Privacy policy

Who processes my personal data?

What you have in front of you is the privacy policy, a document where you can find all the information about the processing of personal data that we carry out at Viceroys Investments d.o.o.

The processing of personal data is carried out by the data controller:

Viceroys Investments d.o.o.
Stantetova 9, 1295 Ivančna Gorica
Tax ID: SI84453206
Business registration number: 9184716000

You can contact the controller at any time at investicije@viceroys.si.

Why do you use my personal data?

This privacy policy is intended for our service users and users of the website.

All personal data collected by the controller is processed for specific purposes defined in the points below, and on an appropriate legal basis.

Providing personal data is voluntary, except when provided for by law. We need certain personal data to provide you with a service. If you choose not to provide us with that data, we cannot provide you with certain services.

1. Purpose: Providing our services. For this purpose, we process the following types of personal data:

Individuals: first and last name, address, payment information, email, and other data related to the provision of services.
Legal entities: name of the legal entity, first and last name and title of the contact person, email, and other data related to the provision of services.

Legal basis: Contractual relationship. Data retention period: 5 years after the end of service delivery.

2. Purpose: Communication with you based on your inquiries for preparing an offer. We process first name and surname, email address, phone number and the content of the inquiry.

Legal basis: Pre-contractual relationship. Data retention period: 1 month after communication ends.

3. Purpose: Sending newsletters to our customers. We process first name and surname and email address.

Legal basis: Law. Data retention period: Until revoked.

4. Purpose: Providing access to information from third-party providers. We process first name and surname and email address.

Legal basis: Legitimate interest in pursuing competitiveness and optimizing the business. Data retention period: Until revoked.

Do you share my data with third parties?

We share your personal data with third parties in the following cases:

Email marketing provider,
Software provider,
Website maintenance provider,
Accounting services provider, and
Government authorities when required by law.

We export your personal data to third countries, implementing appropriate measures to ensure personal data protection.

We only provide personal data to third parties when necessary to fulfill the purpose of data processing. Third parties can access and process your personal data only to the extent and in the manner specified in the contract we have with them. All third parties are obliged to respect the level of personal data protection provided by the data controller.

In certain cases, we act as a data processor. In this case, the privacy rules established by the data controller apply to you. If you contact us with questions or requests that fall under another data controller, we will direct you to the appropriate controller.

How do you protect my personal data?

We ensure the security of your personal data by implementing various technical and organizational measures, including:

Regularly updating our hardware and software;
Protecting our hardware and software with security software;
Securing our business premises;
Ensuring restrictions on unauthorized access to personal data.

We are aware that despite the security mechanisms we have established, there can still be a security incident. To address this, we have created a special protocol to handle such incidents quickly, effectively, and in accordance with the law. If a security incident occurs where there is a likelihood that individuals' rights and freedoms may have been compromised, we will notify the competent supervisory authority immediately, but no later than 72 hours. If there were to be a security incident that could pose a significant risk to individuals' rights and freedoms, we would also promptly inform the affected individuals.

What rights do I have?

Regarding the processing of your personal data that we carry out, you have the following rights:

Right to access and obtain a copy of personal data: this right allows you to obtain information about the processing of personal data, and you also have the option to view or obtain a copy of your personal data that we hold about you.
Right to rectify personal data: you have the right to request the correction of inaccurate or incomplete data that we hold about you.
Right to restrict the processing of personal data: this right allows you to keep data that could otherwise be deleted for later proof in various official proceedings. This right also allows you to temporarily limit processing while a decision is being made regarding a correction or objection that is ongoing with the controller.
Right to deletion of personal data: this right allows you to request the deletion of data we hold about you in certain cases. If the legal basis for processing personal data is a law or a valid contract, we cannot delete your personal data.
Right to withdraw consent: when we process your personal data based on consent, you have the option to withdraw that consent at any time. Withdrawing consent does not mean negative consequences for you. Please note that after withdrawing consent, we will no longer be able to provide certain services to you.
Right to object to the processing of personal data: this right is available to you when personal data processing is based on legitimate interests. It allows you to request that the controller stop processing. Please be aware that the controller may deny such an objection in certain cases. The controller will cease processing in any case if you object to direct marketing.
Right to data portability: this right allows you to request that we transfer your personal data to another controller in a machine-readable format. This is only possible if we process your data by automated means and when it comes to data collected based on consent or contractual relationships.

The controller does not engage in automated decision-making in the processing of personal data.

You can exercise your rights by writing to us at investicije@viceroys.si with the subject "data protection" or by sending your request by mail to: Viceroys Investments d.o.o., Stantetova 9, 1295 Ivančna Gorica, with the note "data protection".

We will process your requests as quickly as possible and no later than 30 days from receipt. If a particular request is so extensive that it will take longer to resolve, we will notify you in advance and provide you with an estimated timeframe for the response preparation.

We reserve the right to reliably identify you if you submit a request to exercise any of your rights. If you do not provide personal information with your request that allows us to identify you reliably, we will ask you for additional personal data. If you do not provide the additional personal data within the given time, we will discard your request.

If you believe that there has been a violation of personal data protection, you can always file a complaint with the competent supervisory authority, which in Slovenia is represented by the Information Commissioner.

Web plugins

On the website, you have the option to use web plugins. Please note that these plugins are managed by third parties; namely, individual social networks. Using plugins online is at the individual's own risk. Each social network operates based on its own privacy rules, which are not related to the operator's rules. The responsibility for interacting with the social network and all consequences that are related to or may arise from this interaction rests solely with the individual.

Have a question?

You can contact us at any time with additional questions regarding personal data protection by writing to us at investicije@viceroys.si.

The operator reserves the right to change this privacy policy. The new version will be published here.

Controller: Viceroys Investments d.o.o.