1. INTRODUCTORY PROVISIONS
At Pivovarna Laško Union d.o.o., Pivovarniška ulica 2, 1000 Ljubljana, tax number: SI-90355580 ("Pivovarna" or "controller") we comply with all regulations in the field of personal data protection.
At Pivovarna, we are the operator of the website at www.pivovarnalaskounion.com ("Website") and at the same time the controller of personal data collected through this website. For any questions or requests, we can be reached via e-mail: gdpr.plu@heineken.com
2. PURPOSES AND LEGAL BASIS OF DATA PROCESSING
We collect personal data online only through cookies. The bases for processing this data are:
2.1. Your consent
If you have agreed to cookies, analytical and advertising cookies may have been installed on your device. You can read more about this in our Cookie Policy. In this case, we process your personal data on the basis of point a) of the first paragraph of Article 6 of the GDPR.
2.2. Fulfillment of legal obligations
Our website requires information about your age upon your first visit. This information is stored in essential cookies and is needed to display the rest of the website only to persons who are of legal age. In this case, we process your personal data on the basis of point c) of the first paragraph of Article 6 of the GDPR.
2.3. Legitimate interests
We have judged that our legitimate interests override the rights of individuals in order to ensure network and information security (for example, to prevent unauthorized access to electronic communications networks, the spread of malicious code, denial-of-service attacks, and damage to computer and electronic communications systems). In this case, we may process your personal data through essential cookies on the basis of point (f) of the first paragraph of Article 6 of the GDPR.
3. USERS
We will not pass on your personal data to third parties unless there is a valid legal basis for the transfer. In this case, your personal data will be passed on to the following users for the following purposes:
external contractors who process the data exclusively on our behalf, for our account, under our instructions and under our supervision, for example to adapt the content of the website, to maintain the security of information systems, as website hosting providers,
to companies within the Heineken group, for internal administration purposes.
4. PROCESSING DURATION
We will store your personal data until the purpose for which it is processed has been fulfilled. You can check the retention periods for cookies in our cookie policy.
If the legal basis is your consent, we will process it until you withdraw your consent. In this case, the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal or processing based on other legal grounds.
We may store personal data even after the purpose of their processing has been fulfilled, until the expiry of the applicable limitation period if further storage is necessary to address legal claims, or longer if a longer storage period is necessary to comply with a legal obligation or a decision by a competent authority. After the expiry of the specified period, the personal data will be anonymized or deleted.
5. RIGHTS OF INDIVIDUALS
With regard to personal data concerning you, you may at any time request access to personal data, rectification or erasure of personal data, restriction of processing, and the right to data portability, provided that the legal conditions are met. For purposes for which personal data are processed on the basis of consent, you have the right to withdraw your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal or processing based on other legal grounds. For purposes for which personal data are processed on the basis of the legitimate interests of the controller, you have the possibility to object to such processing.
You also have the right to obtain from us information as to whether we are processing personal data concerning you and, where that is the case, access (inspection, transcription and copying) to the personal data, and the following information:
the purposes of the processing,
the types of personal data concerned,
the users or categories of users to whom the personal data have been or will be disclosed,
where possible, the envisaged period for which the personal data will be stored or the criteria used to determine that period,
information on the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject and to object to such processing,
information on the right to lodge a complaint with an information officer.
As the controller, we may provide you with a copy of the personal data processed about you. For additional copies that you request, we may charge a reasonable fee, taking into account administrative costs. When you submit your request by electronic means, and unless you request otherwise, we will provide you with the information in a commonly used electronic format.
You also have the right to request the rectification or completion of incomplete or inaccurate personal data concerning you.
You may also request the erasure of your personal data if: the data are no longer necessary for the purposes for which they were collected or processed; they have been processed unlawfully; you object to their processing or withdraw your consent; this is provided for by law or regulation. In the event of receiving a request, we will, taking into account available technology and the cost of implementation, take reasonable steps, including technical measures, to ensure that all processors to whom we have provided the data are informed of the request for erasure and to require them to erase links to the personal data or copies thereof. This does not apply if the processing is necessary for the exercise of the right to freedom of expression and information, compliance with a legal obligation, or the establishment and defence of legal claims.
You have the right to obtain restriction of processing if: you contest the verifiable accuracy of the data; the processing is unlawful and you do not want erasure but request restriction of processing; you need the data for the establishment, exercise or defence of legal claims, even though the data are no longer necessary for the purposes of the processing; you have objected to the processing, pending verification of whether our legitimate grounds override yours.
We will communicate any rectification or erasure of personal data or restriction of processing to any user to whom personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
Where we process personal data by automated means, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance. In this case, you also have the right to have the personal data transmitted directly to another controller, where technically feasible.
You have the right to object at any time, permanently or temporarily, to the processing of personal data concerning you if it is processed on the basis of our legitimate interest.
6. HOW TO EXERCISE RIGHTS
You can exercise all your rights regarding the protection of personal data in any of the following ways:
in writing to the business address of the controller: Pivovarna Laško Union d.o.o., Pivovarniška ulica 2, 1000 Ljubljana,
orally to the minutes at the business address of the controller,
by e-mail to the address: gdpr.plu@heineken.com
We will process your request within the statutory deadline and notify you of the measures taken in writing by post or e-mail. We will take into account the change in data no later than 15 days from the date of receipt of the request, unless justified reasons require a longer procedure. We reserve the right to refuse any action in relation to the request if the request is manifestly unfounded or excessive.
You have the right to file a complaint with the Information Commissioner if you believe that the processing of data relating to you is in violation of the regulations.
7. CHANGES
We reserve the right to change this policy. Any changes will be posted on the website.
Date: 19.11.2024