At Eligma Ltd., we strive for continuous development and improvement of our services as we want to adapt them to your requirements as much as possible. In order to achieve this, we need to collect and process certain personal data in some cases.
The purpose of this Personal Data Protection Notification (“Notification”) is to make you acquainted with what kind of personal information we collect and for what purposes, what we do with them, how we ensure their security, and what rights you can exercise in connection with the processing of your personal data. We treat the protection of your personal data with the utmost seriousness and responsibility. We fully comply with our obligations regarding lawful, fair and transparent personal data processing. We advise you to get yourself fully acquainted with the contents of this Notification.
In order to ensure the compliance of this Notification with the regulations governing personal data protection, Eligma reserves the right to modify or amend the Notification accordingly. You will be suitably notified of any changes in due course, e.g. by e-mail or through a website notification.
The controller of the personal data processed in accordance with this Notification is Eligma Ltd. (“Eligma”), company registration number 8106452000, with business address at Letaliska cesta 33F, 1000 Ljubljana, Slovenia. If you have any questions or requirements regarding the processing of your personal data, please send them to e-mail address [email protected].
Data protection officer (DPO) at Eligma is Luka Planinc, who is available at [email protected]. You can contact him for further explanations and information regarding personal data protection.
We only collect your personal data when this is absolutely necessary or when you have given your consent. We will not process your personal data if the purpose of or basis for their processing is not supported by the applicable regulations in the field of personal data protection (the Personal Data Protection Act, the Official Gazette of the Republic of Slovenia No. 94/07 – official consolidated version (ZVOP-1) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR)) and our internal policies.
Eligma's processing of your personal data will be based on the following legal basis:
We acquire personal data from various sources. In most cases, they are supplied by you directly through visiting our website, filling out online forms and / or subscribing to our newsletter. We can also use other information and data accessible through or provided by public sources (public registers, databases, internet applications, social media).
Eligma processes the following types of personal data:
This includes all the personal data you provide when filling in online forms or communicating with us by phone, e-mail or in any other way. It also includes all the data you provide when registering on the website, subscribe to our newsletter, participate in prize contests, download the Elly mobile application or report any kind of problem that arises during your visits to our website. In such cases, we collect and save data which can include your name, e-mail address, phone number, address and other provided data.
When you use this website, we collect various data in the server log, i.a.: the dates and times of the visits; the visited subpages; your IP address; time zone settings; the time you have spent on our website: the websites you visit immediately before or immediately after visiting our website; screenshots of clicks on this website; the information you viewed or sought; webpage response time; downloading errors; the lengths of the visits to individual webpages and data on webpage interactions.
We collect data on the computer or mobile device which you use to access this website, including its model, the operating system and version of your software, the internet browser used and other identifiers of your device.
To target our services, we use data on which of our services you already use, for how long, under what conditions and whether you have kept or cancelled them. We know how frequently and for what purposes you use our individual services.
We keep records of your contacts with us, especially of the dates (sometimes also times) of the contacts and the reasons for them. This holds for all kinds of contacts (phone, SMS, regular mail, e-mail, live).
In our marketing campaigns, we also use social media (e.g. Facebook) and, although we do not keep the data published on your profile, we use it for targeted marketing activities, but only if you consent to this during your use of the aforementioned media. In the scope of third-party cookies, we also offer user service improvements, content dissemination through various social media and personalisation of our offer according to your wishes and requirements which are evident from your previous web browsing. Despite all of our efforts, we can not guarantee for the security of the content of the connected external websites or check such content. You therefore click external links at your own risk. We are not liable for any damages or implications resulting from visiting any aforementioned external link. If you follow a link to another website, you thereby leave our website and this Personal Data Protection Notification does not apply to your use of other websites or your activities on them.
Geolocation data or GPS coordinates (longitude, latitude) is acquired at your visit to our website in order to be able to help you find the most suitable end product and / or service. Eligma processes location data in a form that can not be connected to a specific or identifiable person, or on the basis of prior user consent.
