Privacy Policy
Statement on the protection of personal data
The company LAMORIX d.o.o. respects and protects your privacy. Read below how we handle your personal data.
This privacy statement describes the treatment of data provided to us or collected by our digital platforms that enable visitors to access our website and use our services. This privacy policy complies with the EU General Data Protection Regulation and local law.
LAMORIX d.o.o. is the owner of the website lamorix.com and the controller of personal data. This privacy statement applies to the following categories of individuals:
- customers,
- potential buyers,
- users of our website,
- our suppliers and business partners.
General about the processing of personal data
We process personal data only on the basis of pre-defined legal purposes and using the appropriate legal basis. You can read the purposes and legal bases for which we use individual personal data for individual groups in the points below.
We keep personal data only for as long as it is necessary to fulfill the processing purpose for which we collected the personal data. When we process personal data based on your consent, we process it until you revoke it. The retention periods for processing for an individual purpose are defined in more detail in the points below.
How do we collect your data?
We collect information you provide to us when you contact us for products, services or information, log in to our websites, participate in public forums or other activities on our digital tools, respond to customer surveys or otherwise communicate with us. We collect data through various technologies, such as "cookies". You can read more about cookies in our terms of business.
Purposes of processing your personal data
We process your personal data for different purposes, depending on the relationship you have with us. The purposes are defined in more detail in the tables below, including retention periods.
When acting as a buyer:
Purpose of processing | Personal data we process | Legal basis | Retention period |
Making a purchase on our website | - name and surname; - shipping address; - the company or title of legal entity (if the user is a legal entity); – tax number of a legal entity (if the user is a legal entity); – e-mail address (username); – password in encrypted form; - contact phone number; – country of residence. | The contract | 5 years from the completion of the order |
Communicating with you based on your order | name and surname; - shipping address; - the company or title of legal entity (if the user is a legal entity); – tax number of a legal entity (if the user is a legal entity); – e-mail address (username); – password in encrypted form; - contact phone number; – country of residence | The contract | 5 years from the completion of the order |
Sending e-newsletters | email address, first and last name | Law | Until cancelation |
Sending personalized e-newsletters using profiling | e-mail address, first and last name, profile data | Consensus | Until cancelation |
Marketing communication based on profiling | Profile information | Consensus | Until cancelation |
Sending satisfaction surveys | e-mail address, first and last name, data from the survey | Legitimate interest in business optimization and provision of an appropriate offer | 1 year from the completion of the survey |
Carrying out statistical analyses | Aggregated data about purchases, visits and other activities on the website, which do not allow the identification of an individual | Legitimate interest in business optimization and provision of an appropriate offer | 1 year |
Asserting legal claims and protecting our rights | The data depends on the legal requirement, whereby we always respect the principle of minimization | Law | In accordance with the law |
When acting as a website visitor or potential customer:
Purpose of processing | Personal data we process | Legal basis | Retention period |
Sending e-newsletters | email address, first and last name | Consensus | Until cancelation |
Sending personalized e-newsletters using profiling | e-mail address, first and last name, profile data | Consensus | Until cancelation |
Marketing communication based on profiling | Profile information | Consensus | Until cancelation |
Communicating with you based on your request | e-mail address or telephone number, first and last name | Legitimate interest in ensuring effective communication with individuals | 3 months from the end of communication |
Sending satisfaction surveys | e-mail address, first and last name, data from the survey | Legitimate interest in business optimization and provision of an appropriate offer | 1 year from the completion of the survey |
Carrying out statistical analyses | Aggregated data about purchases, visits and other activities on the website, which do not allow the identification of an individual | Legitimate interest in business optimization and provision of an appropriate offer | 1 year |
Ensuring the security of the website | IP address | Legitimate interest in providing a secure website and purchases | 1 year |
Asserting legal claims and protecting our rights | The data depends on the legal requirement, whereby we always respect the principle of minimization | Law | In accordance with the law |
When you act as a supplier, we process your personal data for the purposes of fulfilling contractual obligations and keep them for 5 years from the execution of the contract or termination of business cooperation. In the event of a dispute, we keep personal data until a final decision is issued by the competent authority.
Profiling is the collection and processing of personal data about an individual, on the basis of which the individual's profile is compiled. In this way, we can offer you products that are interesting for you and adapted to your interests. We will only use profiling based on your consent.
In company LAMORIX d.o.o. we use the following categories of data for profiling: purchase history and content, location of purchase, time of purchase.
