PRIVACY POLICY

GALEX d.o.o., as the operator of the galex.si website, respects your privacy and is committed to the careful and permanent protection of all personal data obtained from the user. We are committed to processing personal data in accordance with the applicable Personal Data Protection Act, the Electronic Communications Act and the General Data Protection Regulation (GDPR).

Privacy Policy

Our values and guidelines on the protection of personal data

GALEX d.o.o. respects your privacy and is committed to protecting all personal data collected. We are aware of our responsibilities in relation to the handling of your personal data and therefore process all personal data in accordance with the Personal Data Protection Act, the Electronic Communications Act and the General Data Protection Regulation (“GDPR”), as applicable from time to time. We respect your privacy and therefore take care to protect your personal data at all times and follow the principles of secure processing of personal data. We handle your personal data responsibly, fairly, transparently and lawfully. In this Privacy Policy, we tell you what personal data we process, the purpose of the processing, how it will be used and also what your rights are in relation to the data we hold about you and how to exercise them. We take appropriate data security measures to ensure that your personal data is not accessed by unauthorised persons, to maintain its confidentiality and integrity, and to prevent its loss, accidental destruction, etc., at all times during the processing of your personal data. All data will be protected in accordance with data protection regulations. Personal data will be collected and processed in accordance with the law at all times. All data collected is treated as confidential and is not sold to third parties. In no case will your data be passed on to unauthorised persons or used for purposes other than those for which it was collected. It is the user’s responsibility to protect his/her personal data by ensuring the security of his/her username and password and by using appropriate software (anti-virus) protection on his/her computer.

Personal data controller and joint controllers

The controller of your personal data collected and processed in accordance with this Privacy Policy is Galex d.o.o., Tišinska ulica 29g, 9000 Murska Sobota, e-mail: info@galex.si, telephone: 02 5213 510.

Joint Managers

For certain aspects of processing, we and the operators of certain social networking platforms act as joint controllers, i.e. as jointly liable within the meaning of Article 26 of the General Data Protection Regulation (“GDPR“).Our company, GALEX d.o.o., operates the following social networking sites:

Facebook:[https://www .facebook.com/galex]
Instagram:[https://www .instagram.com/galex.doo]

Therefore, GALEX d.o.o. is a joint controller with Meta Platforms, Inc. (as the platform operator of Facebook and Instagram). For the online tracking methods used by social network platform operators, the platform operators and we act as joint controllers. Online tracking may take place independently of whether you are logged in or registered on a particular social network platform. The legal basis for online tracking methods is your personal consent. Further information on the recipients or categories of recipients and on the retention periods or criteria for determining the retention period of your personal data collected by the operators of the social networking platforms can be found in the privacy policies of the individual operators of the social networking platforms (specified below). We cannot influence these. You can also find options in the privacy policies of each social media platform operator regarding the exercise of your rights to opt-out of online tracking methods. You can also contact the platform operators using the contact details provided in the legal information section of the relevant platform operator. In relation to the statistics provided to us by each social network platform provider, we can only influence and conditionally disable these. In this respect, we would like to draw your attention to the fact that the social network platform provider does not provide us with any additional optional statistics. It cannot be excluded that the provider of the social networking platform does not use your profile data and online behaviour data to analyse your habits, personal attitudes, preferences, etc. GALEX Ltd. cannot influence the processing or transfer of your data by the provider of the social networking platform to third parties.

Responsibility of platform operators

We have only limited influence over the management of personal data by social media platform operators (e.g. management of followers and information shared). In the areas where we do have influence and where we may process personal data, we endeavour, to the extent possible, to ensure that the social network platform operator adequately protects personal data. However, in many areas, we cannot influence the processing of personal data carried out by the operator of the social networking platform and we do not know exactly what data is processed by the operator of the social networking platform. The platform operator manages the entire IT infrastructure of the service, has its own personal data protection provisions, privacy policy and its own user relationship with you (if you are a registered user of the social networking service). In addition, the social networking platform operator is solely responsible for all issues relating to your social networking profile data, to which we, GALEX Ltd, do not have access. Please refer to the privacy policies of each social network platform provider for more detailed information on the data processing carried out by the social network platform providers and further objection options:

Facebook: https://www.facebook.com/privacy/explanation
Instagram: https://help.instagram.com/519522125107875

When using a particular social networking platform, your personal data is usually processed by the respective social networking platform operator, including on servers in third countries, in particular in the USA and the UK.

