The purpose of this Privacy Policy, including the Personal Data Protection Notice (hereinafter: “Notice”), is to inform you about which personal data we collect and for what purposes, what we do with it, how we ensure its security, and what your rights are regarding the processing of personal data. We take the protection of your personal data extremely seriously and responsibly. We fully respect our obligations regarding the lawful, fair, and transparent processing of personal data. We advise you to familiarize yourself in detail with the content of this Notice.
To ensure the compliance of this Notice with regulations in the field of personal data protection, DRM reserves the right to amend or supplement it. You will be notified of any changes in a timely manner and in the most appropriate way, e.g., via email or by publication on the website.
Controller Information
- DRM d.o.o.
- Orleška cesta 16
- 6210 Sežana
- Slovenia
- Email: info@drm.si
Hereinafter: DRM.
What personal data do we process?
a.) Basic contact information (first name, last name, phone number, email address, address, city, town, street, country);
b.) Data on the use of our websites (clicks on links, time spent) and data regarding responses to our emails (whether the message was opened, which links you clicked);
d.) Server data (e.g., date and time of visits, subpages visited, information you viewed or searched for, etc.).
e.) Device data (data about the computer or mobile device used to access the website, including the operating system, model, web browser, etc.).
f.) Data on the use of our website.
g.) Aggregated data for advertising marketing purposes, such as products viewed and purchased, and other activities related to the purchasing process.
Legal bases for processing personal data
We collect your personal data only when strictly necessary or when you have consented to it yourself. We will not process your personal data if the purpose or basis for their processing is not appropriately justified by valid regulations in the field of personal data protection (Personal Data Protection Act, Official Gazette of the RS No. 94/07 – official consolidated text (ZVOP-1), Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR)), and the Electronic Communications Act, Official Gazette of the RS 109/12, 110/13, 40/14 – ZIN-B, 54/14 – dec. US, 81/15 and 40/17 (ZEKom-1)).
DRM will process your personal data based on the following legal grounds:
By visiting our website, you have accepted and agreed to this Notice and entered into a contract with DRM, which serves as the legal basis for processing your personal data. Data is encrypted and transmitted to the server in a protected form. Such a system prevents anyone from intercepting your personal data.
DRM also processes your personal data based on a statutory legal basis:
on the basis of national legislation, including the Prevention of Money Laundering and Terrorist Financing Act (Official Gazette of the RS, Nos. 68/16 and 81/19; ZPPDFT-1), the Personal Data Protection Act (Official Gazette of the RS, No. 94/07 – official consolidated text; ZVOP-1), the Copyright and Related Rights Act (Official Gazette of the RS, No. 16/07 – official consolidated text, 68/08, 110/13, 56/15 and 63/16 – ZKUASP; ZASP), etc., on the basis of other international treaties and EU regulations that oblige DRM to provide personal data of individuals to state authorities and other controllers in certain cases to fulfill its or their legal obligations or competencies.
DRM may process personal data based on legitimate interest, e.g.:
a.) for statistical purposes and for collecting demographic data and visitor interests,
b.) to identify server and website issues,
c.) to perform business analysis,
d.) for further development of the offer,
e.) to improve or customize services for the individual,
f.) to determine the effectiveness of promotional activities and advertising,
g.) based on other legitimate interests.
In certain cases, DRM may process your personal data based on your personal consent for marketing activities, such as sending current news and general information about the offer, novelties, benefits, events, or prize draws, and for informing you about service offers tailored to your personal interests based on profiling used by DRM for these purposes. Personal consent is entirely voluntary and is not a condition for entering into a contract. In these cases, processing takes place within the scope of the purpose stated in the declaration and the agreed methods of notification, until the consent is revoked.
Purposes of personal data processing
We may use your personal data for one or more of the following purposes:
a.) communicating with you regarding the provision of our services and responding to your inquiries;
b.) marketing communication (sending emails and SMS messages);
c.) for asserting any legal claims and resolving disputes;
d.) for advertising marketing purposes on external websites
Types of cookies, their purpose, and duration: Cookies are small files that we upload to your computer. They help the website run faster. The website uses the following cookies:
How long do we keep your personal data and what happens to it afterwards?
The retention period for personal data depends on the basis and purpose of processing each category of personal data. Personal data is kept only as long as prescribed or permitted and strictly necessary to achieve the purpose for which it was collected or further processed. After the purpose is fulfilled, we will only keep those personal data that we are obliged to keep by law or that we might need for evidentiary or defense purposes if there is a possibility of asserting legal claims. Other data is deleted, destroyed, blocked, or anonymized, unless the law provides otherwise for specific types of personal data.
Your personal data processed for sending offers and informing you about novelties is kept until your revocation or, in any case, for a maximum of five years from the granting of consent. After this period, we will ask for your consent again.
Data on issued invoices is kept for 10 years from issuance.
After the retention period expires, we effectively delete or anonymize personal data, which means we process it in such a way that it can no longer be linked to you or attributed to you.
Voluntary nature of data provision and consequences of non-provision
Providing personal data is voluntary. You are not obliged to provide us with personal data; however, if you do not provide it, you cannot enter into a contract with us (as we need it for order delivery). We will specify which data is such that its non-provision results in the stated consequences each time we obtain personal data from you.
Who has access to the personal data you have provided to us? Will we disclose your personal data to third parties or transfer it outside the EU?
