Privacy policy

1. Data controller

The data controller is PE UBON THAI, VRISK d.o.o., Celovška cesta 199, 1000 Ljubljana, tax number 81411669 (hereinafter: the controller). For questions regarding personal data protection, please contact us at +386 41 999 980.

2. Personal data collected

The controller collects the following personal data:

• Contact details: first name, last name, phone number, email address (for bookings and enquiries);
• Health information: details of health conditions, allergies or contraindications voluntarily provided by the client before or during the service;
• Service data: date and time of appointment, type of service, notes;
• Technical data: IP address, browser type, time of website visit (via cookies).

3. Purpose and legal basis for processing

4. Data retention

We retain personal data only for as long as necessary to fulfil the purpose of collection:

• Booking and client data: 5 years after the last service;
• Accounting records: 10 years in accordance with accounting legislation;
• Marketing data: until withdrawal of consent;
• Local browser settings (chosen language): stored in your browser until you delete them yourself.

5. Sharing data with third parties

We do not sell, rent or trade your personal data. We share data with third parties only in the following cases:

• Accounting service for accounting and tax reporting purposes;
• IT service providers and website hosting (under data processing agreements);
• Competent public authorities based on legal obligations.

All processors are bound by data processing agreements and must ensure an appropriate level of protection.

6. Cookies

This website does not use analytics or advertising cookies and does not track your visit. We do not use Google Analytics or any similar visitor-measurement tool.

The site does not store any data in your browser: the language is set by the page address (English pages are under /en/), so there is no choice to remember.

7. Your rights

Under GDPR you have the following rights regarding your personal data:

• Right of access: the right to view your personal data that we process;
• Right to rectification: the right to correct inaccurate or incomplete data;
• Right to erasure: the right to delete data when it is no longer needed;
• Right to restriction of processing: the right to temporarily restrict processing;
• Right to data portability: the right to receive data in a machine-readable format;
• Right to object: the right to object to processing based on legitimate interests;
• Right to withdraw consent: at any time without giving a reason.

To exercise your rights, contact us at +386 41 999 980. We will respond to your request within one month.

8. Complaint to the supervisory authority

If you believe that the processing of your personal data violates GDPR, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (ip-rs.si), Dunajska cesta 22, 1000 Ljubljana.

9. Data security

The controller takes appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction. Access to data is restricted to authorised persons bound by professional confidentiality.

10. Changes to this privacy policy

The controller reserves the right to amend this privacy policy. We will notify you of material changes via the website. We recommend that you review this policy regularly.