Purpose of the processing of personal data and legal basis for the processing of personal data of the personal data

On the website galex.si, it is possible to contact us via an online form to enquire about our services or to send any questions to our company’s email address. It is also possible to contact us directly by e-mail, regular mail or telecommunications. When you fill in our online form to make an enquiry, comment or ask a question, it is mandatory to fill in the fields “name and surname”, “email” and “message”. You must also explicitly confirm your acceptance of this privacy policy and terms and conditions. In general, our company retains data for the period necessary to achieve the specified purpose, to the extent reasonably necessary to ensure compliance with the applicable legal requirement or as advisable in light of the applicable statute of limitations provisions, or until you withdraw your consent to the processing of your data. However, we will endeavour to delete your data irretrievably and permanently as soon as the need to keep the data no longer exists, i.e. once the purpose for which it was collected has been fulfilled or the limitation period has expired. Any personal data you provide to us (name, surname, email) will be treated confidentially and used only for the purposes for which you provided it. If there is a need to further process your data for another purpose, we will inform you in advance and ask for your consent.

a) Fulfilling the Buyer’s order or performing the Purchase Contract with the Buyer

For the purposes of order execution or performance of the purchase contract (including notification of order and delivery status, performance of complaint procedures in relation to claims for material defects or under warranty, etc.). GALEX d.o.o. collects and processes the following personal data in the process of placing an order for products from the online shop: name and surname, place of residence, delivery address, telephone number, e-mail address, other data necessary for the execution of the order (credit card details – number, bank, etc.), data on payment habits. We also collect the aforementioned data for the purpose of communicating with you when you address communication messages or questions to us by telephone, email, regular mail or through the use of other communication channels (for example, through digital social networking platforms). The legal basis for processing the aforementioned data listed under this point a) is the law or the GDPR (the controller has entered into a purchase contract with the customer for the purchase of the products from the online store or the controller is in business contact with the potential customer for the purpose of answering the potential customer’s questions regarding the products).

b) Sending newsletters or carrying out direct marketing

For the purposes of conducting product surveys and sending e-newsletters to you with news and tips about our products, news from our offer, special offers or promotions, prize draws, etc., product surveys, information about customer satisfaction surveys and other marketing messages, or for direct marketing purposes, GALEX d.The legal basis for the processing of personal data for the purposes of sending newsletters or for the purposes of direct marketing and analysis described in the preceding paragraph is the consent of the individual. When you sign up to receive our newsletters or marketing messages via the embedded frames on our social networking sites, your consent is used for the analysis of your user behaviour, which includes in particular which areas of the website, mobile app or newsletter you visit and which links you open there. In this way, personalised user profiles are created and assigned to your person and/or email address so that we can better tailor possible advertising material, in particular in the form of newsletters, the inclusion of advertisements on the website and printed advertisements or SMS messages, to your personal interests and to improve our online offer. The user has the possibility at any time to request the prohibition of the use of the collected data for the purposes of the newsletter or direct marketing and to cancel the use of the data. The prohibition or cancellation applies in advance. The user can unsubscribe from the newsletter by unsubscribing from the newsletter or commercial communications on the website (the link to the unsubscribe page can be found at the bottom of each newsletter). The individual may also make the request to the Controller’s address or in writing to the Controller’s email address info@galex.si. The controller will duly prevent the use of personal data for direct marketing purposes within 15 days of receipt of the request and will inform the user of this within a further five days by e-mail to the user’s e-mail address. After the opt-out, the individual’s consent to the creation of a personalised user profile and to the receipt of newsletters based on it shall be deemed to have been withdrawn. We delete your user data. When you subscribe to a newsletter on the page of a particular social network, we cannot influence the social network operator to delete your data. Therefore, please refer to the privacy policy of the relevant social network platform operator for the deletion options.

