s request to exercise the rights which he or she has under data protection law or the controller fails to act on a data subject’s request, the data subject shall have the possibility to file a complaint with a supervisory authority:
The Republic of Slovenia
the Information Commissioner
Dunajska cesta 22
Telephone: 01 230 97 30