Privacy Policy

The controller of personal data is:

When you visit the website, we may process technical data that is necessary for the correct, secure and reliable operation of the website.

If a visitor sends an enquiry through the contact form, we process the data entered in the form. The mandatory fields are:

• –full name,
• –email address,
• –phone number,
• –location type.

The optional fields are:

• –company or organisation name,
• –town or location address,
• –estimated number of daily visitors,
• –the content of the message or other data the user provides voluntarily.

We collect the mandatory data because SHAKE SPOT d.o.o. needs it to identify and contact the person sending the enquiry, and to assess the type of potential location relevant to the enquiry or possible cooperation. The company or organisation name, the location address and other optional data are not necessary for handling the enquiry, but they can help us prepare a better offer.

We ask users not to submit personal data through the contact form that is not necessary for handling their enquiry.

Personal data submitted through the contact form, by email or through other communication channels is processed for the following purposes:

• –receiving and responding to an enquiry,
• –contacting the person in relation to their enquiry,
• –assessing the suitability of a potential location for a ShakeSpot machine,
• –communication regarding potential cooperation,
• –preparing an offer or taking steps requested by the individual prior to entering into a possible contract,
• –establishing and managing a business relationship, if cooperation is subsequently agreed.

The legal basis for processing depends on the purpose: for enquiries concerning potential cooperation or steps taken prior to entering into a contract, processing may be based on Article 6(1)(b) GDPR (steps taken at the request of the individual prior to entering into a contract). Where processing is necessary for legitimate business, communication, security or technical purposes, for example to ensure the correct and secure operation of the website, the basis may be Article 6(1)(f) GDPR, provided that the interests, rights and freedoms of the individual do not override those legitimate interests. Where processing is required by law, Article 6(1)(c) GDPR applies.

We retain data related to enquiries for as long as is necessary to handle the enquiry and for any subsequent communication. If an enquiry does not lead to business cooperation, we do not retain the data longer than is necessary for the purpose of the communication, unless another legal basis for further retention exists.

If a contract or business cooperation is concluded, data related to the contractual relationship and business documentation is retained for as long as is necessary to perform the contract and in accordance with statutory retention periods.

Data may also be retained for a longer period where this is necessary for the establishment, exercise or defence of legal claims.

The controller of personal data is SHAKE SPOT d.o.o. We do not sell personal data.

For the operation of the website, the storage of enquiries, the sending of notifications and other technical services, external contractual processors such as providers of hosting, web infrastructure, email and other technical services may access individual personal data within the scope of their contractual services and exclusively on the instructions of the controller.

Personal data is also disclosed to other persons or to the competent authorities where required by law.

If personal data were to be transferred outside the European Economic Area in the future, this would be carried out only where an appropriate legal basis and safeguards exist in accordance with the GDPR.

We use appropriate technical and organisational measures to protect personal data, aimed at preventing unauthorised access, loss, alteration, disclosure or other unlawful processing of personal data.

Under the conditions set out in applicable legislation, an individual has the right to request:

• –access to their personal data,
• –rectification of inaccurate or incomplete data,
• –erasure of personal data,
• –restriction of processing,
• –data portability,
• –objection to processing,
• –withdrawal of consent, where processing is based on consent.

To exercise these rights, an individual may write to info.shakespot@gmail.com.

An individual also has the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia if they believe that the processing of their personal data is not in accordance with applicable regulations.

We may update this privacy policy from time to time due to changes in legislation, our services or the way the website operates.

The current version is always published on the shakespot.si website.