The controller of your personal data is: GEN-I, trgovanje in prodaja električne energije, d.o.o. (hereinafter referred to as “GEN-I” or the “Controller”). Address/registered office: Vrbina 17, 8270 Krško. Telephone number: +386 7 48 81 840.

The parent company GEN-I and its subsidiary act as joint controllers of personal data. In certain cases, both the subsidiary and the parent company GEN-I may process your data on the basis of a joint management agreement, all in accordance with the purposes of the processing, which you will be notified about in advance, and in order to fulfil the purpose. Data subjects may exercise their rights under section 8 with both joint controllers.

If you have any questions regarding the processing of your personal data, you can contact us using the details above or via our Data Protection Officer at dpo@gen-i.eu.

We do not generally collect or actively seek personal data through our website.

We may, however, process personal data when you voluntarily contact us, for example when submitting a business enquiry by email or through a contact form.

Depending on the nature of your enquiry, this may include:

• your first name and last name;
• your business contact details, such as your business email address and telephone number or your email and phone number;
• the name of the company or organisation you represent; information contained in your enquiry or other correspondence with us;
• and any other personal data that you choose to provide to us in connection with your enquiry.

Please do not provide unnecessary personal or sensitive information when contacting us.

We process personal data obtained through business enquiries for the following purposes:

• to receive, review and respond to your enquiry;
• to communicate with you regarding your enquiry;
• to provide information about our products or services where this is relevant to your enquiry;
• to evaluate and, where appropriate, establish a potential business relationship;
• and to establish, exercise or defend legal claims where necessary.

We do not use the personal data received through business enquiries for unrelated purposes.

Depending on the circumstances, we process your personal data on the following legal bases:

• Article 6(1)(b) GDPR – where processing is necessary in order to take steps at your request prior to entering into a contract or, where applicable, to perform a contract;
• Article 6(1)(f) GDPR – where processing is necessary for our legitimate interests, such as responding to business enquiries, managing potential business relationships, maintaining business correspondence and protecting our legal interests; and
• Article 6(1)(c) GDPR – where processing is necessary to comply with a legal obligation to which we are subject.

Where we rely on legitimate interests, those interests will be balanced against your rights and freedoms as required by the GDPR.

We do not sell or otherwise disclose your personal data to third parties for their own marketing purposes.

Your personal data may be accessible to our employees and authorised persons who need the information to handle your enquiry.

Where necessary, we may also use service providers that process personal data on our behalf, such as providers of email, hosting, IT or other business-support services. Such providers process personal data only in accordance with our instructions and applicable data protection requirements and based on data processing agreement.

We may also disclose personal data where required by law or where necessary to establish, exercise or defend legal claims.

We generally process personal data within the European Union (EU). If you submit your personal data to our non-EU subsidiary, your personal data may be processed at that subsidiary but will always remain in the GEN-I group of companies.

Where personal data are transferred to a country outside the European Economic Area (EEA), we will ensure that the transfer is carried out in accordance with the requirements of Chapter V of the GDPR and that appropriate safeguards are in place where required.

In some cases, we may also transfer your personal data to countries that are not members of the European Economic Area or to international organisations (“third countries”) and where an adequate level of protection of personal data is not necessarily ensured. Such transfers will always be limited in scope, for a specific purpose and in strict compliance with the safeguards provided by the laws in force in the territory of the Controller (binding corporate rules, codes of conduct, standard contractual clauses, data transfers based on specific exemptions and similar other mechanisms).

Third country partners that may process some of your personal data include:

• US-based bulk email service provider (your e-mail address only);
• Website analytics provider (if you have consented to the recording of analytics cookies);
• For the purposes of advanced advertising, we use cookies from the advertising companies Meta, Google and YouTube.

Where we transfer your personal data to third countries, we will only do so after carefully considering the legal basis and safeguards in place in that third country. Any transfer of personal data to third countries will be carried out by the Controller with due care and diligence, in accordance with the principle of accountability. Information on the specific security mechanism used for each transfer of personal data to third countries and, where applicable, a copy of it, is available from the Controller (Data Protection Officer).

We retain personal data relating to business enquiries only for as long as reasonably necessary for the purposes for which they were collected.

Where an enquiry does not result in a business relationship, we will normally delete or anonymise the personal data when they are no longer needed for the purpose of handling the enquiry, unless we have a legal obligation or legitimate reason to retain them for a longer period.

Where an enquiry results in a business relationship, the relevant personal data may be retained for the duration of the relationship and thereafter for as long as necessary to comply with applicable legal obligations or to establish, exercise or defend legal claims.

Subject to the conditions and limitations provided by the GDPR, you have the right to:

• request access to your personal data;
• request rectification of inaccurate or incomplete personal data;
• request erasure of your personal data; request restriction of processing;
• object to processing based on our legitimate interests;
• request data portability where the applicable legal requirements are met;
• and withdraw consent where processing is based on your consent.

You also have the right to lodge a complaint with a competent data protection supervisory authority if you believe that your personal data is being processed in breach of applicable data protection law.

If you are in Slovenia, you may contact:

Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec)
Dunajska cesta 22
1000 Ljubljana Slovenia
Email: gp.ip@ip-rs.si

For more information about exercising your rights in other countries, please contact us using the contact details provided above.

Our website uses cookies. For more information, please visit our Cookies page.

We do not use personal data collected through business enquiries for automated decision-making, including profiling, that produces legal effects or similarly significantly affects you.

We may update this Privacy notice from time to time to reflect changes to our website, business activities, applicable legislation, or our data-processing practices.

The current version of this Privacy Notice will always be published on this website.