1. General
At Kovikor d.o.o., we respect your privacy and ensure the secure processing of personal data. We process personal data in accordance with applicable legislation, in particular the General Data Protection Regulation (GDPR) and the Personal Data Protection Act (ZVOP 2).
This policy explains which data we collect, how we use it and what your rights are.

2. Data Controller
The controller of your personal data is:
Kovikor d.o.o.
Dvor 21.b, 1275 Šmartno pri Litiji, Slovenia
Email: office@kovikor.si
The company has appointed a Data Protection Officer, who can be contacted via the above contact details.

3. What data we collect
We collect only personal data necessary for the performance of our business activities, in particular:
• name and surname
• company name (for business partners)
• address
• email address
• telephone number
• data related to orders and contracts
• tax number (for invoicing purposes)
When visiting our website, certain technical data may also be collected automatically (e.g. IP address, browser data).

4. Purpose of processing
We process your personal data for the following purposes:
• provision of products and services
• preparation of offers and conclusion of contracts
• communication with customers and business partners
• compliance with legal obligations (e.g. accounting)
• handling complaints and ensuring quality

5. Legal basis for processing
We process personal data on the following legal bases:
• performance of a contract (e.g. order)
• legal obligations (e.g. tax regulations)
• legitimate interest (business communication)
• consent of the individual (where required)

6. Data retention period
Personal data is retained only as long as necessary to fulfil the purpose for which it was collected:
• invoice data: 10 years
• business communication: up to 2 years
• contractual data: up to 5 years after completion of cooperation
After the retention period expires, the data is deleted or anonymised, unless otherwise required by law.

7. Sharing of personal data
Your personal data may be shared with:
• accounting service providers
• IT service providers
• delivery services (if necessary)
• public authorities when required by law
We do not sell or disclose your data to unauthorized third parties.

8. Transfers to third countries
As a rule, the company does not transfer personal data outside the EU/EEA.
If such transfers occur (e.g. due to certain online services), appropriate safeguards will be ensured.

9. Your rights
You have the following rights regarding your personal data:
• the right of access
• the right to rectification
• the right to erasure (“right to be forgotten”)
• the right to restriction of processing
• the right to object
• the right to data portability
You may exercise your rights at any time by contacting us at:
office@kovikor.si

10. Complaint
If you believe that your personal data is being processed in violation of applicable regulations, you have the right to lodge a complaint with:
Information Commissioner of the Republic of Slovenia

11. Data protection
We implement appropriate technical and organisational measures to protect personal data against unauthorized access, loss or misuse.

12. Validity
This policy is effective from the date of publication on the company’s website and may be updated from time to time.
Last updated: May 18, 2026