Privacy Notice

1. General Information

1.1 Personal Data

»Personal data« shall mean any information relating to an identified or identifiable natural person (hereinafter as »Data Subject«); the Data Subject is deemed to be directly or indirectly identifiable, in particular by reference an identifier, such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, psychological, genetic, material, cultural, or social identity of that natural person. The said is set by Article 4(1) of the GDPR.

1.2 Controller

The controller of personal data in the context of Article 4(7) of the GDPR and therefore the person responsible for your personal data is:

2. Collection and Processing in Connection with This Website

2.1 Automatic Processing of Data when Visiting Website

Each time you access our Website, your browser (by using necessary cookies) automatically transfers data stored in the server log files. This includes the following data (hereinafter as »Log File Data«):

• information on the type and version of the browser;
• information on the internet service provider and user's IP address; and
• the date and time of access.

The Log File Data is evaluated anonymously in order to continuously improve the Website, to adapt the Website to the interests of our users and to quickly eliminate any errors. For these purposes we have the legitimate interest for processing of personal data according to Article 6(1)(f) of the GDPR. The Log File Data in a non-anonymized form is used solely for the purpose of detecting errors and ensuring the security of the system, which includes detection and tracing the attempts of unauthorised access and attempts of frauds and abuse. The data are stored for 14 days and then deleted. The Log File Data, which must be stored for the purpose of proof are not be deleted until the final clarification of the respective incident. In individual cases, the said data may be submitted to investigating authorities. Further details about the processing of data through necessary and non-necessary cookies are available on the Cookies site.

2.2 Processing of Data during Registration and Ordering in the Online Shop

If you send us data actively, for example when registering/logging in or ordering from our online shop, we will process the data that you have submitted. When you register/log in or place an order in our online shop, we collect and process the following data:

• title;
• name and surname;
• e-mail address (which is also your username);
• address;
• telephone number;
• password;
• country of residence;
• time and date of registration; and
• order history.

When placing an order we also process the following data:

• ordered goods, services or digital content;
• delivery address, if different from the invoice address;
• data required for the purpose of invoicing and for payment; and
• whether the order has been taken over, when it was taken over and by whom.

The above data are processed for managing your registration and for processing your orders. The legal basis is Article 6(1)(b) of the GDPR (preparation for the conclusion of a contract and performance of a contract). Without providing the relevant data above, registration or ordering in the online shop is not possible. We will keep the data you provide at the time of registration/login until you delete your account. You can do this yourself in your user account. Data collected during the conclusion of contract are stored until the expiry of the statutory or any contractual warranties. After the expiry of these deadlines, we store the data required by the tax legislation for the time periods set by the law for the purpose of audits performed by the tax authorities. Your payment details will be submitted to the relevant payment service provider for the execution of payment. The delivery address will be submitted to our delivery contractor, who may contact you in order to arrange the delivery date. We will provide your e-mail address and telephone number to the delivery contractor for the purpose of facilitating the communication regarding the delivery. If the contractual partner also handles the packaging of the goods, they will also receive information about the contents of your order for this purpose. The respective data is submitted solely for the purposes stated above and is stored by the contractor as long as required to prove the fulfilment of the obligations under the contract with us.

2.3 Commercial Communication

If you have made a purchase through our online shop, we will use your e-mail address to keep you informed of news and products that may be of interest to you. The legal basis is Article 6(1)(f) of the GDPR (legitimate interest) and Article 226 of the ZEKom-2. We will also send you commercial communication, if you have subscribed or consented to receive commercial communication (in particular when you registered your user account, in the context of the online shop or on the Website). The legal basis for this is Article 6(1)(a) of the GDPR (your consent). You can unsubscribe from receiving such messages at any time. We will keep the data we process for this purpose for as long as there is a legitimate interest for the processing or until you withdraw your consent.

