NOTICE ON THE PROCESSING OF PERSONAL DATA


This notice applies to the processing of personal data carried out by Mercator-Emba, Proizvodnja hrane, d.o.o., 1370 Logatec, Tržaška cesta 2C, as the personal data controller. (hereinafter: the Company as the controller of personal data)


I. What personal data do we process about you and for what purpose:


The Company processes personal data for the following purposes:


a) for the purpose of concluding and performing contracts (e.g. with business partners, suppliers, etc.), for the delivery of goods, for administrative purposes, e.g. for communication, sending invoices or payments, identifying business partners and ultimate beneficial owners of business partners, communications prior to the conclusion of the contract and during the contractual relationship, and for the purpose of monitoring sanctions (contact details, names of legal representatives and beneficial owners, payment details)


b) for the purpose of controlling entry and exit into/out of the company's business premises, records of visitors and protection of property and persons, video surveillance - (name and surname, data from an identification document) - on the basis of a legitimate interest


c) for the purpose of recruiting and selecting current and future candidates for a position with the company (name and surname, personal identification number, contact details, data on work experience, education and other data from the CV of the job candidate).


d) Website visitor – based on legitimate interest


e) former employee (name and surname, tax number, data recorded in accordance with legal regulations) – for compliance purposes


If your personal data is collected on the basis of a legitimate interest, you have the right to object to this processing. In this case, the Company, as the controller, may no longer process your personal data, unless it proves that there are compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.


II. Who has access to your personal data


Access to the personal data of data subjects may be granted to employees of the Company who have limited rights to access and process data for the purpose of performing the tasks of their workplace and who are obliged to maintain the confidentiality of personal data and to comply with privacy notices, policies, procedures and other internal acts and contractual obligations of the Company. To the extent necessary and permitted by law, to achieve the purposes for which the personal data was collected and/or processed, the Company may share it with third party recipients, such as:


a. service providers who provide us with certain services on the basis of special contracts, which may also include the processing of personal data of the company's business partners, e.g. providers of accounting, legal or information services, etc.

b. public authorities or privately owned legal entities, where the company is obliged to provide personal data of data subjects on the basis of a legal obligation or where it is necessary for the company to protect its rights and interests.

c. Related parties in accordance with legitimate interest, where justified


III. Your obligations


The data subject is responsible for the accuracy and updating of the personal data provided by the data subject to the Company. The data subject undertakes to inform the Company of any changes to personal data without undue delay.


IV. Your rights


Within the framework of the protection of personal data, data subjects have the following rights:

a. the right of access to their personal data, i.e. the right to request confirmation as to whether their personal data is being processed and, if that data is processed, the right to request access to the personal data being processed and information about the processing and a copy of the personal data being processed;

b. the right to rectification of inaccurate and incomplete data;

c. the right to erasure of personal data, in particular if such data are no longer necessary in relation to the purposes for which they were collected, if they have been unlawfully processed, if there is an obligation to delete them in order to comply with legal obligations or if you have withdrawn your consent;

d. the right to restriction of the processing of personal data;

e. the right to object to the processing of personal data;

f. the right to lodge a complaint with a supervisory authority.


The Company will take all measures to enable data subjects to exercise the above rights, but in certain cases the exercise of these rights may be limited or excluded, for example, if the exercise of any of the rights of data subjects would be contrary to the Company's legal obligation in an individual case.


V. Duration of processing


The data will be processed until the purpose of processing this data is fulfilled or as prescribed by internal acts on the retention of personal data or applicable legislation.


There is a possibility that the company will be obliged to permanently store certain personal data of data subjects, as specified in the general acts of the company and applicable regulations.


The Company will ensure accurate and up-to-date personal data of the data subject based on the data provided to the Company by the data subject.


After the expiration of the time necessary or prescribed for the processing of personal data, the Company will securely delete or destroy the personal data of the data subject.


VI. How we protect your personal data


The Company implements technical and security protection measures in accordance with accepted professional standards, in order to protect and ensure the confidentiality, integrity or availability of the processed personal data, to prevent unauthorized use or unauthorized access to personal data or to prevent personal data breaches (security incidents).


VII. Who to contact with questions about data protection


For any additional information, please contact the company by email at: info@mercator-emba.si


VIII. Amendment of notification and consolidated version


This notice is valid from 21.11.2025 onwards. In case of additions/changes, a new version of the notice will be published.