The owner of this website is the company MightyFields d.o.o., Litostrojska cesta 58c, 1000 Ljubljana, Slovenia.

Information on personal data protection

MightyFields is aware of the responsibility related to the processing of personal data of its customers, potential customers, site visitors and all individuals who disclose their personal information when contacting us. We have therefore brought our operations into line with the Personal Data Protection Act (PDPA-1, Official Gazette of the RS, no. 94/2007) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “General Data Protection Regulation”).

Expressions such as “controller”, “processing”, “restriction of processing”, “processor”, “profiling”, “pseudonymisation”, “third person” and “company” shall have the meaning as defined by the General Data Protection Regulation.

MightyFields protects with special care the security and privacy of information obtained from its web page users and their personal data in compliance with the applicable legal provisions of the Republic of Slovenia. Please read more below about collecting, saving, using and disseminating information.

You may use our website without entering your personal data. You are only asked to submit your personal data if you order any of our products or services.

The data controller is company MightyFields d.o.o., Litostrojska cesta 58c, 1000 Ljubljana.

Personal data

Personal data is information that identifies you as an identified or identifiable individual. A user is identifiable when it can be directly or indirectly determined, in particular by specifying identifiers such as name, identification number, location data, online identifier or an indication of one or more factors that are specific to the user’s physical, physiological, genetic, mental, economic, cultural or social identity.

What type of personal data do we collect on our website?

You may use our website without entering your personal data. You are only asked to submit your personal data if you order any of our products or services.

We only collect personal data when you send them to us either by subscribing to our newsletter or accessing content on our website, order our products or services via e-mail or send us an inquiry about your order or in similar situations when you decide to send your personal data to us.

In addition to personal data you send us, we also collect information with cookies. Such information may include websites you visited our website from, websites you visit from our website, and the length of your visit on our website. We immediately anonymise the last three digits of your IP address, thus efficiently preventing your identification based on this information. We could use this information to identify you, but this is not what we do.

For which purposes do we process data you submit through our website?

The data you send to us, or which we collect with cookies, may be processed for the following purposes: statistical purposes and for identifying demographics and interests of website users, but only so that you cannot be identified; diagnosing problems with our server and administering our website; providing you with products or services you have ordered through our website; or for other purposes you have requested or agreed to unless otherwise required by law.

Where do we store personal data you submit through our website?

Your personal data is stored on our servers that we manage ourselves. Our business partners, who in some cases store personal data for us, ensure a level of protection that is at least equivalent to the one we have at MightyFields. Your personal data shall not, in any form, be conveyed to third parties, unless we obtain your consent to do so, or if so required by legal authorities.

The retention period of personal data

MightyFields does not process the data for longer than is necessary to achieve the purposes for which personal data have been collected and further processed. Personal data processed MightyFields, for the performance of the contract are kept by MightyFields, for the period which is necessary for the execution of the contract and 5 years after its termination, except in cases where there is a dispute between you and the controller concerning the contract. In this case, MightyFields keeps data for 5 years after the final judicial or arbitral decision or settlement, or if there is no litigation, 5 years from the date of an amicable settlement.

Personal data processed by MightyFields on the basis of the law are kept by MightyFields, for the period prescribed by law. Personal data processed by the controller based on your personal consent or legitimate interest are kept by MightyFields, permanently, until your consent is revoked or until a request is made to discontinue the processing. MightyFields shall delete such data before cancellation only in the event that the purpose of the processing of personal data has already been made or if the law so provides.

After the expiration of the retention period, MightyFields will effectively and permanently delete or anonymise your personal information so that it will no longer be associated with you.

Users’ rights relating to the protection of personal data

 In accordance with the General Data Protection Regulation, MightyFields provides the following rights regarding the protection of personal data, which are discussed in more detail below:

• The right of access to information,
• The right of rectification,
• The right to delete (“right to oblivion”),
• The right to limit processing,
• The right to data portability,
• The right to object.

The right of access to information

You have the right to obtain confirmation from MightyFields as to whether your personal data are processed, and if so, you have the right to obtain access to your personal data and the following information concerning the processing of personal data:

• The purpose of processing,
• Type of personal data,
• Users or user categories which have been or will be disclosed your personal information, especially users in third countries or international organizations,
• Where possible, the expected period of retention of personal data or, if this is not possible, the criteria used to determine this period,
• Existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data relating to data subjects, or existence of the right to object to such processing,
• The right to lodge a complaint with the supervisory authority,
• Where personal data are not collected from the user, all available information as to their source,
• Existence of automated decision-making, including the creation of profiles and meaningful information about the reasons for it, as well as the importance and the anticipated consequences of such processing for the user.

Based on your request, MightyFields will provide you with one free copy of your personal data being processed. Any additional copies of data that you should require will be charged a reasonable fee by the company to take into account administrative costs.

Right of rectification

You have the right to request from MightyFields to correct, without undue delay, any inaccurate personal data relating to you. Considering the purposes of the processing, you are entitled to the completion of incomplete personal data, including the presentation of a supplementary declaration.