We take your privacy very seriously. Your personal data is a business secret of DRM. DRM employees process your personal data in accordance with their authorizations and our internal policies. Contractual processors are committed to protecting confidential data and respecting the rights of individuals in the same way as DRM employees.
We do not provide your personal data or allow third parties to become acquainted with it, except for those who have a written contract with us, based on which they perform certain tasks related to data processing and are obliged to respect the legislation regarding the processing and protection of personal data – so-called contractual processors. Contractual processors to whom we provide personal data include, for example:
a.) marketing service providers;
b.) email service providers;
c.) software solution providers, etc.
Contractual processors may only process personal data within the scope of our instructions and may not process personal data for their own purposes. They are committed, together with their employees, to protecting the confidentiality of your personal data.
What are your rights regarding the processing of personal data?
You may request access to your personal data, its correction or deletion, restrict its processing, or object to the processing at any time. We will inform you if this request affects the possibility of the continued operation of this website. In certain cases, you also have the right to the portability of your personal data to another controller. The latter depends on the technical capabilities and internal policies of the individual controller.
You may revoke your consent for the processing of personal data for sending offers and informing you about novelties at any time, whereby the revocation of consent does not affect the lawfulness of the processing of personal data based on this consent for the period prior to the revocation.
DRM assumes no responsibility for the authenticity, accuracy, and up-to-dateness of the personal data you provide. The user is responsible for ensuring the accuracy and up-to-dateness of all provided data.
In the event of a personal data protection breach, we will notify you under the conditions determined by applicable legislation.
Procedure for exercising rights
You may address your requests regarding the exercise of rights related to personal data in writing to any contact listed at the top of this document under Personal Data Controller and Contact Information.
For the purposes of reliable identification in the event of exercising rights related to personal data, we may request additional information from you, and we may refuse to act only if we prove that we cannot reliably identify you.
We must respond to your request to exercise your rights regarding personal data without unnecessary delay and no later than one month from receipt of your request.
Any change to our personal data protection policy will be published on this website.
Right to lodge a complaint
You may lodge a complaint regarding the processing of personal data with the supervisory authority in Slovenia at any time, which is the Information Commissioner, located at Dunajska 22, 1000 Ljubljana.
Exclusion of liability
DRM is not liable for any damage you may incur because you provided the provider with incorrect, false, incomplete, or outdated data.
You are obliged to notify us immediately of any suspicion of misuse of your personal data or data required to access certain parts of the website (username and password) or if you suspect unauthorized disclosure of this data.
When a contractual relationship is established between the provider and the user, the provisions governing that relationship (contract, general terms and conditions, etc.) apply in any case regarding the exclusion and limitation of the provider’s liability.
Cookies
The basis for the cookie notice is the amended Electronic Communications Act, Official Gazette of the RS 109/12, 110/13, 40/14 – ZIN-B, 54/14 – dec. US, 81/15 and 40/17 (ZEKom-1), which entered into force at the beginning of 2013 and brought new rules regarding the use of cookies and similar technologies for storing information or accessing information stored on the user’s computer or mobile device.
What are cookies?
A cookie is a small text file that is transferred to the user’s computer when they visit a website and usually contains the name of the server from which the cookie was sent, the lifetime of the cookie, and its value – a randomly generated unique number.
The cookie itself does not contain or collect information. However, if read by a server together with a web browser, it can help the website provide more user-friendly services, e.g., by remembering your username and password for future registration or by remembering previous purchases or user account information. Only the server that sent the cookie can read and use that cookie. On a trusted website, cookies can thus enrich the experience. However, cookies can also be used in ways that constitute an interference with an individual’s privacy. Cookies are not harmful and are always limited in time.
Purpose of cookies
The purpose of cookies is to improve the functioning of the website and the user experience when viewing websites. Interaction between you and the website is faster and easier with cookies. With their help, the website remembers your personal preferences and experiences. This saves time and makes browsing websites more efficient.
DRM cookies
On the website, we exclusively use cookies that are permitted in accordance with the ZEKom-1 law. Only cookies that are strictly necessary for the operation of this website are used. To record website traffic statistics, we use a system that only records a session cookie and does not track your further behavior on the website or in connection with other pages. By continuing to use this website, you agree to the use of the cookies described below.
Some cookies we use are temporary, while others are stored on your device for a certain period, even after you leave our website. With temporary cookies, we measure the number of website visitors, which allows for checking the effectiveness of content display and the relevance of advertisements, as well as the continuous improvement of the websites. With stored cookies, we keep contact information for subsequent visits to the website, so that you do not have to log in again next time or the web display of content is adapted to your device. We also use stored cookies originating from other websites, e.g. Facebook, Twitter, Google, and others. If you do not agree to their use, the cookies will not be installed.
In addition to those listed, we also use cookies to determine how you move through our websites, what content interests you, and how long your visit lasted. Based on this, we can edit the content of the websites and adapt it to your needs.
The data we collect through cookies is processed exclusively for statistical purposes and for the purposes of collecting demographic data and visitor interests (but only in a way that your identity cannot be discovered), for identifying server problems, managing websites and informing about products, for tracking the user across different websites, adapting content to their interests, and for marketing and advertising purposes.
Final provisions
We advise you to read the General Terms and Conditions of Use, which are published on the website and, together with this Notice, form a binding contract between you and DRM.
The Privacy Policy is valid from the day of publication, i.e., from the 10th. 3. 2026.