c) Participation in prize draws

You can enter various prize draws via our website, our newsletter or our social media pages. Unless otherwise specified in a particular prize draw or unless you have given us more specific explicit consent, we use the personal data you provide to us in the context of your participation in a prize draw solely for the purpose of running the prize draw (e.g. to determine winners, notify winners, send prizes, announce winners). If you appear on the relevant social network under your real name or if you are identifiable through your profile photographs, we cannot prevent other users from recognising you. For the purposes of participation in and the execution of the prize draws, GALEX d.o.o. collects and processes your following personal data: e-mail, name and surname, address, telephone number, tax number (only in the case of winning a prize). The legal basis for the processing of data in the context of prize draws is the consent of the individual. If you have given your consent in the context of a prize draw, you have the possibility to withdraw your consent at any time and with effect for the future. The individual may request revocation by writing to the Controller or by sending an e-mail to the Controller at info@myelixire.com.

d) Our presence and interaction with users on social networks

The purpose of the processing of data on our social networking sites is direct marketing (i.e. promotion, corporate communication, informing customers about offers, products, promotions, sweepstakes, various topics, company news, etc.) and interacting with visitors to our social networking sites and responding to relevant feedback, compliments or criticism from individuals. For these purposes, we collect the following personal data from you: email, name and surname, address, telephone number, tax number (only if you have won a prize). We share your content on our site where this is a function of the social networking platform and we communicate with you via the social networking platform. The information you enter on our social networking pages, such as comments, videos, images, likes, public news, etc., is published by the social networking platform and is never used or processed for other purposes. We reserve the right to delete your illegal content when necessary. This applies, for example, to controversial and illegal posts, hate comments, obscene comments (sexually explicit content) or attachments (e.g. images or videos) that may violate copyright, personality rights, criminal law or the ethical principles of GALEX d.o.o. or other regulations or codes. The legal basis for the processing of data in the context of social networks is the consent of the individual.

e) Notice of Web Cookies

The operator GALEX d.o.o. processes personal data of visitors to the www.galex.si website through the use of web cookies in order to ensure a safe and improved user experience, the smooth operation of the website and the analysis of visits to the website. In this policy, we use the term “cookies” to refer to cookies or other similar technologies covered by the EU Directive on privacy and electronic communications

What are cookies?

Cookies are small text files that most websites store on users’ devices that they use to access the internet, in order to identify the individual devices that users have used to access the internet. Their storage is under the complete control of the browser used by the user – which can disable or restrict the storage of cookies if it wishes. We use both persistent and session cookies on our websites. A persistent cookie consists of a text file sent by a web server to a web browser, which stores it and remains valid until a set expiry date, unless the user deletes it before the expiry date; more about them below. A session cookie is deleted when the user closes the web browser or when a certain time has elapsed (meaning that the session has expired), the latter include the cookies: time, firstvisit, phpsessid and wppas_pvbl.

Why do we use cookies?

