PRIVACY POLICY

DATA PROTECTION RULES USING THE WEB PLATFORM

1 INTRODUCTION

We work with your data legally, honestly, safely and transparently for you.
We are aware of your responsibility because you have entrusted us with your personal information.
Therefore, below is all the key information regarding data processing
our obligations and your rights in accordance with the General Protection Regulation
Data controller (English abbreviation: GDPR). The controller of personal data is the company ALNAIR doo, Begunje na Gorenjskem 81A, 4275 Begunje na Gorenjskem, Slovenia. For all questions we are available by phone (+38669761177) or e-mail (mail.dreamgarden@gmail.com).

You have trusted your personal information:

• ALNAIR doo

• MS: 6600832000

• DS: SI51129957

• Begunje na Gorenjskem 81A, 4275, Begunje na Gorenjskem

• +38669761177

• mail.dreamgarden@gmail.com

2 TYPES OF DATA

Our company, as an online retailer, processes the data for the management of our online store:

• about users (username, password);

• about the device from which you use online stores (eg device information, operating system, hardware and software versions, language of use, etc.);

• about your interests and purchases (information on products, date and time of purchase, amount, method of payment, issued invoice, etc.);

• log data (eg connection date and time, internet protocols, error or crash data).

In order to provide you with a friendly and useful visit to our websites and the use of our online services experience, we process various types of data.

We collect content, communication and other information that you provide or publish while using our website. We also collect data:

• about the device you are accessing (eg operating system, hardware and software versions, language of use);

• about the network and connection you are accessing (eg IP number, language, time zone);

• additional data from devices, if you allow us to do so (eg GPS and related location, camera, photos, contacts);

• log data (eg date and time of visit, internet protocols, error or crash data).

When you are not logged in with your user account, we collect and store information marked with unique identifiers (such as cookies) that are associated with the device or browser you are using. This makes it easier to maintain settings during browsing sessions.

When you are logged in with your username and account, we collect and store information along with other information from your user account and protect it as personal information.

As online store operators, we process data on users, purchases and transactions. When we visit our websites and use the online services, we collect information about your visit.

When you are not logged in, we collect and store them with a unique identifier (eg a cookie).

Once you are logged in, we associate them with your name and protect them as personal information.

3 PURPOSES AND USE OF DATA PROCESSING

We process personal data for the following purposes and in accordance with your consent to the revocation or our legitimate interests of the controller or third parties for a specified period of time when necessary.

We process users' personal data for the purpose of our contractual relationship, to ensure friendly, secure and efficient online shopping, and to secure orders and payments.

We process data to provide, maintain and develop our websites and services and to ensure the information security of users, services and infrastructure. We also process data for the purpose of friendly and useful visits to our websites and services (eg content tailored to you).

You express your consent for those purposes that are not part of your legal obligations or contractual relationship in various ways: by visiting our website, by confirming or rejecting cookies, and the like. You can change or revoke your consent at any time by using our website or by sending a message to our contacts (see the first section).

We process your data as a controller. In accordance with the applicable regulations, we may hire contractual processors (our subcontractors) for certain services, for which we fully guarantee. We do not pass on the data to other operators. We process data on infrastructure physically located in the territory of the European Union, where strict European regulations on personal data protection apply, including the General Data Protection Regulation (GDPR). We do not transfer data to third countries (countries outside the European Union) or international organizations.

We may also process your data if the processing is necessary for legitimate interests that we pursue as a controller or a third party, except where such interests are outweighed by your interests or fundamental rights and freedoms that require the protection of personal data. Processing time is related to statutory deadlines (eg limitation periods and the like).

As a manager, we operate digitally, but all decisions regarding contractual relationships and other decisions with legal or related effects are made by our employees with appropriate information support. We take comprehensive measures to protect your rights and freedoms and legitimate interests. You always have at least the right to the personal intervention of the manager, to express your own position and to challenge the decision.

We process data for friendly, useful and secure online shopping.

We also process data for a friendly, useful and secure visit to our websites and content.

We process data based on your consent, which you can revoke at any time.

We process your data on the territory of the European Union and in cooperation with reliable contractors.

We also process data for legitimate interests over and over others if your interests or fundamental rights and freedoms are not more important.

Although we do business very digitally, your interlocutor will never be machines, but our employees, who are always available for all questions and requests.

4 TRANSPARENCY OF PROCESSING AND YOUR RIGHTS

We strive to provide you with all the necessary information about the processing of your data and about all your rights and our obligations in this area. Much of the data protection decisions are left to each individual. We are different people and so are our privacy decisions. Therefore, we will handle your information exactly as you wish. You can edit your selection in your user profile.

