* Commission Implementing Decision (EU) C(2023) 4747 of 10.7.2023

* Commission Implementing Decision (EU) C(2021) 4800 of 28.7.2021

You can delete cookies at any time by selecting the appropriate settings in your browser or by deleting them manually. However, please note that if you delete cookies or refuse to accept them, you may not be able to use all the features of the website, and some web pages may not be displayed correctly.

3.2 When processing personal data necessary for the execution of a contract, the legal basis used is point (b) of Article 6(1) of the General Data Protection Regulation: for the conclusion and execution of a sales contract (when you use the website and call center services to purchase or file a complaint about products), employment contract (when you apply for an advertised job vacancy), or collaboration contract (when you propose yourself or apply for a collaboration call).

3.2.1 Sales Contract

Support forms, presentations, purchases, and other inquiries are also published for users. All mandatory personal data on these forms are collected, processed, and used for processing the requests of such users. This also applies to processing actions necessary to implement measures that are essential before the conclusion of the contract. Without providing mandatory data, the processing of your request would not be possible.

When data processing is necessary to fulfill your request, we keep the data until the expiration of warranty, guarantee, or limitation periods. In this case, your data is stored for seven years for warranty or product liability claims. For other inquiries, your data is stored for three months.

3.2.2 Employment Contract

We process personal data obtained when you apply for an advertised job vacancy through the website. Specifically, only to the extent, in the manner, and under the conditions necessary for the purposes of selecting the appropriate candidate for employment within the specific job vacancy you applied for (for implementing measures at the request of the individual before concluding the contract).

When applying for an advertised job vacancy, you are not obliged to provide the required personal data. However, if you do not wish to disclose your personal data, we may not consider you in the process of selecting the appropriate candidate.

We only keep the collected data until the purpose is fulfilled or until possible appeals of unsuccessful candidates are possible or concluded.

3.2.3 Collaboration Contract

We also process personal data obtained when you apply for collaboration in promoting products or wholesale through the website. Specifically, only in collaborations proposed by you (for implementing measures at the request of the individual before concluding the contract).

You are not required to provide the requested data. However, if you do not wish to disclose your personal data, collaboration may not be possible when disclosing the required data is a condition for collaboration.

We only keep the collected data until the purpose is fulfilled or until possible appeals or concluded.

3.3 When processing personal data necessary to fulfill a legal obligation applicable to NUTRISSLIM, the legal basis used is point (c) of Article 6(1) of the General Data Protection Regulation: for transmitting data to competent authorities under the law for product vigilance purposes.

3.4 When processing personal data necessary for legitimate interests pursued by NUTRISSLIM or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the individual, processing is based on point (f) of Article 6(1) of the General Data Protection Regulation: collecting log files during website visits, conducting video surveillance of access to NUTRISSLIM premises, communicating with customers under the Electronic Communications Act.

3.4.1 Log Files During Website Visits

When accessing or using the naturesfinest.si website and the services it offers (e.g., opening a user account, purchasing products), data about this action is collected in a log file. Upon each access, the following data is primarily saved:

• IP address
• name of the opened file
• date and time of access
• amount of data transferred
• notification of whether the access was successful
• notification of why access may not have been successful
• name of your internet service provider
• if necessary, the operating system and web browser of your computer
• website through which you visited our website

Log files are processed to ensure the operation of the website and services offered on it, system stability, data security and operation safety, providing support and services, and for the protection of people and property, including the protection of business secrets and personal data.

When data processing is necessary to fulfill your order, we keep the data until the expiration of warranty, guarantee, or limitation periods; otherwise, data is kept for ____ days.

3.5 Video Surveillance of Access to NUTRISSLIM Premises

Video surveillance of access to NUTRISSLIM premises is conducted to prevent property damage and ensure the safety of individuals.

Video surveillance camera recordings are stored for ____ days/months from the time of creation or until legal proceedings are possible or concluded.

3.6 Communication with Customers under the Electronic Communications Act

If you have not objected at the time of purchase, based on your purchase on the naturesfinest.si website or the contact details of NUTRISSLIM published on the website, we are pleased to inform you about our current offers via email. Specifically, to provide you with all the information about our various products, current and upcoming promotions, and offers. In this case, we use your email address to send notifications about our offers.

You can unsubscribe from receiving such notifications at any time by clicking on the unsubscribe link provided at the end of each notification we send you. Due to technical reasons, it may take a few hours for the unsubscribe to take effect, so you may still receive some notifications during this interim period.

4. Is the provision of personal data a statutory or contractual obligation, or a requirement necessary to enter into a contract, and must the individual to whom the personal data relates provide personal data and what are the potential consequences if such data is not provided?

Provision of Personal Data:

• For the performance of a contract (point (b) of Article 6(1) of the General Regulation), it is a contractual obligation;
• In connection with the performance of obligations prescribed by law (point (c) of Article 6(1) of the General Regulation), it is a statutory obligation.

