This policy applies to the processing (or use) of any personal data by Inlife d.o.o. (operator) or carried out on behalf of the operator.

Controller information:

Inlife d.o.o.

Gabrsko 63C

1420 Trbovlje

Registration number: 6367801000

Phone: +386 51 643 281

E-mail: info@in-life.si

• Basic contact information (name, telephone number, e-mail address);
• Information on the use of our websites (clicks on links, time spent browsing) and information on the response to our e-mails (whether the message was open, which links you clicked on);
• Information we need to fulfil the contract and delivery of the purchased goods (subject of purchase, price, delivery address, delivery time, method of payment, date of payment, data on complaints, data on the issued invoice, etc.).

We may process your personal data on the following legal bases:

• when necessary to meet our legal obligations (e.g. issuing invoices for purchased goods);
• when the processing of your personal data is necessary for the conclusion and fulfilment of the contract you have concluded with us or because you have requested an offer from us;
• when you have given your consent to the processing of your personal data for a specific purpose of processing, where you always have the right to revoke the given consent;
• when we have a legitimate interest in the processing of your personal data (when we send you an e-mail in case you have left the shopping cart on our website without completing the purchase).

We may use your personal information for one or more of the following purposes:

• communicating with you regarding the provision of our services and responding  to your inquiries;
• conclusion of the contract and fulfilment of obligations arising from the concluded contract;
• marketing communication (sending e-mails and SMS messages);
• to assert any legal claims and resolve disputes;
• for statistical analyzes on the sale of our goods and on the use of our websites;

We retain basic personal information for as long as you have the status of our registered user on our websites.

Personal data that we process on the basis of your consent are stored permanently or. until you revoke this consent.

Data on issued invoices are kept for 10 years from the date of issue.

We keep the data necessary for the conclusion and fulfilment of the contract between you and us for another 5 years from the fulfilment of the contract (supply of goods).

After the retention period, personal data is effectively deleted or anonymized, which means that we process it in such a way that it is no longer possible to link it to you or attribute it to you.

The voluntary transmission of data and consequences of non - transmission

The provision of personal data is voluntary. You are not obliged to provide us with personal data, but if you do not provide it, you cannot enter into a contract with us (as we need it to deliver the order). We will state which information is such that its transmission will have the stated consequences each time we obtain personal data from you.

We do not provide your personal data and do not provide information to third parties (outside the company Inlife d.o.o., except for those who have a written contract with us, on the basis of which they perform certain tasks related to data processing and are obliged to comply with legislation on processing and protection of personal data (so-called contractual processors). The contractual processors to whom we provide personal data are:

• marketing service providers;
• e-mail providers;
• providers of sending text messages;
• software solution providers;
• delivery services.

Contractual processors may only process personal data in accordance with our instructions and may not process personal data for their own purposes. They are committed, together with their employees, to protecting the confidentiality of your personal information.

Contractual processors do not export personal data to third countries (outside the Member States of the European Economic Area - these are EU members and Iceland, Norway and Liechtenstein).

You have the following rights regarding your personal information:

- to request from us at any time:

• confirmation of whether we are processing your personal data;

• access to personal data and the following information: purposes of processing; types of personal data; users or categories of users to whom personal data have been or will be disclosed, in particular users in third countries or international organizations; the envisaged retention period of personal data or, if that is not possible, the criteria used to determine that period; the existence of automated decision-making, including profiling and the reasons for it, as well as the importance and intended consequences of such processing for you;

• one (free of charge) copy of personal data in a form that you specify (if the request is made by electronic means of communication and you do not request otherwise, a copy is provided in electronic form); we may charge a reasonable fee, taking into account the costs, for additional copies you request;

• correction of inaccurate personal data;

• processing restriction when:
     - you dispute the accuracy of personal data, for a period that allows us to verify the accuracy of personal data;
     - the processing is illegal and you oppose the deletion of personal data and instead request a restriction on their use;
     - we no longer need personal data for the purposes of processing, but you need them to assert, enforce or defend legal claims;

• the deletion of all personal data (right to be forgotten) if the preconditions set out in Article 17 of the General Data Protection Regulation are met, and in particular if you revoke your consent to the processing of personal data;

• print personal data in a structured, commonly used and machine-readable form, with the right to pass this data on to another controller without interfering with me;

• discontinuing the use of personal data for direct marketing purposes, including profiling;

• that you are not subject to a decision based solely on automated processing, including profiling, provided that the preconditions set out in Article 22 of the General Data Protection Regulation are met.

- the right to file a complaint against us with the Information Commissioner if you believe that the processing of your personal data violates the General Data Protection Regulation.

You can address your requests regarding the exercise of personal data rights in writing to any contact listed at the top of this document under Personal Data Controller and Contact Data.

For the purposes of reliable identification in the case of exercising rights concerning personal data, we may request additional information from you, and we may refuse to take action only if we prove that we cannot reliably identify you.

We must respond to your request to exercise your personal data rights without undue delay and at the latest within one month of receiving your request.

Any changes to our privacy policy will be posted on this website.

Updated: 25/05/2021