Data protection

The privacy policy applies to data processing by:

EOS KSI d.o.o., Slovenija
Letališka cesta 33
SI-1000 Ljubljana
Phone: +386 1 3000 500
Fax: +386 1 3000 501
Email: info@eos-ksi.si

Managing Director: Janez Klančar

Commercial Register:  Ljubljana District Court
No.: 1/33483/00

The data protection officer for the company EOS KSI d.o.o., Slovenija can be contacted at the above address or by email dpo@eos-ksi.si.

This privacy policy applies to the collection of personal data on our website and the subsequent processing of these data by us.

This privacy policy further serves towards provision of information pursuant to Articles 13 and 14 of the GDPR for data processing outside the scope of collection via this website. As such we will provide you with separate privacy policies for specific data processing activities on a case-by-case basis.

This privacy policy does not apply to data processed by the other companies of EOS Group. This is also the case if these other companies of EOS Group along with their contacts are named on our website and/or their services are shown on our website.

The other companies of EOS Group will provide you with separate privacy policies for specific data processing activities on a case-by-case basis

a. When visiting a website

When you visit our website https://si.eos-solutions.com/en/ , the browser of your device automatically sends the data to the server of our website. This information is temporarily stored in a log file. Without your intervention, the following data is collected and automatically deleted after 3 days:

• IP address of the computer from which the data was obtained;
• date and time of access;
• the name and URL of the obtained file;
• the website you accessed from (referral URL);
• the website obtained from our website;
• your computer's browser and possibly the operating system and the name of your access provider.

That data shall be processed for the following purposes:

• to ensure a smooth connection to the website
• to ensure the comfortable use of our website
• to analyze the security and stability of the system and
• for other administrative purposes.

The legal basis for data processing is Article 6 (1) (f) of the GDPR. Our legitimate interest stems from the above purposes of data collection. We do not use the data in any way to draw conclusions about you (profiling).

In addition, we use cookies and analytical services when visiting our website. More details are provided in points 6 and 7 of this Privacy Policy.

b. When you contact us by email

You can contact us with any questions via the email addresse above.

The data transmitted via e-mail will be saved. The legal basis for the processing of data for the purpose of contact is Article 6 (1) (f) of the GDPR. If you contact us for the purpose of concluding a contract, the additional legal basis for data processing is Article 6 (1) (b) of the GDPR.

After we process your request, we delete your personal data, unless in the case of processing or storage there is another legal basis.

c. When registering and using the Client Portal

When you register on the client portal https://online.eos-ksi.si/eos-gate/#/login the following personal data is processed, which we obtain either directly from you or when you visit the client portal:

• First and last name, email of the user who creates the user account
• Date, time of login, IP address, location of the user
• Personal data you provide to us in case of technical support

Above personal data is processed for the following purposes:

• Enabling secure access to the client portal
• For the purpose of performing a contract or managing a business relationship
• To provide technical assistance to the user

The legal basis for the processing of your personal data is Article 6 (1) (b) GDPR. Processing of your personal data is carried out for the purposes of the performance of a contract (acceptance of the general terms and conditions of use of the portal). Personal data is not used for the creation of profiles about an individual.

Your personal data is kept for the duration of the contractual relationship. We stop processing your personal data and delete it at your request, in which case the user account is also deleted.

Data processor is:

EOS KSI România S.R.L.

10A Dimitrie Pompeiu Blvd020337 Bucharest
Phone: +40 21 300 35 58
Fax: +40 21 30035 57
sales@eos-ksi.ro

The Processor provides technical support for the smooth operation of the Clieant Portal. Your personal data is not forwarded on. In the event of technical problems, the Processor shall be given access to the Client Portal, where it may have access to your personal data above. Data processing agreement has been concluded in accordance with Article 28 of the General Data Protection Regulation.

We only pass your personal data on to other companies of EOS Group or other third parties (recipients) if:

• you have provided your explicit consent for one or more specific purposes pursuant to Art. 6(1) Sent. 1 (a) of the GDPR,
• disclosure pursuant to Art. 6(1) Sent. 1 (f) of the GDPR is necessary for the assertion, exercising or defence of legal claims and there is no reason to assume that you have a primary protection-worthy interest in not having your data disclosed,
• for the case that there is a legal obligation for disclosure pursuant to Art. 6(1) Sent. 1 (c) of the GDPR and
• it is legally permissible and necessary for fulfilment of contractual obligations pursuant to Art. 6(1) Sent. 1 (b) of the GDPR.
• we have the data processed on our behalf in compliance with Art. 28 of the GDPR.

Transmission of your personal data for purposes other than those listed above does not occur

Like most websites, we use cookies when you access and browse our website in order to make your visit as comfortable and effective as possible. Cookies are small files that are created by the website and are automatically stored in the browser of your device (laptop, tablet, smartphone, or similar). Cookies do not harm your device and do not contain any viruses, Trojans, or other malicious software. Information yielded in connection with the specific device used is stored in the cookie. However, this does not mean that we directly receive knowledge of your identity through this. 