If you choose not to disclose your personal data, we would not be able to enter into a contract with you or fulfill certain rights and obligations arising from the contractual relationship.

5. Users of Personal Data

• (a) Employees at NUTRISSLIM

Your data is processed by employees at NUTRISSLIM within their job responsibilities and authorizations and in accordance with the internal organization and job categorization for the fulfillment of obligations in accordance with regulations.

(b) External Users

We also disclose your personal data to certain external users, namely:

• for processing your requests or providing support, it may be necessary to disclose your personal data to a contractual partner or delivery service in the country where the order is to be executed or delivered;
• providers of cookies or hosting services, if you opt for such service;
• banks or other payment institutions, if you opt for such service;
• courts, state authorities, and other holders of public authority when they are entitled to obtain personal data within specific proceedings under the law (e.g., police, inspection and supervisory bodies, Financial Administration of the Republic of Slovenia) and other persons (e.g., auditors) if they have a legal basis or a final court decision for obtaining or processing personal data, or if you have expressly consented to it.

All users are obliged to comply with applicable provisions on the protection of personal data vis-à-vis NUTRISSLIM. More information about our external service providers can be obtained by email at [email protected].

6. Transfer of Personal Data to Third Countries or International Organizations

• Personal data is not transferred to international organizations, but to third countries (USA and UK) only if you consent to the installation of marketing cookies (advertising and analytical). In this case, the transfer is carried out to the UK based on and in accordance with Commission Implementing Decision (EU) C(2021) 4800 on adequate protection of personal data in the United Kingdom of 28.7.2021, and to the USA based on and in accordance with Commission Implementing Decision (EU) C(2023) 4747 on the adequate level of protection of personal data under the data privacy framework between the EU and the USA of 10.7.2023.

7. Existence of Automated Decision-Making, Including Profiling

Automated decision-making is not carried out.

If you have expressly consented to receiving newsletters, profiling is carried out based on your interests (health, beauty, detoxification/weight loss) for the purposes of such marketing. Your consent to personalized advertising and marketing campaigns is not a condition for using the website or services.

If you have expressly consented to receiving personalized newsletters, you have the right to object to the processing of personal data for such marketing purposes at any time or to unsubscribe from receiving such newsletters, without affecting the lawfulness of the processing based on consent carried out until its withdrawal.

Data processed based on your consent (point (a) of Article 6(1) of the General Regulation) for the purpose of sending personalized newsletters will be retained until you withdraw your consent, and in the event of a dispute, the data will be retained until a final decision on the dispute is reached.

8. Retention Period of Personal Data

The retention period depends on the legal basis for the processing of personal data and the purpose of processing. Your personal data will be kept only for as long as necessary for the purposes for which they are processed.

In cases where you have given us personal consent to process your personal data, we keep the data until you withdraw your consent.

If data processing is necessary for the fulfillment of your order, we keep the data until the expiry of warranty, guarantee, or limitation periods.

We may process your personal data for longer periods if required by applicable regulations in the Republic of Slovenia and/or the European Union (e.g., regulations on medical devices, accounting, and taxes).

Specific retention periods are listed in point 3 of this policy, for various types of processing purposes.

9. Rights of the Data Subject

Individuals whose personal data is collected and processed by NUTRISSLIM have the following rights:

• the right to access personal data,
• the right to correct inaccurate and supplement incomplete personal data,
• the right to erasure of personal data,
• the right to restriction of processing of personal data,
• the right to data portability,
• the right to object to processing based on point (f) of Article 6(1) of the General Regulation, including profiling.

The individual whose personal data is collected and processed by NUTRISSLIM has the right to request access to personal data from NUTRISSLIM and to request correction or deletion of personal data or restriction of processing concerning him or her, and the right to object to processing and the right to data portability. The individual’s request is processed in accordance with the provisions of the General Regulation and the Personal Data Protection Act.

You can also contact us at any time with questions and complaints. To ensure a prompt response, you can contact us at the following email address: [email protected].

10. Consent and Right of the Data Subject to Withdraw Consent

• When processing is based solely on your consent (point (a) of Article 6(1) of the General Regulation), the existence of the right to withdraw consent at any time does not affect the lawfulness of processing based on consent before its withdrawal.

11. Right to Lodge a Complaint with the Supervisory Authority

• In case of a violation of legislation on the protection of personal data, an individual can submit a complaint to the supervisory authority, which in the Republic of Slovenia is the Information Commissioner.

By giving consent, you confirm that you are a fully legally capable individual.

12. General Terms and Conditions and Terms of Business

• When using the website nutrisslim.com, copyright laws, rights arising from name and trademark, as well as other related rights of third parties must be respected. All contents of websites are protected, including presented images, videos, fonts, and trademarks. The individual undertakes to refrain from any misuse of content for private or commercial purposes. More information can be found in the General Terms and Conditions available and published at this link, and the Terms of Business available and published at this link.

Signed on 12 December 2023.