Privacy Policy
Thank you for visiting our web pages. The protection of your data is important to us! Therefore, besides providing high-quality content, we also give you the possibility to claim your rights and decide about the use of your personal data. This policy describes how the controller may collect, store, or process the personal data submitted and collected by their users.
The controller who collects your personal data is
Oduduwa Europe TM is a trademark of AKCS d.o.o.. The controller who collects your personal data is the company AKCS d.o.o., Ulica Gorenjskega odreda 6, 4000 Kranj, Slovenia. The Data Protection Officer for personal data can be reached at +38641810221 or via e-mail at info@akcs.si. As a receiver or user, you hereby give my permission to the controller to collect, process and store my submitted personal data in accordance with applicable laws on Personal Data Protection.
Categories of Personal Data that are being collected
‘Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Information collected by the controller is as follows:
- Your e-mail address;
- Your name and surname as well as title or gender for the purpose of creating personalized emails;
- The name of your company;
- Your postal address;
- Your mobile phone number;
- Your past inquiries, purchases, receipts, additional requests.
Purposes and legal bases for data processing
The data controller collects and processes personal data on the following legal grounds:
- The processing is necessary to fulfil a legal obligation applicable to the controller;
- The processing is necessary for the fulfilment of a contract to which the data subject is a contracting party, or for the implementation of measures at the request of such an individual prior to the conclusion of the contract;
- The processing is necessary due to the legitimate interests pursued by the controller or a third party;
- The data subject consents to the processing of his or her personal data for one or more specific purposes;
- The processing is necessary to protect the vital interests of the data subject or of another natural person.
AKCS d.o.o. – the controller – will use the data acquired for the following purposes only:
- For communication purposes regarding your subscription or (pre)contractual relationship;
- To organize prize competitions;
- To notify and send you newsletters, articles, event notifications by email;
- For direct marketing and sending offers via email and showing on our website;
- For showing personalized adds on advertising platforms (Google and Facebook etc.).
Notifying Individuals via Email, e.g., E-newsletters
Based on the performance of lawful activities, the controller can inform clients, customers, and users of its services about its services, events, training, offers, and other content via their email address. Individuals can at any time request the termination of such communication and processing of personal data and withdraw from receiving messages through the unsubscribe link in the received message or by sending a request via email or regular mail to the controller’s address.
The legal grounds for data processing are legitimate interest and consent. Data will be processed until the message receipt is withdrawn or until the purpose of processing is fulfilled. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Execution of a Concluded Contract
In cases where an individual concludes a contract with the controller, this represents the legal basis for the processing of personal data. The controller is thus authorized to process personal data for the conclusion and performance of the contract, such as the sale of goods and services, preparation of offers, participation in various programs, etc. If the individual does not provide personal data, the controller cannot conclude the contract, nor can the controller perform the service or deliver goods or other products in accordance with the concluded contract, as it lacks the necessary data for execution. On this basis, the controller processes only and exclusively those personal data necessary for the conclusion and proper performance of contractual obligations.
The legal basis for data processing is the contract. The retention period is until the purpose of the contract is fulfilled or up to 6 years after the termination of the contract, except in cases where there is a dispute between the individual and the controller regarding the contract. In such cases, the controller retains the data for 10 years after the final decision of the court, arbitration, or judicial settlement or, if there was no legal dispute, 6 years from the date of peaceful resolution of the dispute.
Legitimate Interest
The controller can also process personal data based on a legitimate interest, which it pursues. This is not permissible where such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require the protection of personal data. In the case of using legitimate interest, the controller conducts an assessment in accordance with the legislation. Processing of personal data of individuals for direct marketing purposes is considered to be carried out in the legitimate interest.
The controller may process personal data of individuals, collected from publicly available sources or in the course of lawful business activities, for the purposes of offering goods, services, employment, informing about benefits, events, etc. For these purposes, the controller may use ordinary mail, phone calls, email, and other telecommunications means. For direct marketing purposes, the controller may process the following personal data of individuals: name and surname, permanent or temporary residence address, phone number, and email address. The controller can process these personal data for direct marketing purposes even without the explicit consent of the individual. The individual can at any time request the cessation of such communication and processing of personal data and withdraw from receiving messages through the unsubscribe link in the received message or by sending a request via email or regular mail to the controller’s address.
The legal basis for data processing is the legitimate interest. Data will be processed until the withdrawal of message receipt or until the purpose of processing is fulfilled. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
Processing Based on Consent
If the controller does not have a legal basis demonstrated on the basis of law, contractual obligation, legitimate interest, or protection of the individual’s life, they may request consent from the individual. Thus, the controller may process certain personal data of the individual for the following purposes when the individual gives consent:
- Residential address and email address (for the purposes of informing and communication);
- Photographs, video recordings, and other content related to the individual (e.g., publishing pictures of individuals on the website for the purposes of documenting activities and informing the public about the controller’s work and events);
- Other purposes agreed upon with the individual’s consent.
If the individual consents to the processing of personal data and later wishes to withdraw this consent, they can request the cessation of personal data processing by sending a request via email or regular mail to the controller’s address. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Upon receipt of the withdrawal or deletion request, the data will be deleted within 15 days at the latest. The controller may delete these data before the withdrawal when the purpose of personal data processing has been achieved or if required by law.
Exceptionally, the controller may refuse a deletion request for reasons set out in the General Regulation in cases of exercising the right to freedom of expression and information, compliance with a legal obligation to process, reasons of public interest in the area of public health, purposes of archiving in the public interest, scientific or historical research purposes, statistical purposes, execution, or defense of legal claims.