2.4 Processing of Data when Attending "Live Events"

If you attend any of our live events, we may also collect and process information about you, which we collect through photographs, video and/or audio recordings (in addition to the above stated data). In these cases, we will also process the following data (in addition to the above stated data):

• information about your image,
• information about your voice; and
• information about the opinions you express through video or audio recordings.

We will process such data for the purpose of publishing photographs and/or video or audio recordings on our Website or social media for the purposes of informing participants and the public about our events and for the purposes of promoting our services or digital content. In our publication we are cautious that we primarily reflect the »spirit« of the event and that we do the participants are not over-exposed. If a participant »steps in front of the lens or camera«, we inform them in advance that the photo or video may be published on our Website and/or social media, and that knowing that they may choose not to participate in the photography or video recording. The legal basis for processing of personal data through taking photographs, video and audio recording and postings on our Website and social media is Article 6(1)(f) of the GDPR (legitimate interest as described in the preceding paragraph) in conjunction with Article 93(3) ZVOP-2; or, in certain circumstances, Article 6(1)(a) of the GDPR (your consent). We will process the above data until your consent is withdrawn or until we have legitimate interest.

3. Contact

Our Website provides information on how you may contact us. You can also contact us via social media (e.g., Facebook or Instagram). If you use the option to contact us and, e.g. contact us by e-mail, we will process the data you submit to us in order to respond to your request. We have a legitimate interest to answer to your questions. The legal basis for the processing of your data is Article 6(1)(f) of the GDPR (legitimate interest). If you contact us for the purpose of entering into a contract, the legal basis is Article 6(1)(b) GDPR (preparation for entering into a contract and performance of the contract). The data which you submit when you contact us, will be deleted after the purpose for which you have contacted us has been met, provided that we are not obliged to store the data for reasons of contractual or tax law.

4. Transmitting Personal Data

It is possible that during the processing of the data described in this Privacy Notice, the personal data is transmitted to the following categories of recipients (in addition to the recipients that are explicitly mentioned in this Privacy Notice):

• authorized agents and other advisers (e.g., legal, tax advisers);
• IT-service providers;
• marketing service providers;
• governmental or other public authorities.

Personal data is being transmitted to third parties solely if this is necessary to comply with a contractual obligation, or if we or our contractual party has the legitimate interest for the processing of personal data, or if you have provided consent for transmitting the personal data. Furthermore, personal data are transmitted to third parties if we are required to do so by applicable legislation, administrative measures, or by court order, or in the case another legal ground exists. Service providers will use the data solely in accordance with our instructions.

5. Rights of Data Subjects

You have different rights under the GDPR, but in particular the following:

• Right to access: You may request to obtain confirmation as to whether or not your personal data is being processed. When data are being processed, you may request additional information relating to the processing of personal data.
• Right to rectification: You have the right to rectification and/or completion of personal data, if your personal data is inaccurate or incomplete.
• Right to restriction of processing: In certain cases, you may request the restriction of processing of your personal data.
• Right to erasure: In certain cases, you have the right to request the deletion of your personal data. You may submit a request for deletion by completing the form set out in Annex 1 and sending it to info@tjasadorelay.com.
• Right to data portability: In certain cases, you may request to receive the personal data that you have submitted, in a structured, commonly used, and machine-readable format, and/or that the personal data is transmitted to another controller.
• Right to withdraw consent: Your consent for specific processing may be withdrawn at any time, however, this shall not affect the lawfulness of processing based on consent before the withdrawal.
• Right to Object: If your personal data is being processed on the basis of a legitimate interest as prescribed by Article 6(1)(f) GDPR, you have the right to object to such processing of personal data, under the presumption of existence of grounds stemming from your specific case, or if you are exercising the right to object to processing of your personal data for direct marketing purposes.

You may exercise your rights by contacting us at info@tjasadorelay.com.

6. Right to Complain

You have the right to file a complaint with personal data protection authority in relation to the processing of your personal data. In Slovenia, the responsible authority is the Information Commissioner (www.ip-rs.si).

