Privacy policy

Notice on Personal Data Processing on the Iskra B2B web portal

This web portal is operated by ISKRA, elektro in sistemske rešitve, d.o.o., Stegne 21, 1000 Ljubljana ("Iskra, d.o.o."). Iskra, d.o.o. respects your privacy and the protection of your personal data. For this purpose, we implement several measures to ensure compliance with applicable legislation in this area, particularly the General Data Protection Regulation ("GDPR") and the Personal Data Protection Act ("ZVOP-2").

This notice informs you, as a user of our web portal, why and how we process your personal data, as well as other details related to the processing of your personal data.

Our web portal may contain links to websites not operated by us. Please refer to the data protection policies of such third-party websites regarding their use.

Users under the age of 15 may provide us with their personal data only with the consent of their parents or legal guardians.

1. Data controller

Your personal data is processed by Iskra, d.o.o. as the data controller. For questions regarding the processing of personal data, you can contact the controller using the following details:

ISKRA, elektro in sistemske rešitve, d.o.o.
Stegne 21
1000 Ljubljana
Email: info@iskra.eu

2. Types of data, purposes and legal basis

When using our web portal, we process certain personal data, as described below.

a) Newsletter

We process your data (name, surname, email address, and preferences) if you subscribe to our newsletter, based on your consent. We process the data to send you updates about our products and business operations.

To verify the authenticity of newsletter subscriptions, we use a double opt-in process. Subscription to the newsletter is only successful if the owner of the email address explicitly confirms the activation of the subscription by clicking a link in the confirmation email. For evidentiary purposes, we record the completion of each stage of the double opt-in process.

b) Contacting us

The web portal allows you to contact us, including contact forms.

To handle your inquiry, you may be asked to provide certain personal data, such as your name, email address, and other information, such as the subject of your inquiry and your message.

Personal data provided in this manner is used exclusively for the purposes for which you share it with us—primarily to process your inquiry. The data will not be used for other purposes or shared with third parties without your explicit consent. Exceptions include individuals and companies (e.g., local service providers) involved in communication and responding to your inquiry, where necessary for processing your request. If there is no legal obligation to retain the personal data, it will be deleted after processing your inquiry.

c) Secure and optimal web portal functionality

When using our web portal, we log certain data (e.g., IP address and log files) to ensure the secure and optimal operation of the web portal. We record this data based on our legitimate interest in providing a secure and user-friendly website.

Additionally, we use cookies and similar technologies to improve the usability of our web portal. Further details about cookies can be found in our Cookie Policy.

3. With whom do we share your personal data?

Iskra, d.o.o. generally does not share your personal data with third parties, except in the following cases:

  • Contractual partners: When Iskra, d.o.o. entrusts certain activities related to personal data processing to third parties, such as external IT service providers or legal and tax consultants. These contractors are obligated to process personal data exclusively in accordance with Iskra, d.o.o.’s instructions and to ensure appropriate data security.

  • Government authorities: When required by law.

  • Third parties involved in business transactions: In the context of planned mergers or divisions of Iskra, d.o.o., sales of shares, or sales of part or all of its assets, and similar transactions.

Iskra, d.o.o. does not transfer personal data outside the EU/EEA. In exceptional cases where processing is entrusted to organizations outside the EU/EEA, Iskra, d.o.o. ensures an equivalent level of data protection and compliance with all regulations related to data transfers to third countries. Further details about transfer mechanisms can be obtained upon request via the contact details provided above.

4. Is the provision of data voluntary or mandatory?

Providing most of the mentioned personal data is voluntary. However, failure to disclose personal data may limit or prevent the exercise of your rights.

5. How long do we retain your personal data?

Iskra, d.o.o. processes personal data for the duration necessary to achieve the purpose for which the data was collected or further processed. This period is typically determined by legally prescribed retention periods (generally 5 years).

If your personal data is processed based on your consent, Iskra, d.o.o. processes the data until the consent is revoked and for an additional 10 working days to record the revocation in the respective systems.

6. Information on automated decision-making

Automated decision-making or profiling is not performed.

7. Your rights

As an individual whose personal data is processed, you have the following rights under the GDPR:

  • Right of access: To obtain confirmation of whether your personal data is being processed and, if so, access to your personal data and certain information, such as the purposes of processing, types of personal data, and recipients.

  • Right to rectification: To have inaccurate personal data corrected.

  • Right to erasure: To have your personal data deleted if one of the prescribed reasons applies, such as when the personal data is no longer necessary for the purposes for which it was collected or if you withdraw consent.

  • Right to restrict processing: To restrict the processing of your personal data under certain conditions, such as contesting the accuracy of the data or if processing is unlawful.

  • Right to data portability: To receive your personal data in a structured, commonly used, and machine-readable format and to transfer it to another controller under certain conditions.

  • Right to object: To object to certain processing activities carried out based on our legitimate interests, for reasons related to your specific situation.

If the processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

You can exercise your rights by submitting a request to the address or email of the controller specified in Section 1 above. The request must include details about the right you wish to exercise.

You also have the right to lodge a complaint with the supervisory authority: Information Commissioner, Dunajska cesta 22, 1000 Ljubljana, Slovenia, email: gp.ip@ip-rs.si.

Iskra, d.o.o. reserves the right to amend this notice. The current version will always be available on the web portal.

With kind regards,
Iskra, d.o.o.