We work hard to ensure that your data is 100% secure with us. We store personal data in accordance with the provisions of the Personal Data Protection Act, and we use it exclusively to provide our services. However, you can always request the deletion of your data that we store, and we will immediately comply with this. If you want us to "forget" you, you can always unsubscribe with one click in an e-mail or SMS message. If you wish, we can also permanently delete your data, which you can request by sending a written message to the email address below. For more information regarding processing, please contact: info@kupi-hitro.si General The company PJU doo respects and protects your privacy and is the owner of the website kupi-hitro.si and the manager of personal data. This privacy statement applies to the following categories of individuals:

customers,

users of our website and potential customers,

our suppliers and business partners. We process personal data only on the basis of pre-defined, legal purposes and using the appropriate legal basis. You can read which purposes and legal bases we use for each group of individuals in the points below. We keep personal data only for as long as it is necessary to fulfill the processing purpose for which we collected the personal data. When we process personal data based on your consent, we process it until you revoke it. The retention periods for processing for an individual purpose are defined in more detail in the points below. We collect your information when you contact us for products, services or information, log in to our websites, participate in public forums or other activities on our digital tools, respond to customer surveys or otherwise communicate with us. We collect data through various technologies, such as "cookies". You can read more about cookies below in the COOKIE POLICY section. Use of personal data We process your personal data for different purposes, depending on the relationship you have with us. If you visit our online store If you visit our online store, we store and consequently read small files such as cookies on your device. Some cookies enable us to correlate your activities while browsing our pages from the moment you open the web browser window until the moment you close it. The moment you close the web browser window, the associated cookies are deleted. If you are a supplier or business partner: We process your personal data for the purposes of fulfilling contractual obligations and keep them for 5 years from the execution of the contract or termination of business cooperation. In the event of a dispute, we keep personal data until a final decision is issued by the competent authority. If you make a purchase from us If you make a purchase from us as a natural person, we process your personal data for the purpose of processing your order. This is identification and contact information and information about your orders. Use of data for the purpose of processing your order means that we use data to:

possibility to complete the order online

possibility of communication with you

goods delivery needs - in this regard, we can also forward your data to our transport partners We measure your satisfaction with our services based on the NPS survey that we send to you by email. We send the questionnaire to random users who have made a purchase from us in the past month. We keep the survey results for our own use only. br> Processing based on the fulfillment of legal obligations We also have to fulfill certain obligations prescribed by law. If we process your personal data for this reason, we do not need your consent for such data processing. On this legal basis, we process your identification and contact data, data on orders, namely in order to comply with the applicable laws, which at the time of drafting the memorandum in question are in particular the following:

Code of Obligations (OZ),

Consumer Protection Act (ZVPot),

Value Added Tax Act (ZDDV-1),

Act on Tax Verification of Invoices (ZDavPR),

Accounting Act (ZR),

Electronic Communications Act (ZECom),

Law on Prevention of Money Laundering and Financing of Terrorism (ZPPDFT-1). For this purpose, we use personal data for a maximum of 10 years (plus the current year) after the last document issued regarding your order. Forwarding your personal data We will not forward your personal data to others, except in the following cases:

When affiliated companies or third parties perform services on our behalf, such as responding to your requests, or delivering packages and customer services, etc. These companies are prohibited from using your personal information for purposes other than those we have requested from them or as required by law. These include e.g. delivery services, email providers, etc.

When we share personal information within the company or with third parties to ensure the safety and security of our customers, to protect our rights and property pursuant to legal process, or otherwise when we have a good faith belief that disclosure is required by law. These include e.g. IT and financial consultants, external legal consultants, etc. All third parties with whom we share personal data are bound by a separate contract to protect personal data. Likewise, third parties may not use this personal data for purposes outside of the personal data specified in the contract. Security and storage of your personal data The security and confidentiality of your personal data are extremely important to us. Our company regularly implements technical, administrative and physical security measures aimed at protecting data from unauthorized access, disclosure and use. These measures include:

Regular updating of software, hardware and application equipment,

Employee training,

Control over contract processors and

Security of business premises. Your rights You can exercise your rights by contacting us in writing at the address PJU doo, Trg Svobode 1A, Črnomelj with the reference personal data protection or via e-mail to info@kupi-hitro.si with the subject personal data protection. You have the following rights:

Access to personal data: You can request information from us about whether we process personal data about you and, if we do, you can request access to personal data and information about the processing (which data we process and where this data comes from).

Limitation of personal data processing: you can request from us a limitation of the processing of your personal data (when, for example, the accuracy or completeness of your personal data is checked).

Deletion of personal data: You can ask us to delete your personal data.

Printout of personal data: You can request that we provide you with your personal data that you have provided to us in a structured, commonly used and machine-readable format.

Objection to the processing of personal data: you have the right to object to the processing of your personal data when it is processed for the purposes of direct marketing or to provide your personal data to third parties for direct marketing purposes.