Cookies are important for providing user-friendly online services. Cookies make the interaction between the user and the website faster and easier. They help the website to remember the individual’s preferences and experience, saving time and making browsing more efficient and enjoyable. We also use cookies to learn more about how users use the content on our website and to help us improve the user experience when visiting our website. The data collected is not processed on an individual level. The data obtained through cookies on the website may be used for a variety of purposes, including the following. Without mandatory cookies, the website and portals would not function properly. Cookies are assigned and set when a visitor makes any interaction on the website (click, scroll, fill in a form, etc.) and confirms the tracking by clicking on the “OK” button. Analytical cookies: Google Analytics is a service provided by Google LLC or Google Ireland Limited, depending on the location from which www.galex.si is accessed using “Google”. Google uses the information collected to track and test the use of eggo.si, to compile reports upon activation and to share it with other Google services. With the help of analytical cookies, the operator uses appropriate tools to analyse traffic and ensure the security of the website in order to improve the shopping experience. The analysis of visits to our websites is based on the processing of anonymised data. IP addresses are also collected, so each user is assigned a cookie at the start of their visit to the website, which identifies and tracks shopping baskets. www.galex.si may also store other cookies on your computer, such as: a user identification number in encrypted form (to identify the user on the next visit), product ratings and Google Analytics cookies (analysis of visits to the website), among others. Session cookies are only stored in the server’s memory for the duration of the visit and are deleted after one hour of inactivity, while persistent cookies are stored on the visitor’s computer. Cookies for personalised advertising and tracking: these are used by the Controller to improve the user experience by showing the most relevant offers and products based on your shopping habits, including on social networks and other sites, through digital tracking. The visitor accepts cookies by clicking on the “OK” section of the pop-up window.

How do I refuse and delete cookies?

If you prefer, you can also refuse or block cookies by changing your browser settings – see the “Help” function in your browser for more information. Please note that most browsers automatically accept cookies. If you do not wish to use cookies, you may therefore need to actively delete or block them. For information on the use of cookies in mobile phone browsers and details on how to refuse or delete such cookies, please refer to your mobile phone’s user guide. Please note that if you refuse the use of cookies, you will still be able to visit our websites, but some features may not work properly.

Data management

The controller of the data collected through cookies is Galex d.o.o., Tišinska ulica 29g, 9000 Murska Sobota.

Users of personal data

In addition to the controller, the following persons process your personal data on its behalf and for its account:

companies that provide logistics, postal or delivery services for the Controller for products available for sale in the galex.si online shop;
companies that provide technical support to the controller in the processing of personal data, such as developers and maintainers of computer applications, websites and IT services, developers and implementers of software solutions;
companies engaged by the controller to provide services necessary for the performance of the contracts, such as accounting services, printers, marketing, research and analytics companies, newsletter sending, external marketing agencies, and event or prize-game organisers, prize-game sponsors and the like;
the competent tax authorities, pension and invalidity insurance bodies, health insurance bodies, etc., where required by law.

We share your content that you submit through each social network platform on our own site when it is a feature of the social network platform and when we communicate through the social network platform. Please note that for some social networking sites, you may also be able to participate directly on publicly accessible websites (e.g. on an electronic bulletin board or through comments) and that other users may become aware of your participation through your interaction with us. In addition, in such cases, third parties may be able to become aware of your personal data, including the identity of the prize recipient on the relevant social networks. If you appear on the relevant social network under your real name or if you are identifiable through your profile photos, we cannot prevent other users from identifying you. If you ask us a question through a social networking platform, we will refer you to other, more secure channels of communication that ensure confidentiality, depending on the answer you need. You always have the option to send confidential questions to us at our single email address info@myelixire.com.

Transmission of data to third countries

The controller GALEX d.o.o. does not transfer your personal data to third countries (i.e. countries outside the EU) or to international organisations. Your use of a particular social network platform may result in the platform operator processing your data in a third country (based outside the European Union and the European Economic Area). For more information about the processing of your data in a third country over which GALEX Ltd. has no influence, please refer to the data protection statements of the platform operators of the particular social network platform.

Periods of retention of personal data

The retention periods for your personal data vary depending on the purposes for which we collect and process your personal data. The retention periods are as follows:

