Privacy Policy

1) Introductory provisions

By this Privacy Policy, the company N.K.N. d.o.o., ŠTIHOVA ULICA 13, 1000 LJUBLJANA, registration number 8782822, tax number SI72387645 (hereinafter referred to as “N.K.N.”), represented by its director Karin Krapež, determines what personal data it processes in the context of the provision of its services and how it processes them.

The privacy and security of personal data are of great importance to N.K.N., which is why it is constantly striving to ensure that appropriate technical and organisational procedures and measures are in place to safeguard the rights of individuals with regard to the protection of personal data.

This Privacy Policy is published on the website www.numerology-code.com so that any visitor to the website and user of N.K.N.’s services can read it. the user accepts the privacy terms and conditions described in this Privacy Policy. If the visitor or. the user does not agree to these terms, we suggest that the website or. does not use the service.

2). Presentation of N.K.N.

As part of its activities, N.K.N. provides Numerology Digital Code and SMS Analysis services through its website www.numerology-code.com.

The contact person of N.K.N for the protection of personal data is Karin Krapež. Her contact details are available here.

Questions regarding this Privacy Policy or questions regarding the processing and protection of personal data at N.K.N. may be sent to the e-mail address available at the link.

3) On the Privacy Policy

The purpose of the N.K.N. Privacy Policy is to inform visitors to the www.numerology-code.com website and users of N.K.N.’s services (hereinafter referred to as “individuals“) of the terms and conditions of the processing of personal data and the rights of individuals in this area.

In accordance with the General Data Protection Regulation (the “GDPR“), the Privacy Policy contains the following information:

contact and other details of the controller of the personal data,
categories of individuals and types of personal data processed,
the legal basis and purpose of the processing of personal data,
categories of users of personal data,
information on transfers of personal data to a third country,
the retention period for each type of personal data,
the rights of individuals with regard to the processing of personal data,
the right to lodge a complaint concerning the processing of personal data,
the validity of the Privacy Policy.

4) Categories of individuals and types of personal data

4.1) Visiting the website:

If you are a visitor to our website, we collect information about you using cookies. We process information about your use of our website. More information about cookies is available HERE.

4.2) Use of or demand for services:

If you are a user of our services or make an enquiry about our services via our website, we process the following personal data that we obtain directly from you:

for the numerological digital code service:
- name and surname
- address of the payer, delivery address
- contact e-mail address
- contact telephone
- date and year of birth
- IP address
- any other information required for the issue of the offer or tender to carry out your order according to your request.
SMS analysis service:
- contact telephone
- any other information required for the issue of the offer or tender to carry out your order according to your request.

4.3) Messages:

We process the data you provide to us in your message, sent by email or by telephone. We obtain the data directly from you.

5) Legal basis and purposes for processing personal data

5.1. Processing on the basis of a contract:

On the basis of the performance of the contract, we process your personal data for the following purposes:

identification of the individual,
demand processing,
preparing the offer,
conclusion of the contract,
implementation or. to provide the services you have ordered,
informing you of any changes, additional details and instructions for using the services,
resolving any technical problems, objections or complaints,
accounting for services; and
for other purposes necessary for entering into or performance of a contractual relationship between us and the individual.

5.2. Processing based on legitimate interest:

We process your personal data on the basis of legitimate interest for the following purposes:

detecting and preventing fraudulent use and misuse of services,
ensuring the stable and secure operation of our system and services,
implementing information security measures
meeting service quality requirements,
detecting technical failures of systems and services,
analysis of how our website is used,
improving our website,
providing relevant information on the message sent or. query.

In particular, we take into account the following when making our assessment of legitimate interests:

the purpose of the processing of personal data,
the necessity of the processing of personal data for the purpose of its purpose,
the impact of the processing on the interests of individuals and their rights and freedoms.

5.3. Processing based on consent to the processing of personal data:

The processing of personal data may also be based on your consent, which may relate, for example, to the communication of offers, benefits and improvements to the services we provide. The purpose of such information is to make the services as close as possible to your needs and preferences and to increase their useful value for you. The communication is carried out through the channels you have chosen in your consent. You may withdraw your consent at any time in the manner set out in the Privacy Policy.

You may withdraw your consent at any time or. change it in the same way as you gave it or in another way as defined in the Privacy Policy. The revocation or modification of consent can be arranged, inter alia, by e-mail to the e-mail address accessible at this link or by written request to our address.