Transmission of personal data
We will not pass on your personal data to others, except in the following cases:
- When affiliated companies or third parties perform services on our behalf, such as responding to your requests, or delivering packages and customer services, etc. These companies are prohibited from using your personal information for purposes other than those that we have requested from them or that they are required to do by law. These include e.g. delivery services, email providers, etc.
- When we share personal information within the company or with third parties to ensure the safety and security of our customers, to protect our rights and property pursuant to legal process, or otherwise when we have a good faith belief that disclosure is required by law. These include e.g. IT and financial consultants, external legal consultants, etc.
All third parties with whom we share personal data are bound by a separate contract to protect personal data. Likewise, third parties may not use this personal data for purposes outside of the personal data specified in the contract.
Security, integrity and data retention
The security, integrity and confidentiality of your data are extremely important to us. Our company implements technical, administrative and physical security measures designed to protect data against unauthorized access, disclosure, use and modification.
These measures include:
- regular updating of software, hardware and application equipment,
- employee training,
- verification and control of contract processors and
- adequate security of business premises.
We regularly review our security procedures to consider the latest relevant technologies and methods. Please note that despite our best efforts, no security measures are perfect or impossible to circumvent.
Your rights
In the context of the processing of personal data, you have certain rights available to you, which you exercise by contacting us in writing.
Please note that we may not be able to provide you with certain products and services if you do not allow us to collect your personal information, and some of our services may not be able to take into account your interests and preferences. For example if you do not give us an address for delivery, we cannot conclude a contract with you, since without an address we cannot guarantee the delivery of the ordered products.
You can exercise your rights by contacting us in writing at the address LAMORIX doo, Moste 40J, 1218 Komenda, Slovenia with the note "personal data protection" or via e-mail to info@lamorix.com with the subject "personal data protection". We will respond to your request within one month with the possibility of extending the deadline for an additional month. In the event of an extension, we will notify you within a month of receiving your request.
You have the following rights:
- Access to personal data: You can request information from us about whether we process personal data about you and, if we do, you can request access to personal data and information about the processing (which data we process and where this data comes from).
- Correction of personal data: you can request us to correct or complete the incomplete or inaccurate information we process about you.
- Restriction of processing of personal data: you can request from us a restriction of the processing of your personal data (when, for example, the accuracy or completeness of your personal data is being checked).
- Deletion of personal data: you can ask us to delete your personal data (we cannot delete those personal data that we keep due to legal requirements or on the basis of a contractual relationship).
- Printout of personal data: You can request that we provide you with your personal data that you have provided to us in a structured, commonly used and machine-readable format.
- Withdrawal of consent: You have the right to withdraw your consent at any time regarding the use of your personal data that we collect and process on the basis of consent. Consent may be revoked in any manner specified in this Policy. Revocation of consent does not have any negative consequences, but it is possible that, as a result of the revocation, he will no longer be able to provide you with certain services.
- Objection to the processing of personal data: you have the right to object to the processing of your personal data when it comes to processing for the purposes of direct marketing or to provide your personal data to third parties for direct marketing purposes. You can also object to processing when we use your data for direct marketing purposes using customized or individual offers (profiling). You can submit an objection in any of the ways specified in this Security Policy.
- The right to data portability: you have the right to request a copy of the personal data you have provided to us. We will provide you with the data in a structured, commonly used and machine-readable format. You are entitled to forward this data to another controller of your choice. When technically feasible, you can request that your personal data be transferred directly to another controller.
We inform you that for the purposes of reliable identification, in the case of exercising rights in relation to personal data, the controller may request additional information from you, and may refuse to take action only if it proves that it cannot reliably identify you.
If you believe that the company LAMORIX d.o.o. violates its obligations regarding the processing of your personal data, you can complain to the Information Commissioner, Dunajska cesta 22, 1000 Ljubljana or via e-mail at gp.ip@ip-rs.si. You can get more information about the Information Commissioner and the processing of personal data at: https://www.ip-rs.si/.
Changes to this privacy statement
From time to time, we may change this statement to adapt it to the latest technologies, industry practices, regulatory requirements or for other purposes. The currently valid version of the personal data protection statement will be published on our digital platforms. We advise you to regularly monitor the Personal Data Protection Statement, if required by applicable law, we will obtain your consent before making changes.
Comments and additional questions
If you have a comment or question about this statement on the protection of personal data, please write to the company LAMORIX d.o.o., Moste 40J, 1218 Trzin, Slovenia or by e-mail info@lamorix.com