Privacy Policy

The data controller is Avtoprem d.o.o., located at Jančerjeva ulica 1, 2000 Maribor, Slovenia (hereinafter: "we", "us" or "the company").

• Email: info@avtoprem.si
• Phone: +386 2 480 14 00
• Mobile phone: +386 70 440 071

We specialise in the sale of used motor vehicles. Our website serves to present the company, display our vehicle offer, and communicate with customers.

When using our website and services, we collect the following personal data:

Data from the inquiry form

• Full name
• Email address
• Phone number
• Message content

Technical data

When visiting our website, our server automatically logs basic technical data such as IP address, browser type, operating system, and access time. This data is stored in server logs and serves to ensure the security and stability of the website.

We process your personal data for the following purposes:

• Responding to your inquiries about vehicles and services
• Communication regarding potential vehicle purchase
• Ensuring the security and operation of the website
• Fulfilling legal obligations (e.g. tax and accounting documentation)

We do not use your data for automated decision-making or profiling.

We process your personal data on the basis of the General Data Protection Regulation (GDPR), specifically on the following legal grounds:

• Article 6(1)(b) GDPR — processing is necessary for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract (e.g. responding to a vehicle inquiry).
• Article 6(1)(c) GDPR — processing is necessary for compliance with a legal obligation to which the controller is subject (e.g. tax legislation).
• Article 6(1)(f) GDPR — processing is necessary for the legitimate interests of the company, such as ensuring website security and preventing abuse.

• Inquiries: we retain data from the contact form for a maximum of 12 months after the end of communication, unless needed for contract fulfilment or legal obligations.
• Customer data (buyers): we retain customer data in accordance with tax legislation, i.e. at least 10 years from the date of invoice.
• Server logs: technical data is retained for a maximum of 90 days.

After the retention period expires, we securely delete or anonymise the data.

Under GDPR, as a data subject you have the following rights regarding your personal data:

• Right of access — you have the right to obtain confirmation as to whether your personal data is being processed and to request access to that data.
• Right to rectification — you have the right to request the correction of inaccurate personal data or the completion of incomplete data.
• Right to erasure — you have the right to request the deletion of your personal data when there is no longer a legal basis for processing.
• Right to data portability — you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transfer it to another controller.
• Right to object — you have the right to object to the processing of your personal data based on the legitimate interests of the company.
• Right to restriction of processing — in certain cases, you may request the restriction of the processing of your data.

To exercise your rights, contact us at info@avtoprem.si. We will respond to your request within 30 days.

If you believe that the processing of your personal data violates GDPR, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (www.ip-rs.si).

Our website uses only essential (functional) cookies that are necessary for the proper functioning of the site. These cookies do not collect personal data and do not track your online behaviour.

We currently do not use analytical cookies or third-party cookies. Should we introduce them in the future, we will inform you appropriately and obtain your consent before these cookies are installed.

We do not sell, lend, or share your personal data with third parties for marketing purposes. We may only share data with:

• Hosting providers (servers) that process data on our behalf
• Accounting services for fulfilling tax obligations
• Government authorities when required by law

We have appropriate data processing agreements in place with all processors in accordance with Article 28 of the GDPR.

To protect your personal data, we use appropriate technical and organisational measures, including:

• Encrypted connection (SSL/TLS) for data transfer
• Access to data restricted to authorised persons only
• Regular security updates of software

We may update this privacy policy from time to time. We will notify you of significant changes by publishing an updated version on this page. The date of the last update is always listed at the top of the document.

We recommend that you periodically check this page to stay informed of any changes.