---

Cookies

We also use cookies or similar technology (hereinafter as »cookies«) on our website www.tjasadorelay.com (hereinafter as »Website«). A cookie is small piece of data with text or picture which are stored on your device by your browser. Upon your next visit to our Website with the same device information stored in the cookies will be either be returned to our Website (hereinafter as »first party cookies«) or to another Website (hereinafter as »third-party cookies«). Information stored in the cookies tells the Website that you have already visited it. This allows you to experience the Website in the best possible way and according to your preferences. Only cookies are recognizable on your terminal. Personal data will only be processed with your consent or if necessary for the use of the service you requested. You are informed in advance about the use of cookies in the notification banner. A description of the types of cookies we use on our Website is listed below.

7. Essential Cookies

These cookies are essential for the operation of the Website and cannot be turned off in our systems. They are usually set only as a response to your actions that constitute a request for services, such as setting security preferences, logging in, or filling in forms. You can set your browser to block or notify you of these cookies, but in this case some parts of the Website will not work. A list of essential cookies being used on our Website:

8. Analytics Cookies

These cookies allow us to count visits and traffic sources so that we can measure and improve the effectiveness of our Website. They help us understand which pages are the most and the least popular and to understand how users navigate our Website. All information collected by these cookies is aggregated. If you do not enable these cookies, we will not know when you have visited our Website and therefore will not be able to monitor its effectiveness. A list of the analytics cookies being used on the Website:

9. Third Party Cookies

When using the Website, you will come across third party tools and/or content, e.g. YouTube, Vimeo, SoundCloud, etc. and links to third party websites. These tools, content or links may contain third-party cookies which are added to our Website primarily to enable us to play our video and audio content to you or to enable other features. If you reject the use of these cookies, some or all of the features may not work. This applies in particular to the video and audio content for playing of which our Website mostly uses YouTube, Vimeo and SoundCloud. Third-party cookies may also be added to our Website to keep you up to date with carefully selected information that may be relevant or of interest to you or for advertising purposes. Please note, that we have no control over the management of third-party cookies. We therefore recommend that you check the websites of all the below listed third-party cookies administrators and their respective privacy and cookie policies for further information about their cookies and management of cookies. A list of third-party cookies being used on our Website:

10. Advertising Cookies

These cookies may be placed on our Website by our advertising partners (these are also third-party cookies). These companies may use them to build a profile of your interests and to show you relevant advertisements on other sites. They do not store personal data directly but are based on a unique identification of your browser and web device. If you do not enable these cookies, the ads you see may be less personalized and less relevant to you. Since these cookies are also third-party cookies, please note, that we have no control over the management of these cookies. The list of advertising cookies being used on our Website:

11. Transfer Outside of the EU

The use of cookies may result in the transfer of personal data to service providers in the US (if the service providers are US-based). As the US does not provide adequate level of protection of personal data according to the Court of Justice of the European Union, there are certain risks associated with the transfer of data (in particular in relation to access to personal data by US official authorities, lack of legal remedies).

12. How Are Cookies Being Used on Our Website?

By default, only essential cookies are enabled. Essential cookies make the Website accessible, as some parts of the Website will not work without them. They are essential for the basic functioning of the Website to work. Although analytics, third party and advertising cookies are disabled by default, you may enable them when visiting our Website for the first time by clicking on the »Cookies« banner.

13. How Can You Manage Cookies?

Cookies (except for essential cookies) may be disabled later on our Cookie Settings page. You can also control the storing of cookies on your device in the settings in your browser. Instructions on how to control cookies through the settings of the browser you are using are available on the below links:

• Internet Explorer
• Microsoft Edge
• Google Chrome
• Mozilla Firefox
• Opera
• Safari

---

Annex 1: Request Form for the Deletion of Personal Data

Applicant's Information

Full name: ______________________________________

E-mail address: __________________________________

Phone number (optional): ____________________________

Description of the Request

Date: ______________________________________

Signature (if the form is submitted physically): ______________________________________