Privacy Statement
1. General information
At B&G Avtomobili d.o.o. we respect the privacy of individuals and make sure personal data is processed lawfully, fairly and transparently.
We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation – GDPR), the Slovenian Personal Data Protection Act (ZVOP-2) and other applicable legislation.
This statement explains which personal data we collect through the online service booking form, for what purposes we use it, how long we keep it and what rights individuals have.
2. Data controller
- Company name
- B&G AVTOMOBILI d.o.o.
- Registered office
- Klanjškova ulica 10, 3000 Celje
- info@bg-avtomobili.si
- Phone
- +386 3 749 07 33
- Website
- www.bg-avtomobili.si
For questions about the processing of personal data and to exercise your rights, please contact us at the email address above.
3. Personal data we collect
When you submit the online service booking form, we collect the following personal data:
- first name and surname,
- phone number,
- email address,
- vehicle registration number,
- vehicle make and model,
- the service requested,
- preferred service date and time,
- a description of the problem or notes (if you add any).
We obtain the data directly from the individual who fills in the online form.
The data entered in the online form is sent to the email address of B&G Avtomobili d.o.o., where it is handled by authorised staff.
4. Purpose of processing
We process personal data solely for the following purposes:
- receiving and handling the service booking,
- checking the availability of service appointments,
- arranging and confirming the service appointment,
- communicating with the customer about the booking,
- organising and carrying out the service.
We do not use data obtained through the online form for direct marketing or for sending advertising messages without an appropriate legal basis.
5. Legal basis for processing
We process personal data on the basis of Article 6(1)(b) of the GDPR, as the processing is necessary for the performance of a contract or in order to take steps at the request of the individual prior to entering into a contract.
No separate consent is required for the processing of personal data that is necessary to handle and carry out the service booking.
Providing the data marked as required is necessary to handle the booking. If the individual does not provide this data, we may not be able to handle or confirm the booking.
6. Retention period
Personal data submitted through the online service booking form is sent to the email address of B&G Avtomobili d.o.o.
We keep the data for as long as is necessary to handle the booking, arrange the service appointment, communicate with the customer and carry out the service.
Emails containing service bookings are kept for no more than 30 days after the booking has been handled or the service has been carried out, after which they are deleted, unless there is another legal basis for keeping them longer.
If the service has been carried out, data needed to comply with legal obligations, handle complaints or pursue legal claims may be kept in accordance with the applicable legislation and the relevant limitation periods.
7. Sharing of personal data
Personal data is accessible only to authorised staff of B&G Avtomobili d.o.o. who need it to handle bookings and carry out services.
External service providers may be involved in running the website, email and IT systems; they process personal data on our behalf and according to our instructions.
Where these providers act as processors, our relationship with them is governed by an agreement in accordance with Article 28 of the GDPR.
Transfers of personal data to third countries
If the use of external service providers involves transferring personal data to countries outside the European Economic Area (EEA), such transfers are carried out only where the conditions of Chapter V of the GDPR are met.
In the case of such transfers, we provide individuals with information about the legal basis for the transfer, any safeguards in place and how to obtain a copy of them or where they are available, in accordance with Article 13 of the GDPR.
8. Data security
B&G Avtomobili d.o.o. implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.
Access to personal data is limited to authorised staff who need it to perform their duties.
In the event of a personal data breach, we act in accordance with Articles 33 and 34 of the GDPR.
Where required, we report the breach to the competent supervisory authority, as a rule within 72 hours of becoming aware of it. We inform the individuals concerned without undue delay where the breach is likely to result in a high risk to their rights and freedoms.
9. Links to external websites
Our website may contain links to third-party websites. Their operators are responsible for the content, data protection and use of cookies on those websites.
We recommend that visitors read the privacy policies of external websites before using them.
10. Rights of individuals
Under Articles 15–22 of the GDPR and ZVOP-2, and where the legal conditions are met, individuals have the following rights:
- Right of access: to obtain information about the processing and a copy of their personal data.
- Right to rectification: to have inaccurate data corrected or incomplete data completed.
- Right to erasure: to request that their data be deleted where the legal conditions are met.
- Right to restriction of processing: to have processing restricted in certain cases.
- Right to data portability: to receive their data in a structured, commonly used and machine-readable format where the prescribed conditions are met.
- Right to object: individuals have the right to object in the cases and under the conditions set out in Article 21 of the GDPR. This right does not apply to processing that is necessary to handle the service booking on the basis of Article 6(1)(b) of the GDPR.
Where processing is based on consent, the individual may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
Requests to exercise these rights can be sent to the company's email address given in section 2 of this statement. We respond within the time limits set by the GDPR, as a rule within one month of receiving the request.
Individuals also have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia, website: www.ip-rs.si.
11. Cookies
The website of B&G Avtomobili d.o.o. uses only strictly necessary session cookies, which ensure that the website works properly and allow its features to be used, including submitting the service booking form.
These cookies are not used for advertising, traffic analysis or tracking users.
As these cookies are strictly necessary for the website to work, visitors' consent is not required for their use.
12. Automated decision-making
When processing personal data obtained through the online service booking form, B&G Avtomobili d.o.o. does not carry out automated decision-making, including profiling, within the meaning of Article 22 of the GDPR.
The data is used to handle the booking, organise the service appointment and carry out the service.
13. Changes to this statement
B&G Avtomobili d.o.o. may update this statement to reflect changes in legislation, in the way personal data is processed or in how the website works.
The current version of the statement is published on the company's website.