The right to delete (“right to oblivion”)

You have the right to request from MightyFields to delete your personal information without undue delay; the company shall delete your personal information, without undue delay, in the following cases:

• The data are no longer needed for the purposes for which they were collected or otherwise processed,
• You cancel your consent, which is the basis for the processing of your personal data, and there is no other legal basis for the processing,
• You object to the processing on the basis of a legitimate interest of the controller, and there are no overriding legitimate reasons for the processing,
• You object to processing for the purposes of direct marketing,
• Personal data must be deleted to comply with legal obligations under European Union law or the Slovenian legal order.

Where MightyFields transmits your personal information, it shall take reasonable steps, including technical, to inform the processors who process your personal information that the data subject requires from the controller to erase any links to these personal data or copies thereof.

The right to limit processing

You have the right to require that MightyFields restrict the processing of your personal data subject to one of the following cases:

• You dispute the accuracy of the data for the period which enables the controller to verify the accuracy of your personal data,
• The processing is unlawful, and you oppose the deletion of personal data, and instead ask for restrictions on their use,
• MightyFields no longer needs personal data for the purposes of the processing, but you need them for the establishment, exercise or defence of legal claims,
• You filed an objection with regard to the processing until it is checked whether legitimate reasons for the controller outweigh your reasons.

The right to data portability

You have the right to receive personal data relating to you in possession of MightyFields in a structured, widely used and machine-readable form, and the right to forward such information to another controller, without MightyFields  for whom the data was provided, hampering you, where:

• Processing is based on your consent or agreement and
• Processing is carried out by automated means.

The right to object

On grounds related to your particular situation, you have the right, at any time, to object to the processing of personal data if this is based on the legitimate interests pursued by MightyFields d.o.o. or a third party MightyFields will cease to process personal data, unless it proves compelling reasons for processing that outweigh your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. Where personal data are processed for direct marketing purposes, you have the right, at any time, to object to the processing of your personal data for such marketing purposes, including profiling, if it is associated with such direct marketing. Where direct marketing is based on consent, the right of reply can be made by cancelling the given personal consent.

Procedure for asserting your rights

All the above-mentioned requirements which relate to the exercise of rights in connection with your personal data may be addressed in writing to the controller by using the contact addresses for personal data protection. If you submit your request in accordance with the above paragraph by electronic means, the information, to the extent possible, will be provided to you by electronic means, unless you request otherwise.

For the purposes of reliable identification in the event of exercising your rights with respect to personal information, the controller may request additional information from you needed to confirm your identity; it may refuse to act in accordance with this chapter only in the event that it proves that you cannot be reliably identified.

The request by which you exercise your rights in relation to your personal data will be responded without undue delay and no later than one month from receipt of the request. MightyFields may extend the limit for exercising the rights for up to two additional months, considering the complexity and the number of requests. Where MightyFields extends the deadline, you will be notified of any such extension within one month of receipt of the request together with the reasons for the delay.

Where, in accordance with this chapter, your requests are manifestly unfounded or exaggerated, especially since they are repeated, MightyFields may:

• Charge a reasonable fee, taking into account administrative costs of the provision of information or messages or performing the required action,
• Dismiss action concerning the request.

The right to lodge complaints with regard to the processing of personal data

Any complaint with regard to the processing of your personal data may be directed to the contact addresses for personal data protection.

You have the right to lodge a complaint directly with the Information Commissioner if you think that the processing of personal data relating to you violates Slovenian rules or regulations of the European Union in the field of personal data protection.

Rights of data subjects

You can submit a request (for Access, Rectification, Erasure and Withdrawal of Personal Consent, Restriction of Processing and Objection to Processing) in person or as a certified document by a notary or an administrative unit serving as proof that the right person is exercising their right. Protection of personal data against unauthorised consultation and ensuring personal data accuracy are among key objectives of the GDPR, therefore data subjects must accept MightyFields’s requirement for identification. Otherwise, anyone could request a copy or a rectification of anyone’s personal data, and this could lead to unauthorised disclosure or use of incorrect personal data.

In cases where data subjects give consent following a request by electronic means, the withdrawal of such consent shall be possible, and the identity of such data subjects shall be verified using e-mail confirmation.

We shall address each request submitted by data subjects and carry out appropriate procedures or notify data subjects that this is not possible and state the reason why.

Authorised person

MightyFields designated a Data Protection Officer (DPO) who is in charge of personal data protection

Data protection officer
MightyFields d.o.o.
Litostrojska cesta 58c
1000 Ljubljana
info@mightyfields.com

Security measures

MightyFields uses technical and organizational security precautions to protect data from manipulation, loss, destruction or access by unauthorized persons. To ensure the security and confidentiality of personal data that we collect on-line, we use data networks that are among other things protected also by industry standard firewall and password. In the course of handling personal data, we take measures reasonably designed to protect that information from loss, misuse, unauthorized access, disclosure, alteration or destruction. While we cannot guarantee against any loss, misuse, unauthorized access, disclosure, alteration or destruction of data, we endeavour to prevent such unfortunate occurrences.

Changes to this document

MightyFields reserves itself the right to update the Privacy Policy without prior notification of the MightyFields web pages users. The date of the last content change is stated at the bottom of this document.

By using the Websites, you agree to be legally bound by these Terms and you agree to the processing of your personal data in accordance with our Privacy Policy. If you do not agree with these Terms or our Privacy Policy, you should not use the Websites.

This website is owned and provided by MightyFields d.o.o.

Last updated in July 2023