Privacy Policy

1. Data Controller

KREMEN MB d.o.o.
Ulica heroja Šaranoviča 34C
2000 Maribor
Slovenia
Email: info@kremen-mb.si
Phone: +386 (02) 252 46 87
VAT ID: SI75898497
Company Registration Number: 3932494000

(hereinafter referred to as the “Controller”)

2. Purpose of this Privacy Policy

This Privacy Policy explains how KREMEN MB d.o.o. collects, uses, stores and protects personal data in accordance with:

• General Data Protection Regulation (GDPR – Regulation (EU) 2016/679)
• Slovenian Personal Data Protection Act (ZVOP-2)

This policy applies to all personal data submitted through the website, especially via:

• contact forms
• online orders
• newsletter subscriptions
• inquiry forms
• email communication or other forms of contact

3. Personal Data We Collect

Depending on the purpose of interaction, we may collect the following personal data:

• first and last name
• address (street, postal code, city)
• email address
• phone number
• company information (company name, VAT ID)
• order details (products/services purchased, payment method, order date)
• IP address (for analytics or security purposes)
• any other data voluntarily submitted via forms

4. Purpose and Legal Basis for Processing

4.1 Responding to Inquiries

Personal data submitted via contact forms or email is processed for:

• preparing offers
• responding to inquiries
• further communication

Legal basis: legitimate interest or pre-contractual measures.

4.2 Processing Online Orders

In case of an online purchase, personal data is processed for:

• order processing and fulfillment
• invoice issuance
• delivery of goods or provision of services
• handling complaints or claims

Legal basis: performance of a contract and compliance with legal obligations.

4.3 Newsletter and Marketing Communication

If you subscribe to our newsletter, your personal data will be used to:

• send news and updates
• provide special offers
• send promotional content related to our business activities

Legal basis: consent.

You may unsubscribe at any time via the unsubscribe link in the email or by contacting us at info@kremen-mb.si.

4.4 Legal Obligations

We also process personal data to:

• comply with tax and accounting laws
• fulfill obligations towards public authorities

Legal basis: legal obligation.

5. Data Retention

Personal data is retained only for as long as necessary to fulfill the purpose for which it was collected:

• order and invoice data: in accordance with accounting legislation (typically 10 years)
• newsletter data: until consent is withdrawn
• contact form data: until communication is concluded or up to 1 year after the last communication unless business cooperation follows

6. Disclosure of Personal Data

We do not sell or rent personal data to third parties.

Personal data may be shared with:

• contracted data processors (e.g., accounting services, hosting providers, delivery services)
• public authorities when required by law

All processors process data based on appropriate data processing agreements.

7. Data Security

We implement appropriate technical and organizational measures to protect personal data against:

• unauthorized access
• loss
• misuse
• disclosure or alteration

Access to personal data is restricted to authorized persons only.

8. Your Rights

You have the following rights regarding your personal data:

• right of access
• right to rectification
• right to erasure (“right to be forgotten”)
• right to restriction of processing
• right to data portability
• right to object to processing
• right to withdraw consent at any time

You can exercise your rights by contacting us at: info@kremen-mb.si

If you believe your personal data is being processed unlawfully, you have the right to lodge a complaint with:

Information Commissioner of the Republic of Slovenia
Dunajska cesta 22
1000 Ljubljana
www.ip-rs.si

9. Cookies

Our website may use cookies to ensure proper website functionality, analyze website traffic and improve user experience.

Users can manage cookie settings through their browser settings or via the cookie banner on the website.

10. Changes to this Privacy Policy

The Controller reserves the right to amend this Privacy Policy. Any changes will be published on the website.