The legal basis for data processing is consent. Data will be processed until withdrawal of consent or until the purpose of processing is fulfilled. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Protection of Vital Interests of the Individual
The controller can process the personal data of the individual if it is necessary to protect their vital interests. In urgent cases, the controller can search for the individual’s personal document, check whether this person exists in its database, review their medical history, or contact their relatives, for which the controller does not need the individual’s consent. This applies when it is necessary to protect the individual’s vital interests.
Data Retention Period
The controller will retain personal data only as long as necessary to achieve the purpose for which the personal data were collected and processed. If the controller processes data based on the law, they will retain it for the period prescribed by the law. Some data is retained during cooperation with the controller, while some data must be kept permanently. Personal data processed by the controller based on a contractual relationship with the individual will be retained for the period necessary to execute the contract and 6 years after its termination, except in cases where there is a dispute between the individual and the controller regarding the contract. In such cases, the controller retains the data for 10 years after the final decision of the court, arbitration, or judicial settlement or, if there was no legal dispute, 6 years from the date of peaceful resolution of the dispute. Personal data processed by the controller based on the individual’s consent or legitimate interest will be retained until the withdrawal of consent or request for deletion of data. Upon receipt of the withdrawal or deletion request, the data will be deleted without unnecessary delay. The controller can also delete these data before withdrawal when the purpose of personal data processing has been achieved or if required by law. In the case of exercising individual rights, the controller retains the personal data of that individual until the matter is finally resolved, and after final resolution, in accordance with the final decision in the matter.
Exceptionally, the controller may refuse a deletion request for reasons such as: exercising the right to freedom of expression and information, compliance with a legal obligation to process, reasons of public interest in the area of public health, purposes of archiving in the public interest, scientific or historical research purposes, statistical purposes, execution, or defense of legal claims. After the retention period, the controller must effectively and permanently delete or anonymize personal data so that they can no longer be linked to a specific individual.
Personal Data Protection
The controller will protect the data acquired in accordance with applicable laws on Personal Data Protection and in accordance with their internal acts based on the law. The controller will ensure appropriate organizational and technical protection measures. The data acquired by the controller shall not in any way be submitted or revealed to third parties. AKCS d.o.o. takes appropriate technical and organizational measures to ensure the protection of personal data. However, no one can guarantee 100% security in the transmission of data over the internet.
User Rights
In accordance with the provisions of the EU General Data Protection Regulation (GDPR) the controller must in case of a request made by the user:
- Confirm if their data is being processed or not and enable them to see their individual personal data;
- Submit a list of their individual personal data that are being stored;
- Enable the user to correct or add their personal data;
- Enable deleting a part of or all their personal data;
- Enable the free flow of personal data to another supplier of similar services;
- Enable withdrawal of their consent to the processing of a part or all their personal data.
Your request to withdraw your consent will be accepted and the processing of your personal data stopped by the controller no later than 15 days after receiving your withdrawal. Any individual, if he believes that his rights regarding the protection of his personal data have been violated in any way by the controller, can file a complaint with the supervisory authority (Information Commissioner of the Republic of Slovenia) at any time.
Information Commissioner, Dunajska cesta 22, 1000 Ljubljana, Slovenia, T: 00 386 1 230 97 30, E-mail: gp.ip@ip-rs.si.
Every user has the possibility to send an email with a request to unsubscribe by replying to any email received.
The Processors and Storage Area
The personal data collected is sent by the contractor also to their contractual Processors that may process the data in the course of instructions and permissions given by the controller that is in the written contractual form. The contract between the collector and processor binds the processor to ensure an appropriate level of personal data protection in CRM, email marketing systems and systems for marketing automatization. The personal data collections are kept in the area of EU and are not sent to third countries.
The Controller may send personal data to digital advertising platforms (Google, Facebook, LinkedIn etc.) and use their cookies that enable the Controller to form more detailed segments, showing targeted adds and remarketing. By this, the user will be able to receive more relevant adds through these platforms by the Controller. In this case, a data export to a contractual processor outside EU may occur.
Relations with contract processors from the USA are regulated on the basis of standard contractual clauses (model contracts adopted by the European Commission) and/or binding business rules (adopted by the operator and approved by supervisory authorities in the EU).
Legal Notice
The entire graphic design of the website, including all graphic elements and all content published on www.oduduwa-europe.com and www.oduduwaeuropeshop.com, is owned by the company AKCS d.o.o. and subject to copyright protection or another form of intellectual property protection. Without a permission from the company AKCS d.o.o., the content must not be copied, disseminated, or distributed in any other way. It is forbidden to use the content in any form, including, but not limited to, alteration, copying, and publication of any content in its entirety or in parts, unless the controller issues a written authorization.
The company AKCS d.o.o. will make its best efforts to provide accurate and up-to-date information on the website; however, the user should take note of the fact that all texts are for information purposes only and the company does not guarantee their accuracy or up-to-dateness nor does it assume any liability in this regard. All users use the published content on their own responsibility. The company AKCS d.o.o. shall not be held responsible for any potential issues related to website functionality. AKCS d.o.o. reserves the right to potential errors in terms of the content published on www.oduduwa-europe.com and www.oduduwaeuropeshop.com and the right to alter or remove the content of the website at any time regardless of the reason and without prior notice.
AKCS d. o. o.
Ulica Gorenjskega odreda 6
4000 Kranj
Slovenija
EU
Kranj, September 2024