Cancellation or. the modification of consent applies only to personal data processed on the basis of your consent. The last consent we received from you is valid. The possibility to withdraw consent does not constitute a right of withdrawal in your business relationship with us.

Personal data for which consent is given is processed for up to two years after the termination of your business relationship with us, unless revoked.

5.4. Other purposes for processing personal data:

We may also process personal data as defined in this Privacy Policy for the establishment, exercise or defence of legal claims in judicial, administrative or extrajudicial proceedings. The lawful basis for this processing is our legitimate interests, namely the protection and defence of our rights, your rights and the rights of third parties.

We may also process personal data as defined in this Privacy Policy for the purpose of risk management or obtaining an expert opinion. The lawful basis for this processing is our legitimate interests, namely the protection of our business against risks.

In addition to the purposes of processing explicitly set out in this section, we may also process your personal data where it is necessary for the performance of our legal obligations.

6) Categories of users of personal data

Where necessary, we will commission other companies and individuals to carry out specific work that contributes to our services. In such a case, we may also transfer personal data to such carefully selected contract processors who will enter into a contract with us for the processing of personal data or. an agreement or other binding document substantially identical in substance (“Processing Agreement“). We will transfer such personal data to the contractual processors or. made accessible only to the extent required by the purpose. The personal data may not be used for any other purpose by the contractual processor, which shall at least comply with all the standards for the processing of personal data provided for by the applicable law. Contract processors are contractually bound to respect the confidentiality of your personal data in their relationship with us.

Upon a reasoned request, we may also disclose personal data to competent state authorities (e.g. courts, law enforcement authorities and other state authorities, which may include state authorities of another EU Member State) that have a legal basis to do so.

7) Transfer of personal data to third countries

N.K.N. uses the email marketing tool Mailchimp, a US-based email marketing provider. Mailchimp is committed to protecting personal data in accordance with the requirements of the General Regulation. More information is available at the following links:

https://mailchimp.com/gdpr/,

https://mailchimp.com/help/mailchimp-european-data-transfers/#More_information_about_data_transfers

In other cases, N.K.N. does not transfer personal data to third countries.

8) Period of retention of personal data

The retention period of personal data is determined according to the category of personal data concerned. We keep personal data for no longer than is necessary to fulfil the purpose for which they were collected or further processed or. until the expiry of the limitation periods for compliance with the obligation or the statutory retention period.

Billing data and related contact details of individuals may be retained for the purpose of fulfilling contractual obligations until payment for the service has been made in full, or until. until the expiry of the limitation period for the individual claim, which can vary by law from one to five years. Invoices are kept for 10 years after the end of the year to which the invoice relates, in accordance with the law governing value added tax.

Other data obtained on the basis of your consent is retained for the duration of the business relationship and for 2 years after termination, unless a longer retention period is provided for by law. If the individual who has given consent to the processing of personal data has not entered into a business relationship with us, his or her consent shall be valid for 2 years from the date on which it was given or. until its revocation.

After the expiry of the retention period, the personal data shall be erased, destroyed, blocked or anonymised, unless otherwise provided by law for a specific type of personal data.

9) Rights of individuals with regard to the processing of personal data

We ensure that your rights in relation to the processing of your personal data are exercised without undue delay. We will decide on your request within one month of receiving your request. In case of complexity and a large number of requests, the deadline can be extended by up to two additional months. If we extend the deadline, we will notify you of any such extension within one month of receipt of the request, together with the reasons for the delay.

Requests concerning the exercise of your rights are accepted at the e-mail address available at this link or by post to N.K.N. d.o.o., ŠTIHOVA ULICA 13, 1000 LJUBLJANA.

Where you make a request by electronic means, we will, where possible, provide you with the information by electronic means, unless you request otherwise.

In all cases, we have the right to verify your identity and we will take reasonable steps to do so.

If the data subject’s requests are manifestly unfounded or excessive, in particular because they are repetitive, they may:

charge a reasonable fee, taking into account the administrative costs of providing the information or communication or taking the action requested; or
refuse to act on the request.

