Privacy Policy and Personal Data Protection Statement

The personal data controller, as defined by the EU General Data Protection Regulation (GDPR) and the applicable law governing the protection of personal data, is:

Andrej Rihter o.d.d.
Šmiklavž 39
3342 Gornji Grad

Andrej Rihter o.d.d., the operator of the online store rwood-store.com, undertakes to store and process all personal data obtained in accordance with the GDPR and applicable Slovenian legislation (Personal Data Protection Act).

Acquisition of personal data

We obtain personal data in the following ways:

• when ordering products in the online store;
• when registration of a user account;
• during telephone communication with the customer;
• during personal communication with the customer;
• during e-mail communication with the customer;

What data do we collect?

For the purposes of providing services Andrej Rihter o.d.d. (online store rwood-store.com)
we collect, process and store the following data:

• first and last name,
• address and place of residence,
• email address,
• username,
• password in encrypted form,
• other data that you, as a user, voluntarily enter into the form on the Lumins.si website.

We need the contact data that you provide to us when completing or submitting an order / inquiry / application / registration to process your order and to communicate with you. If you do not provide us with the specified contact data, we will not be able to process your order. Andrej Rihter o.d.d. is not responsible for the accuracy of the data you enter as a user of our website.

Purpose of collecting and processing personal data

Order in the online store:
We use personal data to process your order. We use the data to issue an invoice and process delivery. We will not use the entered data in the future without your express consent.

User account:
We store personal data in the user account for which we have obtained the prior consent of the users. Users can change personal data and delete them at any time.

E-mail communication:
We use personal data to process your e-mail contact. We will not use your personal data in the future without your express consent.

Transfer of personal data

We disclose personal data to law enforcement agencies and other government authorities if required by law or necessary for the prevention, detection or prosecution of criminal offences and fraud.

We undertake not to disclose your data to unauthorized persons or other persons for advertising purposes under any circumstances.

Your rights

In accordance with the provisions of the EU General Data Protection Regulation (GDPR), you have the following rights:

• – access to and copy of your personal data.
• – to complete or correct your personal data if they are incomplete or inaccurate.
• – to have your personal data erased, in particular if they are no longer necessary for the purposes for which they were collected, or if they have been processed unlawfully or have been processed for based on your consent, but you have withdrawn your consent and there is no other legal basis for their processing.
• – to transfer personal data to another controller, where this is technically feasible.
• – to restrict the processing of your personal data, in particular if you dispute their accuracy – for a period that enables us to verify the accuracy of your personal data; if the processing is unlawful, and you oppose the deletion of your personal data; if the data retention period has expired and you need them to assert legal claims.
• – you can revoke the consents given for notification at any time.

To exercise all of your rights or to obtain additional information, please contact our data protection officer, who is available to you at the following e-mail address: info@rwood-store.com. We will consider and respond to your application in accordance with the GDPR.

If you believe that your rights or personal data protection regulations have been violated, you can complain to the competent state authority: Information Commissioner of the Republic of Slovenia (Zaloška 59, 1000 Ljubljana, phone: 01 230 97 30, fax: 01 230 97 78, e-mail: gp.ip@ip-rs.si).

Period of retention of personal data

If we have your explicit consent for a specific purpose of processing, the retention period is: until revocation.

Lawful processing pursuant to Article 6.b of the GDPR – processing is necessary for the performance of a contract (retention period: 10 years), or to take steps at the request of such an individual prior to entering into a contract (retention period: 5 years).