PRIVACY POLICY

The purpose of this Privacy Policy is to inform users (hereinafter also: an individual or you or data subject) of the website www.tangram-x.net or Tangram product (hereinafter: website) about the purposes and basis of the processing of personal data by Solviks, programske rešitve in poslovno svetovanje, d.o.o., registration number: 6805426000, e-mail: info@solve-x.net (hereinafter: Solviks d.o.o. or controller or we).

Solviks, d.o.o. is taking personal data rights very seriously and they will be protected in accordance with General Data Protection Regulation (hereinafter: GDPR) (Regulation (EU) 2016/679 of the European parliament and of the council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC) and Zakon o varstvu osebnih podatkov (eng.” Personal Data Protection Act”) (Uradni list RS, št. 163/22 – ZVOP - 2).

The controller of personal data is:
Solviks, programske rešitve in poslovno svetovanje; Počehova 59I, 2000 Maribor, Slovenia; registration number: 6805426000; e-mail: info@solve-x.net

PERSONAL DATA

Personal data means any information relating to an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Voluntarily provided personal data

Solviks, d.o.o. is processing the following personal data that you voluntarily provide:

• first name;
• surname;
• organization name;
• e-mail;
• other personal data that you provide.

First name, surname, organization name and e-mail are requested in registration process.

By submitting your personal data in registration process, you declare that you have read our Privacy Policy and are aware of the processing methods and legal bases of personal data processing. If you do not consent to the processing methods, do not provide us with your personal data.

We are not responsible for the accuracy of the information you enter in registration form.

Data generated automatically
We also collect data such as IP address, web requests, data sent in response to such requests, browser type, browser language, request timestamp and other anonymous statistical data involving the use of our website. This information alone cannot be used to identify or contact you.

Stripe online application
The personal data you provide in Stripe application is not processed by us and therefore we do not accept any responsibility. The personal data you provide in Stripe application is processed in accordance with their privacy policy, which you must agree to if you wish to use it.

PURPOSE OF PROCESSING AND BASES FOR DATA PROCESSING

Processing based on consent and regarding to performance of contract
Solviks d.o.o. process personal data on the basis of clear and unambiguous consent of the individuals concerned for the following purposes:

• registration process that is required for the use of Tangram product;
• protecting our Tangram product and services.

Processing is also necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

Processing based on legitimate interest

Solviks d.o.o. process personal data on the basis of legitimate interest for the following purposes:

• respond to your inquiry about products and/or services;
• measuring satisfaction with the purchase via e-mail communication;
• e-mail communication based on your start, change or canceling of the online buying process;
• website/product optimization;
• ensuring the security of IT systems;
• prevent abuse and/or fraud.

Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Processing on the basis of the law
Processing shall be lawful also if it is necessary for compliance with a legal obligation to which the controller is subject.

TRANSFER OF PERSONAL DATA TO THIRD PARTIES OR TO THIRD COUNTRIES

Solviks d.o.o. shall not sale your personal data. Solviks d.o.o. may share your personal data:

• with third parties based on your consent;
• with business partners and contractors who provide services on our behalf or who we use to support our business.

We may report to law enforcement authorities any activity that we reasonably believe is illegal or that we reasonably believe may assist in investigating prosecutions against illegal activity. In addition, we reserve the right to share your personal data with law enforcement authorities if we determine, in our sole discretion, that you are either violating the rules of our Privacy Policy or that we can protect the rights, property or safety of us or another person. We disclose the personal data that law enforcement authorities request on a lawful basis.

We may disclose your personal information when required to do so by law, regulations or official orders to protect the safety of any person from death or serious personal injury, to prevent fraud or misuse of products and/or services or users, or to protect our proprietary rights. We will disclose personal data to government officials or third parties on the basis of court judgments or decisions of administrative authorities or other binding acts.

We do not transfer the collected personal data to third countries. Your data is only processed within an area within the European Union. In the event that your personal data is transferred to third countries, you will be informed.

CONSENT OF MINOR

We do not offer products and services to children, or do not knowingly collect or request personal information from children under the age of 15.

We will not retain any communications that we reasonably and reasonably believe are coming from a child under the age of 15.

AUTOMATED DECISION MAKING AND PROFILING

An individual's personal data is not subject to automated decision-making, nor is it subject to profiling.

RIGHTS OF USERS

You can update or remove or unsubscribe your personal information at any time.

You can update your first name and surname that is provided by you in registration process in Manage settings. Any other update (organization name or e-mail) is possible via sending e-mail to info@solve-x.net.

Cancelling/unsubscribing is possible through the web interface and the user can arrange this himself. If you want to completely delete your personal data, you must report this to the e-mail info@solve-x.net.

It can take up to 10 days for a request you submit to info@solve-x.net to be processed. After this time, the request will be considered and, if it meets the conditions, in force.

Under the regulations of GDPR the users have a right to:

• to obtain information about processing of personal data at the time Solviks, d.o.o starts to collect data – GDPR, Article 13, 14 (users are informed about processing of personal data when agreeing with this privacy policy);
• to obtain access to the personal data held – GDPR, Article 15 (Right of access by the data subject - the data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data);
• for incorrect, inaccurate or incomplete personal data to be corrected – GDPR, Article 16 (Right to rectification - the data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her.);
• to request that personal data be erased when it is no longer needed or if processing is unlawful – GDPR, Article 17 (“Right to be forgotten“ - the data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay when the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, the data subject withdraws consent on which the processing is based, the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2), the personal data have been unlawfully processed and when the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.);
• to request the restriction or suppression of personal data – GDPR, Article 18 (Right to restriction of processing - the data subject shall have the right to obtain from the controller restriction of processing when the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data, the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead, the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims, the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.)
• to receive personal data in a machine-readable format (data in a data format that can be automatically read and processed by a computer) and sent it to another controller – GDPR, Article 20 (Right to data portability);
• to object – GDPR, Article 21(Right to object - the data subject has the right, on grounds relating to his or her particular situation, to object at any time to the processing of personal data if it is based on legitimate interests pursued by us or by a third party. We cease to process personal data unless we demonstrate compelling reasons for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of the legal claims.)

Envisaged period for which the personal data will be stored is for as long as it is necessary to achieve the purpose for which the personal data were collected and further processed. In the event that the applicable sectorial legislation (e.g. tax legislation) provides for mandatory deadlines for the storage of personal data, we delete personal data after the expiration of the statutory period.

Solviks, d.o.o. will comply with requests mentioned above and send via e-mail to info@solve-x.net without undue delay and at least within 10 days of receipt of the request.

In the event of a personal data breach, we will notify the competent supervisory authority, except where the breach is likely not to endanger the rights and freedoms of individuals.

If personal data subject believes that his/her rights or regulations on personal data protection have been violated, he/she may complain to the competent state authority: Information Commissioner of the Republic of Slovenia (Dunajska cesta 22, 1000 Ljubljana, telephone: 01 230 97 30, e-mail: gp.ip@ip-rs.si).

Solviks, d.o.o. will charge a reasonable fee for the administrative costs of complying with the request if it is manifestly unfounded or excessive or if individuals request additional copies of their personal data.

We reserve the right, in our sole discretion, to update, modify or replace any part of the Privacy Policy by posting an update or change on the website without prior notice. Any change applies from the date of publication of the amended Privacy Policy on our website.

Published on 06.03.2024