Privacy statement: PETROVIČ BENDEX shop

Accounts

User accounts are created internally at PETROVIČ d.o.o. after agreement with the customer. Authorised users access the platform with the user name and password assigned to them.

Controller

PETROVIČ, podjetje za trgovino in storitve d.o.o., Industrijsko naselje 15, 2325 Kidričevo, Slovenia; registration number 2139189000; VAT number SI 78213096; phone +386 (0)2 799 00 00; e-mail info@petrovic.si. Contact us with any question about the processing of your data.

Data we process

Identification data: the user’s name and surname. Contact data: e-mail address and phone number.

Account and login data: user name (usually the business e-mail address) and password, stored in protected (encrypted or hashed) form.

Usage data and logs: date and time of access, IP address, browser type and similar technical data, collected for the security of the system and to detect and prevent misuse.

We usually receive the data from your employer, our business customer, when an account is opened, or from you directly, for example when you update your contact details. We process only data that is relevant and necessary for the purposes below.

Purposes and legal bases

Managing user accounts and access to the platform, and carrying out orders and business cooperation: necessary for the contract between PETROVIČ d.o.o. and your organisation.

Communication and support, such as order confirmations, status notices, information about maintenance and the handling of complaints and technical support; system security and improvement: our legitimate interest.

Legal obligations, such as keeping order and invoice records under tax and accounting law, and disclosure to authorities where the law requires it.

Any other purpose only with your prior, explicit consent, which you may withdraw at any time.

Retention

Profile data is kept for the duration of active business cooperation and use of the platform; when a user no longer needs access or leaves the customer’s company, the profile is deactivated and the data deleted or anonymised within a reasonable time.

Order and transaction data is kept as long as accounting and tax law requires (in Slovenia invoices are kept for 10 years). Logs are usually deleted after a short period, for example a few months, unless they are needed to investigate a security incident.

Security

We apply strict technical and organisational measures: controlled physical access to premises and servers, a clean-desk and clean-screen policy, up-to-date security technology, antivirus protection and firewalls, access only for authorised staff with strong passwords, encryption of sensitive data and SSL/TLS connections, staff training and rules for secure remote work, and regular backups.

In the unlikely event of a personal data breach we act immediately and, in line with the GDPR, notify the supervisory authority and, where necessary, the persons concerned.

Processing within the company

Data from the platform is used in our internal systems (ERP, CRM, MES, TMS, OMS and others), for example on order confirmations, delivery notes and invoices or to arrange delivery. Only authorised employees and processors who need the data for their work have access to it.

Third parties and third countries

We never sell or rent your data. We may share it with contract processors that provide services for us, such as developers and maintainers of the platform, hosting providers, IT support or delivery services, under a contract and with appropriate safeguards, and with authorities where the law requires it. Every transfer is recorded.

We do not transfer personal data to countries outside the EU/EEA or to international organisations.

Your rights

You have the right to information and access, to rectification, to erasure, to restriction of processing, to data portability, to object and to withdraw consent. Send your request to info@petrovic.si or by post to our address; we will answer without undue delay and within the legal deadline. Exercising your rights is in principle free of charge.

You may lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska 22, 1000 Ljubljana (www.ip-rs.si, 01 230 97 30, gp.ip@ip-rs.si).

Cookies

The platform uses strictly necessary cookies for login, navigation and settings; most are session cookies that are deleted when you log out and close the browser. We do not use third-party analytics cookies; if we introduce them, we will ask for your consent first. You can manage cookies in your browser, but blocking the necessary ones prevents normal use of the platform.

Changes

We may update this statement from time to time and will publish the new version here with the date of the last update. This statement applies from 1 January 2025.