You have the following rights in relation to the processing of your personal data:

(i) the right of access to data

(ii) the right to rectification

(iii) the right to erasure (‘right to be forgotten’)

(iv) the right to restrict processing

(v) the right to data portability

(vi) right to object

(i) the right of access to data

You always have the right to know whether personal data concerning you is being processed and, if so, to have access to your personal data and to the following information:

the purposes of the processing,
the types of personal data processed,
the users or categories of users to whom personal data have been or will be disclosed,
the envisaged period of retention of the personal data or, if this is not possible, the criteria to be used to determine that period,
the existence of a right to have the controller rectify or erase personal data or restrict the processing of your personal data, or the existence of a right to object to such processing,
the right to lodge a complaint with the supervisory authority,
where the personal data is not collected from you, any available information regarding its source.

(ii) the right to rectification

You have the right to have inaccurate personal data concerning you rectified without undue delay and, taking into account the purposes of the processing, the right to have incomplete personal data completed, including by submitting a supplementary declaration.

(iii) the right to erasure (‘right to be forgotten’)

You have the right to have your personal data erased without undue delay where one of the following applies:

where the personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
where you withdraw the consent on the basis of which the processing is carried out and there is no other legal basis for the processing,
where you object to the processing of personal data and there are no overriding legitimate grounds for processing,
where personal data have been unlawfully processed,
where personal data must be erased in order to comply with a legal obligation under EU or Slovenian law.

(iv) the right to restrict processing

You have the right to have us restrict the processing of your personal data where one of the following applies:

where you contest the accuracy of the personal data, for a period which allows us to verify the accuracy of the personal data,
the processing is unlawful and you object to the erasure of your personal data and request instead that its use be restricted,
we no longer need your personal data for the purposes of the processing, but you need it to assert, exercise or defend legal claims,
if you have objected to processing based on our legitimate interests, until it is verified that our legitimate interests outweigh your reasons.

Where the processing of your personal data has been restricted in accordance with the preceding paragraph, such personal data shall, with the exception of their storage, be processed only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person.

We are obliged to inform you before revoking the restriction on the processing of your personal data.

(v) the right to data portability

You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format and the right to transmit that personal data to another controller where the processing is based on your consent and the processing is carried out by automated means. At your request, where technically feasible, personal data may be transferred directly to another controller.

(vi) right to object

Where we process your personal data on the basis of legitimate interest for marketing purposes, you may object to such processing at any time.

We will stop processing your personal data unless we can demonstrate compelling reasons for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

10) Right to lodge a complaint concerning the processing of personal data

Any complaint regarding the processing of your personal data may be sent to the e-mail address available at this link or by post to N.K.N. d.o.o., ŠTIHOVA ULICA 13, 1000 LJUBLJANA.

If we do not decide on your request within the statutory time limit or if we refuse your request, you have the right to lodge a complaint with the Information Commissioner.

You also have the right to lodge a complaint directly with the Information Commissioner if you believe that the processing of your personal data violates Slovenian or EU data protection laws.

If you have exercised your right of access to personal data and, after receiving a decision, you consider that the personal data you have received is not the personal data you requested or that you have not received all the personal data you requested, you may lodge a reasoned complaint with us within 15 days before lodging a complaint with the Information Commissioner. We must decide on your complaint as a new request within five working days.

11) Minors

N.K.N.’s services are not directed to minors and are not offered by N.K.N. to minors and N.K.N. does not knowingly process any personal data relating to minors.

Minors are advised by N.K.N. not to use THEIR services. Should N.K.N. become aware that it is processing the personal data of a minor without the consent of the parent or guardian, it will take all necessary steps to delete the data. If the parents or guardians of a minor find that their child or young person has. the client uses a service of N.K.N., in the context of which they have provided certain personal data, they may communicate this to the e-mail address available at this link and request the deletion of the personal data.

12) Technical and organisational measures

N.K.N. provides technical and organisational measures to ensure the security of personal data for the following purposes:

ensuring the confidentiality of personal data,
ensuring the integrity, availability and resilience of processing systems and services,
ensuring the ability to restore the availability of and access to personal data in a timely manner in the event of a physical or technical incident,
ensuring procedures for regular testing, assessment and evaluation of the effectiveness of technical and organisational measures to ensure the security of processing,
ensuring traceability of operations on personal data.

13) Final provisions

Anything not covered by this Privacy Policy shall be governed by applicable law.

We reserve the right to change this Privacy Policy. We will inform you of the change by posting it on www.numerology-code.com 30 days before it takes effect.

14) Applicability of the Privacy Policy

This Privacy Policy is published on the website www.numerology-code.com on 24.01.2024 and will enter into force on 24.01.2024.

N.K.N. d.o.o.