Personal data collected for the purpose of fulfilling an order or performing a contract: The data shall be kept until the expiry of the limitation or prescription periods for the assertion of claims arising from the concluded contracts, which in principle shall be 5 (years) from the due date of the claims. In the case of payment, the data shall be kept for a period of 5 (five) years from the date on which the relevant tax or duties should have been paid or, in the case of initiation of tax proceedings, for a period of 10 (ten) years from the date on which the limitation period starts to run in accordance with the provisions of the Income Tax Act-2. All invoices shall be kept for 10 years after the end of the year to which they relate.
Personal data collected for the purposes of the newsletter or direct marketing: the retention period is “until revocation” of consent, which may be given at any time. After six months, we will delete your data from the relevant email distribution lists. When you sign up to a newsletter on a social networking site, we cannot influence the operator of the social networking platform to delete your data. Therefore, please check the privacy policy of the relevant social network platform operator regarding the retention period.
Personal data collected for the purposes of our presence and interaction with users on social networks: All of your public posts on our social media pages will remain posted on your timeline indefinitely unless we delete them due to an update to the original topic, the illegality of the post, or a violation of our guidelines, or if you delete the post yourself. Any personal data you provide to us via a secure channel when we ask a question (encouragement, praise or criticism) will be deleted or anonymised no later than 90 days after we have given you a definitive answer.
Personal data collected for the purposes of prize draws: After the end of the prize draw and the announcement of the winners, we delete the personal data of the participants within two months after the prize has been awarded. We keep the data of prize winners exceeding the value of EUR 42 for ten (10) years in accordance with the applicable tax legislation. When participating in a prize draw on a social networking site (e.g. through a post or comment), we cannot influence the platform operator to delete your data. Therefore, please check the privacy policy of the respective social network platform operator regarding the retention period.

Your rights in relation to personal data

The data subject may exercise the following rights in relation to his or her personal data: the right of access, the right to rectification, the right to erasure (the so-called right to be forgotten), the right to restriction of processing, the right to data portability, the right to object and the right to lodge a complaint with a supervisory authority. The rights may be limited in accordance with Article 23 of the GDPR. The data subject may exercise his or her rights by submitting a written request to GALEX d.o.o., Tišinska ulica 29 g, 9000 Murska Sobota, Slovenia, or to info@myelixire.com. Before granting the request, the controller shall verify the identity of the individual exercising his or her rights under the personal data protection regulations, for security reasons and to prevent unauthorised disclosure or misuse of personal data.

a) the right of access to data

You have the right to ask us to confirm whether personal data is being processed in relation to you and, if it is, you can request access to your personal data and the following information: the purposes for which the personal data are being processed; the types of personal data being processed; the users or categories of users to whom personal data about you have been or are being disclosed; the intended duration of the retention of the personal data about you or, if specific information cannot be obtained, the criteria for determining the retention period; the existence of a right to request rectification or erasure of personal data concerning you, the existence of a right to restrict the processing of your personal data and the existence of a right to object to such processing; the existence of a right to lodge a complaint with a supervisory authority; any available information on the origin of the data, if the personal data are not collected from the data subject; the existence of automated decision-making, including profiling as referred to in the first and the fourth paragraphs of Article 22(1) and (2). Article 22(2) and (3) of the GDPR and, at least in such cases, meaningful information on the reasons for it as well as the significance and foreseeable consequences of such processing for the data subject concerned.

b) Right to rectification

You have the right to ask us to correct your personal data that is inaccurate without undue delay. You have the right to have your incomplete personal data completed, including by submitting a supplementary declaration, taking into account the purposes of the processing.

c) Right to erasure (“right to be forgotten”)

You have the right to request that we delete your personal data concerned without undue delay where one of the following applies: – the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

if you withdraw your consent or consent on which the processing of your personal data based on consent is based and there is no other legal basis for the processing;
if you object to processing in accordance with Article 21(1) GDPR and there are no overriding legitimate interests in processing, or if you object to processing in accordance with Article 21(2) GDPR; – the personal data have been unlawfully processed;
the erasure of personal data is necessary for compliance with a legal obligation;
the personal data was obtained in connection with the services offered by the information companies in accordance with Article 8(1) of the GDPR.