The users of your personal data are Eligma's employees authorised for processing your personal data, contracted data processors as well as public authorities, other state authorities and persons with powers conferred by public law to whom personal data is disclosed when so required by the applicable legislation. We take your privacy extremely seriously. We will only disclose it to third parties only if absolutely necessary, if they are trusted entities and have signed a non-disclosure agreement with us, or if you have given us explicit consent to do so.
In certain cases, the performing of our activities requires and takes place through contracted personal data processing, e.g. by companies that ensure smooth functioning of our services (software suppliers and maintainers, IT support, printing services, technical support, contract partners performing use analysis, direct marketing and data storing services on our behalf, etc.). The contracted data processors operate in our name and on our behalf. Without a justified requirement and without Eligma's explicit written consent, they must not transfer their contracted processing upon subcontractors.
Your personal data constitutes a business secret of Eligma. Eligma's employees process your personal data in accordance with their authorisations and our internal policies. The contracted data processors are obliged to protect confidential data and respect the rights of individuals in the same manner as Eligma's employees, therefore, your data is safe.
Where we transfer your personal data outside the European Economic Area, we will ensure that it is protected and transferred in a manner consistent with the legal requirements applicable to the personal data. This can be done in a number of different ways, for instance:
In other circumstances, the law may permit us to otherwise transfer your personal data outside the European Economic Area. In all cases, however, any transfer of your personal data will be compliant with the applicable data protection legislation.
In order to protect personal data, Eligma will use all the organisational, technical and other suitable procedures and measures necessary to prevent unauthorised data destruction, modification, loss or any unauthorised processing. Among others, these measures can include internal rules on personal data protection, additional employee training, internal controls of processing activities, etc. Other possible measures can include minimalization of personal data collection, pseudonymisation, transparency, enabling individuals to monitor the processing, as well as continuous safety measure upgrades.
The period of keeping your personal data depends on the basis and purposes of processing an individual personal data category. Personal data is only kept for as long as this is legally required or allowed and absolutely necessary to achieve the purpose for which the data has been collected or processed. After achieving the purpose, we will only keep the personal data we are legally obliged to keep, or we might need for evidence or defence purposes in case of a possibility of legal claims. The rest of the data is erased, blocked or anonymised unless otherwise legally required for certain types of data.
The personal data that we process to send offers and notifications on novelties is kept until your consent withdrawal or, in any case, for a maximum period of five years from your consent. After that period, we will again ask you for your consent.
You can always request to view or access your personal data, or request its correction or erasure, or restrict or object to its processing. We will notify you if your request affects the possibility of further operation of the website or our business cooperation. In certain cases, you also have the right to port your personal data to a different controller. This depends on the technical capacities and internal policies of individual controllers.
Your consent to the processing of personal data for the purpose of sending offers and novelty notifications may be withdrawn at any time; however, the withdrawal of your consent does not affect the lawfulness of the processing of your personal data on the basis of your consent for the period prior to the withdrawal.
Eligma does not take responsibility for the credibility, accuracy and currency of the personal data you provide. The user themselves is obliged to ensure the accuracy and currency of all the data they provide.
In the event of a violation of protection of your personal data, we will notify you in accordance with the conditions laid down by the applicable legislation.
Your requests will be fulfilled without undue delay, but in any case within one month of the receipt of your request unless otherwise provided by the applicable legislation. In the event of complexity and a large number of requests, this time limit may be extended by up to two months. We will notify you of any such extension within one month of receiving your request, together with the reasons for the delay.
If you believe that we do not process your personal data in accordance with the applicable legislation, you can file a complaint with the Slovenian Information Commissioner at the e-mail address [email protected] or by regular mail to Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, Slovenia.
This Notification is published on the website Elly.com/wallet and enters into force on 1 September 2019.