The Constitution of the Republic of Slovenia and the applicable European and Slovenian regulations guarantee you a number of rights regarding privacy and protection of personal data, including the following:

• the right to be informed about the processing of your personal data (the text you read is part of the exercise of this right of yours);

• the right of access to personal data means that you have the right to obtain confirmation from us as the controller whether personal data are processed in relation to you and, where applicable, access to this personal data and additional information (purposes of processing, data types, data users , the existence of rights and possibilities of appeal, sources of data, possible automated decision-making or special profiling);

• the right to rectification means that you have the right to obtain, as the controller, to correct inaccurate personal data concerning you without undue delay; taking into account the purposes of processing, you also have the right to supplement incomplete personal data, including the submission of a supplementary statement;

• The right to erasure, also called the "right to be forgotten", means that you have the right to have us, as the controller, delete personal data concerning you without undue delay if the prescribed conditions are met (processing is no longer required, revocation of consent and no other legal basis). , substantiated objection, illegal processing, deletion required by applicable regulations and the like);

• the right to restrict processing means the right to achieve that as a controller we restrict the processing of your data if you dispute the accuracy of the data or if you have lodged an objection or if the processing is illegal or if the processing is no longer necessary for the controller. claims;

• the right of transferability means the right to receive personal data concerning you provided to us as a controller in a structured, commonly used and machine-readable form, and the right to pass this data on to another controller without hindering you in any way. (applies to data that we process automatically on the basis of consent or contractual relationship);

• the right to object means that you can object to certain types of processing of your personal data (public interests, legitimate interests of the controller, marketing purposes) at any time and we must prove legitimate interests for processing or stop processing (always in case of marketing);

• Automatic processing and profiling rights means that you are not subject to a decision based solely on automated processing, including profiling, which has legal or similar effects on you, unless absolutely necessary, prescribed or not. agree.

If you believe that your rights or regulations on personal data protection have been violated, you can complain to the competent state authority. In Slovenia, this is the Information Commissioner of the Republic of Slovenia (Zaloška 59, 1000 Ljubljana, telephone: 01 230 97 30, fax: 01 230 97 78, e-mail: gp.ip@ip-rs.si).

We provide you with information. We are not hiding anything. We consider your choice. We care about your rights.

Right to information -

information for you

Right of access - at any time

you can claim all your own

data

The right to correction - on yours

we will correct the request

incorrect information

Right of deletion - in certain

cases you may request deletion

data (right to forget)

Right to limit processing -

in certain cases it may

request that data

we feed but do not process

Right of portability -

you can request an export at any time

their data (for transfer

elsewhere)

The right to contract - at any time

you can ask us to prove it

why we process yours

data

The right to automatic

processing - you can always talk in person and you are not

need to quarrel with the computer.

You can report violations

To the Information Commissioner

RS

5 COOKIES

USE OF WEB COOKIES ON OUR WEBSITES
A cookie is a short text that a website visits sends to a browser. This makes it easier for the site to remember the settings you have selected as a user (eg language), which greatly facilitates your further visits to the site. Cookies therefore simplify web browsing and enable a faster and easier user experience. They are used by most websites.

Our website uses only mandatory web cookies without which the website cannot function as you would like. Therefore, its use is mandatory if, for example, you want to continue with the purchase.

WHICH COOKIES DOES OUR WEBSITE USE?

PHPSESSID - User session identifier. Required for authorization,
storing the contents of the shopping cart. It does not feed on its own
no personal information and is for file matching only
browsers stored on the server;

hide_popup - popup cookie permission permission notice,
g_utm_term - A search term that a user entered into Google before
received ad, gclid - Google Ad Campaign User ID
utm_campaign - the name of the user's Google advertising campaign
used, _ga and _gid - Google Analytics cookies,
_fbp - cookies with this prefix are created by Faceebok.

All cookies are used for business purposes only and are not stored
no personal data and are not transferred to third parties.

COOKIE SETTINGS
All browsers allow you to control cookies. We have prepared for you
instructions on how to access cookie settings in the selected search engine:
Microsoft Internet Explorer: Start button> Internet Explorer> Tools>
Internet Options> Privacy> Settings
Mozilla Firefox: Firefox menu> Preferences> Privacy
Google Chrome: Chrome menu> Settings> Show advanced settings>
Privacy> Content settings> Cookies 8h
Apple Safari: Safari> Preferences> Security
Opera: Opera> Preferences> Advanced> Network

If you decide to delete or block cookies, it may happen
some websites or their features will not work properly either
equally effective. You will also receive a notification about each visit
cookies.
In case you upgrade your browser or device with a new version, it is
edit the necessary cookie settings again.
More information on the legislation and the use of cookies can also be found on the website:
https://www.ip-rs.si/varstvo-osebnih-podatkov/informacijske-tehnologije-in-osebni-podatki/piskotki-odgovori-na-pogosta-vprasanja/

If you believe that your rights or regulations on personal data protection have been violated
you can appeal to the competent state authority. This is in Slovenia
Information Commissioner of the Republic of Slovenia (Zaloška 59, 1000 Ljubljana, telephone: 01 230

97 30, fax: 01 230 97 78, e-mail: gp.ip@ip-rs.si).

The rules are valid from 01.09.2021.