1. Controller of Personal Data

The controller of the personal data collected through this website is:
ŠTEMPIHAR d.o.o.
Poslovna cona A 12, 4208 Šenčur
Registration number: 5770904 | VAT ID: SI77779517
Phone: +386 (0)4 201 60 60 | Email: info@stempihar-trans.si

For any questions regarding personal data protection, you can contact us at info@stempihar-trans.si.

2. What personal data we collect and why

We process personal data lawfully, fairly, and transparently, in accordance with the General Data Protection Regulation (GDPR), the Personal Data Protection Act (ZVOP-2), and the Electronic Communications Act (ZEKom-2).

2.1 Contact form and inquiries
When you send us a message via the website form or to our email address, we process the data you provide (first and last name, company, email address, phone number, and message content). We use this data solely to respond to you or prepare an offer.

Legal basis: performance of steps at your request prior to entering into a contract and our legitimate interest in responding to inquiries (Article 6(1)(b) and (f) GDPR).
Retention period: until the inquiry is resolved and for a maximum of 2 years after the last contact; if a business relationship arises from the communication, the data is retained in accordance with contractual and legal obligations.

2.2 Conclusion and performance of contracts
If you enter into a contract with us or are a contact person of our business partner, we process the data necessary to perform the service, issue invoices, and communicate.

Legal basis: performance of a contract and compliance with our legal obligations, particularly tax and accounting requirements (Article 6(1)(b) and (c) GDPR).
Retention period: accounting documents are kept for 10 years in accordance with tax legislation; other contractual documentation is retained for up to 5 years after termination of the contract.

2.3 Job applicants
If you submit an application for a job posting or an unsolicited application, we process the data from your application and CV for the purpose of carrying out the recruitment process.

Legal basis: pre-contractual measures at your request (Article 6(1)(b) GDPR), and for the candidate pool your consent (Article 6(1)(a) GDPR).
Retention period: up to 6 months after the conclusion of the recruitment process, or in the case of consent for inclusion in the candidate pool for future job postings, up to 2 years.

3. Recipients of your data

We do not sell your personal data or share it with third parties for their own purposes. Access to the data may be granted to:
• our employees within the scope of their job duties;
• our contracted processors who provide services on our behalf (accounting service provider, web hosting provider, website maintenance provider) and have concluded a written data processing agreement with us;
• business partners and subcontractors where necessary for the performance of services (e.g. transport subcontractors, insurance companies);
• competent public authorities where required by law.

We process personal data within the European Union. If, in a specific case, data is transferred to a third country (e.g. via cloud service providers), we ensure appropriate safeguards in accordance with Chapter V of the GDPR, in particular European Commission adequacy decisions or standard contractual clauses.

4. Your rights

In relation to your personal data, you have the following rights:
• the right of access to your data;
• the right to rectification of inaccurate data or completion of incomplete data;
• the right to erasure (“right to be forgotten”);
• the right to restriction of processing;
• the right to data portability;
• the right to object to processing based on legitimate interest;
• the right to withdraw consent where processing is based on consent, without affecting the lawfulness of processing before its withdrawal.

Withdrawal of consent: where processing is based on your consent, you may withdraw it at any time by email to info@stempihar-trans.si or by post to our address. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal. After withdrawal, we will no longer process your data for that purpose and will delete it, unless there is another legal basis for its retention.

Exercising your rights: send your request by email to info@stempihar-trans.si or by post to our address. We will respond without undue delay, and no later than one month from receipt of the request.

Complaint: if you believe that we are violating personal data protection regulations, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, +386 1 230 97 30, www.ip-rs.si).

5. Cookies

What are cookies
Cookies are small text files that a website stores in your browser when you visit it. On subsequent visits, they enable recognition of your device and retention of settings, thereby improving website functionality and user experience. In addition to traditional cookies, this policy also refers to similar tracking technologies such as tracking pixels and local storage.

Types of cookies we use
• Strictly necessary cookies ensure the basic functioning of the website and are used without your consent.
• Analytical cookies help us understand how visitors use the website so we can improve it.
• Marketing cookies are used to display more relevant content and measure the effectiveness of advertising.

Consent and withdrawal
For analytical and marketing cookies, we obtain your consent in advance via a cookie management banner upon visiting the website. You may withdraw or modify your consent at any time by clicking the “Cookie settings” link in the website footer.

Managing cookies in the browser
You can also manage cookies in your web browser settings, where you can accept or reject cookies, delete them, or set your browser to notify you before a cookie is stored. The procedure varies depending on the browser—instructions are usually available in the browser’s help section. Disabling strictly necessary cookies may affect the proper functioning of the website.

6. Security and policy changes

We protect your personal data with appropriate technical and organizational measures against unauthorized access, loss, or misuse.

This privacy policy may be updated from time to time. The current version is always published on our website with the effective date indicated.