d) Right to restriction of processing

You have the right to request us to restrict the processing of your personal data where one of the following conditions applies: – you contest the accuracy of the personal data;

the processing is unlawful and you object to the erasure of the personal data and request instead that its use be restricted;
the controller no longer needs the personal data for the purposes of the processing and the data subject needs them for the establishment, exercise or defence of legal claims; or
you have lodged an objection to processing in accordance with Article 21(1) of the GDPR, pending verification that the legitimate interests of the controller override your grounds.

e) Right to data portability

You have the right to receive the personal data we process about you in a structured, commonly used and machine-readable format, and to transmit that data to another controller without hindrance from us, where the processing of your personal data is based on your consent and we carry out the processing by automated means. In exercising your right to data portability, you have the right to have your personal data transferred directly from us to another controller where this is technically feasible.

f) Right to object

Under the terms of Article 21 of the GDPR, it is possible to object to the processing of your data on grounds relating to your particular situation. This right applies to the processing of personal data carried out by us for direct marketing purposes (including profiling).

g) Right to lodge a complaint with the supervisory authority

You always have the possibility to lodge a complaint with the competent supervisory authority in case you believe that your personal data are not processed in accordance with the regulations: the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, e-mail: gp.ip@ip-rs.si; telephone: 01 230 97 30, website:www.ip-rs.si or with the responsible person of GALEX d.o.o. at the following e-mail address: info@myelixire.com. We are obliged to respond to your request to exercise your rights in relation to the personal data provided without undue delay and no later than within one month of receipt of the request.

Contact person

If you have any questions about the personal data we manage, or to exercise your rights in relation to your personal data under applicable law, or if you have any questions about our social media pages, you can contact us at the address below:

GALEX d.o.o.

Tišinska 29 g

9000 Murska Sobota

Slovenia

Or email info@galex.si.

Changes to the privacy policy

We reserve the right to adapt this Privacy Policy from time to time, as necessary, to the actual situation and legislation in the field of personal data protection. Therefore, please check the current version before you provide any personal data to ensure that you are aware of any changes and amendments. For any changes that require your consent under applicable law, we will ask for your consent in the prescribed form and manner.

WEBSITE TERMS AND CONDITIONS

Introduction

The website is owned by Galex d.o.o., Tišinska ulica 29g, 9000 Murska Sobota (hereinafter: the company).

Website content

All content on this website is for information purposes only and is intended primarily as a source of information. The Company undertakes to use its best endeavours to ensure that the information on the Website is true, reliable and of good quality. However, it shall not be liable for any typographical errors or for any delays or omissions in the entry of up-to-date information. The website will normally be accessible 24 hours a day, every day of the year. For technical or other reasons, the website may be unavailable without prior notice. Therefore, the Company shall not be liable for periods of inactivity.

Copyright protection

This website is the exclusive property of the Company and any misuse of the data, images, text and other information contained on this website is prohibited. Any copying, distribution or other use of any of the above information is prohibited without the prior knowledge and permission of the Company. Some of the images on the website are used from freepik.com and unsplash.com.

Privacy protection

The first time you visit a website, a “cookie” may be placed on your computer, which you can remove or, if you choose, prevent from being placed on your computer. Cookies are small files that help the website to communicate better with you and, for example, allow the website to manage your personal preferences. It is important to remember that we cannot access your personal data or data that is on your computer through these files in any way other than that which is publicly available (browser type, operating system type, etc.). The data that you enter on the website is sent to us over the internet in an unprotected electronic format and may therefore be available to third parties. In order to protect your identity and privacy, please do not enter any personal data that you do not wish to be disclosed.

External links

In the event that this website is linked or linked to other websites owned or operated by third parties, the Company accepts no responsibility for the content or the correctness of the operation of such websites.

Change of terms

The Company reserves the right to change the General Terms and Conditions without prior notice. The amendments shall enter into force as soon as they are published. For these rights, please read the terms and conditions carefully whenever you visit our website.

Competent court

The interpretation of, and all legal issues relating to, the use of the materials published on this website shall be governed exclusively by Slovenian law. The court in Murska Sobota shall have jurisdiction over claims and disputes relating to the use of these materials.