Processing of personal data
At MANGOOP d.o.o. we are aware of how important the security of personal data is, which is why we carefully observe and apply the national and European legislation in force in this field.
We process personal data in order to provide the best user and consumer experience in connection with our products and services, and we also guarantee the highest degree of care in terms of security and discretion when storing and processing your personal data.

All of our actions involving personal data comply with the personal data protection legislation currently in force. We make sure that your personal data is stored appropriately and with due care, we maintain appropriate oversight of the purposes for which your personal data is processed, and we enable you to exercise all the rights you have under the legislation currently in force.

As an individual, you have the right to request:
information about which of your personal data we process and for what purposes;
correction of your personal data in the event of any inaccuracy in our records;
transfer of personal data from our records to another processor or controller of personal data;
objection where the processing is intended for direct marketing, including profiling, and we have the duty to ensure that these rights are fulfilled for you.
You can read more about your rights regarding the protection of personal data below.

Legal bases for processing
The company MANGOOP d.o.o. processes your personal data only where it has a statutory or other legal basis for doing so. We therefore process data on the following bases:

Your direct consent within the contact form and the use of web analytics;
Performance of the contract concluded between us as the service provider and you as the client;
Taking steps prior to entering into a contract;
Legitimate interest, relating primarily to the direct marketing of our services; and
Compliance with legal obligations, primarily in the event of non-fulfilment of contractual obligations and the corresponding sanctions.

The data we process and our purpose
Data obtained through the contact form and online purchase
The data we obtain through the contact form is your first and last name, telephone number, email address and the service or services you need. We collect it in a secure manner. We use it in order to respond to your enquiry / fulfil the obligations arising from the sales contract and for further business cooperation. We do not use this data for marketing purposes unless you expressly agree to that purpose.

Data obtained on the basis of a concluded contract
The data we obtain on the basis of a concluded contract is the company name, address, tax number and registration number, and the first name, last name and email address of the contact person. We need it for our work to run smoothly, for issuing invoices and, at a later stage, for any debt recovery.

Data obtained from public records
The data we obtain from public records is the company name, address and tax number. We need it in order to issue an invoice. Our business practice does not include collecting data from databases for marketing purposes.

We process the data of natural persons at the request of clients and under a contract with them. It is the client itself that ensures the data was collected lawfully. We obtain all the information required to confirm that the data really was obtained lawfully.

For the purpose of marketing our services we advertise on various platforms (Google Adwords, Facebook Ads Manager), using the data we obtain through advertising tools. These tools do not give us access to specific personal data; based on this anonymised data we can, however, profile visitors to our site. Our aim is that our marketing reaches those who are interested in advertising services and that they receive ads that suit them.

Processing of personal data when visiting the website mangoopburgers.si

To provide the best user experience on our website, we use the advanced web analytics program Google Analytics. The purpose is to ensure for you as users that the website works without problems and that it is optimised for the benefit of all our visitors.
As a user of our website you have the right, as soon as you visit the home page, not to consent to the processing of this data. You can avoid the processing through the appropriate cookie settings when visiting the website, or through the appropriate cookie settings in the web browser you use.

If you decide that you wish to give consent for the use of web analytics, you can do so in the same way as you switched it off or refused it. You can change this on the home page of the website.

If you consent to the processing of data (you accept cookies on the site), we obtain your anonymised IP address. This means that all of your personal data is encrypted and is not available to us.

Rights of individuals whose personal data is processed
Individuals whose personal data we process have the right to request from MANGOOP d.o.o.:

access to personal data,
correction of personal data,
erasure of personal data from the personal data records, and
restriction of the processing of your personal data.
As an individual you also have the right to object to processing and the right to the portability of your personal data.

You exercise your rights by means of a written request sent by email to info@mangoop.si

We will decide on your request within one month of receiving it. We may extend this deadline by a maximum of two further months in the event of complexity and a large number of requests, of which you will be notified.

Access to your personal data or information about the processing
You always have the right to be informed whether personal data relating to you is being processed. Where that is the case, we provide you with access to your personal data and the following information:

the purpose or purposes of the processing;
the categories of personal data;
the recipients to whom the personal data has been or will be disclosed;
the envisaged period for which the personal data will be stored or, if that is not possible, the criteria used to determine that period;
where the personal data has not been collected from you, all available information as to its source.

Being informed about the processing of personal data is free of charge, except where the requests of the individual to whom the personal data relates are manifestly unfounded or excessive, in particular because they are repetitive. In such a case the controller may: a) charge a reasonable fee, taking into account the administrative costs of providing the information or communication or taking the action requested, or refuse to act on the request.

Right to rectification
As an individual you have the right under the legislation to have us correct inaccurate personal data relating to you and, taking into account the purposes of the processing, the right to have incomplete personal data completed.

Right to erasure
You have the right to obtain the erasure of your personal data where one of the following grounds applies:

the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
you withdraw the consent on which the processing is based and there is no other legal basis for the processing;
you object to the processing and there are no overriding legitimate grounds for it;
the personal data has been processed unlawfully.

Right to restriction of processing
You have the right to obtain a restriction of the processing of your personal data where one of the following applies:

where you contest the accuracy of the data, for a period enabling us to verify the accuracy of the personal data;
the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;
we no longer need your personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims;
where you have objected to processing based on our legitimate interests, pending verification of whether our legitimate grounds override yours.

Where the processing of personal data has been restricted, such data is processed only with your consent, with the exception of storage, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person.
Before the restriction on the processing of your personal data is lifted, we are obliged to inform you of this.

Right to data portability
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and the right to transmit that data to another controller, where the processing is based on your consent or is carried out by automated means. At your request, where technically feasible, the personal data may be transmitted directly to another controller.

Right to object
Where we process your data on the basis of legitimate interest for marketing purposes, including profiling, you may object to such processing at any time.
Right to lodge a complaint with the Information Commissioner
If we do not decide on your request within the statutory deadline or if we refuse your request, you have the option of lodging a complaint with the Information Commissioner.

PERIOD OF STORAGE OF PERSONAL DATA
We store data for no longer than is necessary to achieve the purpose for which it was collected or further processed, or until the expiry of the limitation periods for the fulfilment of obligations or the statutory retention period.
Data on clients or customers whose processing is based on the law is stored, after the service relationship ends, until the services have been paid in full, but at the longest until the expiry of the limitation period for our claims for the provision of services or the performance of the contract, except where the law lays down a longer retention period.
Other data obtained on the basis of your consent is stored for the duration of the cooperation and for a further 2 years after it ends, unless the law lays down a longer retention period. If a client who has given consent to the processing of personal data has not entered into a business relationship with us, their consent is valid for 2 years from the date it was given. As a taxable person under the law governing value added tax, we must ensure invoices are retained for a further 10 years after the end of the year to which the invoices relate.
Once the retention period expires, the data is deleted, destroyed, blocked or anonymised, unless the law provides otherwise for a particular type of data.

Controller details
Your personal data is collected and processed by MANGOOP d.o.o. The data protection officer appointed by the controller can be reached at the email address: info@mangoop.si

Final provisions
Where certain areas are not regulated by these conditions for the processing of personal data, the legislation in force applies instead.
We reserve the right to amend these processing conditions. We will inform you of any amendment by publishing it on the official website or in another appropriate way. Any amendment is published on the official website one month before it enters into force.

These processing conditions are valid and apply from 1 January 2021.