Privacy Policy

General

In this Privacy Policy, Puzly Puzli, d.o.o. (hereinafter: Puzly Puzli) provides users of its services, customers, and other individuals with whom it enters or is in a contractual relationship, as well as their contact persons (hereinafter collectively: users), with information on the processing of personal data in accordance with the requirements of the General Data Protection Regulation (hereinafter: the GDPR). This Privacy Policy also applies mutatis mutandis to the processing of data of users who are legal entities or business entities.

Information about the Data Controller

Unless otherwise specified in the documents governing an individual contractual relationship, the data controller is Puzly Puzli, d.o.o., Simonitijeva ulica 11, 1000 Ljubljana, www.puzly-puzli.store, info@puzly-puzli.store.

Legal Bases for Processing and Purposes

Contract or Order

Puzly Puzli uses data for entering into contracts and fulfilling contractual obligations arising from written agreements, verbal agreements, or received orders. When processing personal data for the purpose of executing a contract or order, Puzly Puzli will process only those personal data that are necessary for concluding and performing the contract/order and for fulfilling contractual obligations.

Legal Requirement

In addition to processing personal data necessary for entering into and executing a contract, Puzly Puzli also processes personal data in cases required by law.

Consent

Where user consent is obtained, Puzly Puzli will process personal data only for the purposes for which consent was given. Users may withdraw their consent at any time. Puzly Puzli carefully evaluates which data is necessary for a given purpose and uses only the data needed. Personal data processed on the basis of consent are securely protected and appropriate safeguards are implemented. Consent allows Puzly Puzli to process personal data or categories of personal data listed in the consent, including data provided when entering and performing contractual relationships (e.g., data from applications, contracts, questionnaires, surveys, including data about ordered services or goods, purchases, and use of services). Based on consent, Puzly Puzli may communicate information and offers to users via all communication channels listed in the consent. Only Puzly Puzli and its authorized persons process personal data for service development and direct marketing. Personal data obtained on the basis of consent are processed and retained as long as necessary or until withdrawal.

Withdrawal of Consents

Users may withdraw consent in writing at: Puzly Puzli, d.o.o., Simonitijeva ulica 11, 1000 Ljubljana, or by sending a written request via email to info@puzly-puzli.store. If collected via electronic communications or information services (e.g., SMS, apps), consent can also be withdrawn via these channels. Upon withdrawal, Puzly Puzli will cease processing data collected on the basis of consent for the purposes for which consent was given.

Processing Based on Legitimate Interest

Puzly Puzli also processes personal data for legitimate business interests of the company or third parties, for purposes described in this policy or in contracts and other documents governing contractual relationships. When processing personal data on this basis, potential effects on users are considered, and the user's rights are respected. Legitimate interest does not automatically override users' interests, fundamental rights, or freedoms. Puzly Puzli processes only data necessary to achieve the purpose and implements appropriate protective measures.

Marketing

Direct marketing may also be based on legitimate interest. Puzly Puzli informs business users about services and goods that may interest them. Basic user data, including name, surname, phone, email, title, contractual information, and service usage, may be processed for segmentation and profiling. Data may come directly from users or public sources. Processing for marketing purposes does not affect contractual rights.

Surveys

User feedback is valuable for providing high-quality services and goods. Puzly Puzli may invite users to complete surveys or provide feedback. Contact data such as phone or email may be processed. Participation is voluntary and does not affect users’ rights.

Risk Management

"Puzly Puzli exercises due diligence, including risk management. Data about users and service usage may be processed for segmentation and profiling, and data from public records may also be used. Measures may be taken if a user poses a risk to the company.

Analysis

To improve services and offerings, Puzly Puzli may process user data to analyze service usage, purchases, and market trends. Appropriate safeguards, including anonymization or pseudonymization, are applied. This does not affect contractual rights.

Obtaining Consent

For providing goods and services, Puzly Puzli may encourage users to give consent. Contact information and consent data may be processed for this purpose.

Types and Sources of Data

Data types processed depend on the contractual relationship. Typically, contact information (name, surname, title, addresses, email, phone, social media), and transactional data (services, goods, quantities, payments) are processed. Data may come from business partners, public sources, or third parties, with proper permissions.

Right to Object

Users may object to processing for the above purposes. Puzly Puzli will stop processing for those purposes where possible. Objections can be submitted in writing to info@puzly-puzli.store or to the postal address.

Users of Personal Data

Users of personal data include Puzly Puzli, its suppliers, contractual partners, and governmental authorities. Suppliers and partners may access data only to the extent necessary to provide goods or services. Authorities access data as prescribed by law.

Retention Periods

Data obtained via consent are retained as long as necessary or until withdrawal. Business records are kept according to financial and tax regulations, generally up to ten years. Anonymized data may be retained indefinitely. Requests for deletion or restriction are processed to comply with legal obligations.

Individual Rights

Users may request access, correction, deletion, or restriction of their personal data. They may object to processing based on legitimate interest or for direct marketing, and exercise data portability. Requests should be sent in writing to info@puzly-puzli.store or to the postal address: Puzly Puzli, d.o.o., Simonitijeva ulica 11, 1000 Ljubljana. Users must identify themselves and clearly specify their requests. Certain rights may be limited by law. Responses are generally provided within one month, and no later than three months.

Right to Complain

Users may file complaints with Puzly Puzli at the postal or email address above. Complaints may also be filed with the data protection supervisory authority in Slovenia (Information Commissioner).

Non-Provision of Data and Consequences

Puzly Puzli requests only the data necessary under law or for contract execution. Failure to provide data may result in refusal to conclude a contract. Users may provide additional data voluntarily.

Final Provisions

Puzly Puzli reserves the right to amend this Privacy Policy. Changes will be communicated to users at least thirty (30) days before implementation via website notices or written notifications. This policy is published and accessible on the website.