Use of cookies serves, for one thing, to make use of our offering more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after you leave our website. Likewise, to optimize the user-friendliness, we also use temporary cookies, which are saved on your device for a specific defined period of time. If you visit our website again to use our services, it will automatically be recognized that you already visited us and the entries and settings you made will automatically be recognized so that you do not have to enter them again.
Cookies are divided up into the four categories of “Necessary,” “Statistics,” “Comfort,” and “Marketing.” 
Necessary cookies are required for the operation and the basic functions of our website. They enable the security-relevant functioning of this website. 

Statistical cookies are used for improving our offering and ensuring a needs-based design and the continuous optimization of our website. For this, we collect anonymized data for statistics and analytics, for example, to determine site traffic, page view statistics, user behavior, and to adapt and improve our content and the website experience. 

Comfort cookies are used for facilitating the use of our website. If you visit this website again to use our service, it will automatically be recognized that you were on our website and the entries and settings you made will automatically be recognized so that you do not have to enter them again. For example, through this, you will not have to reenter your user data every time, but rather you can access the data already entered when you visit the website again.

We use marketing cookies so that we can provide you with relevant and interest-based content when you visit our website.

The data processed through necessary cookies are for the stated purposes for safeguarding our legitimate interests pursuant to Article 6 para. 1 sent. 1 lit. f of the GDPR, such as the proper functioning of the site. 
The data collected and processed through comfort, statistical and marketing cookies is done under your given consent, in accordance with Article 6 para. 1 sent. 1 lit. a of the GDPR for the purposes of  serving personalized content, for statistical purposes that aim to improve the user experience and marketing purposes. For these you can change/withdraw your consent, by clicking on the Change Cookies settings on the bottom of the website.

Cookie Management

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a notification message always appears before a new cookie is placed. Each browser differs depending on how it manages cookie settings. This is described in the Help menu of each browser, which explains how to change your cookie settings. Follow the links below depending on the browser you are using:

• Internet Explorer
• Firefox
• Chrome
• Safari
• Opera

Complete deactivation of cookies, however, may lead to you not being able to use all of the features of our website.

We use the following cookies:

necessary

Name	Java Session Cookie
Provider	Owner of this website
Purpose	This cookie is used by the application server. It is essential for proper working of the application software. It stores no personal data.
Cookie Name	jsessionid
Cookie Duration	Session cookie - deleted after you quit your browser.

Name	cookieconsent_status
Provider	Owner of this website
Purpose	Necessary cookie to save that the cookie banner was confirmed.
Cookie Name	eos_cookies
Cookie Duration	60 days

comfort

Name	VISITOR
Provider	Owner of this website
Purpose	We use this cookie to serve personalized content.
Cookie Name	VISITOR
Cookie Duration	Session cookie - deleted after you quit your browser.

Name	NEW_Visitor
Provider	Owner of this website
Purpose	We use this cookie to serve personalized content.
Cookie Name	new_visitor
Cookie Duration	1 day

statistical

Name	nmstat
Provider	Siteimprove GmbH
Purpose	This cookie is used to help record the visitor’s use of the website. It is used to collect statistics about site usage such as when the visitor last visited the site. This information is then used to improve the user experience on the website. This Siteimprove Analytics cookie contains a randomly generated ID used to recognize the browser when a visitor reads a page. The cookie contains no personal information and is used only for web analytics.
Cookie Name	nmstat
Cookie Duration	Persistent – expires after 400 days

marketing

Name	siteimproveses
Provider	Siteimprove GmbH
Purpose	This cookie is used purely to track the sequence of pages a visitor looks at during a visit to the site. This information can be used to create User Journeys and enable visitors to find relevant information more quickly.
Cookie Name	siteimproveses
Cookie Duration	Session cookie - deleted after you quit your browser.

The tracking measures listed below and used by us are carried out on the basis of Art. 6(1) Sent. 1 (f) of the GDPR. We use these tracking measures to ensure that our website is designed according to requirements and optimised on an ongoing basis. We also use the tracking measures to collect statistics on the use of our website and analyse them for the purpose of optimising our offering for you. These interests are to be considered as being legitimate in the sense given in the aforementioned regulation.

The respective purposes for data processing and data categories can be found in the corresponding tracking tools in this section.

Siteimprove Analytics

This website uses Siteimprove Analytics, a web analytics service provided by Siteimprove. Siteimprove Analytics uses „cookies“, which are text files placed on your computer, to help EOS KSI d.o.o., Slovenija analyse how visitors use the site. The information generated by the cookies about the visitors’ use of the website will be stored and processed by Siteimprove on servers in Denmark.

IP addresses are anonymized irreversibly before data is made available in the Siteimprove Analytics or Intelligence Suite for EOS.

a)  Sharing solution

We use sharing buttons from social networks Facebook, Twitter, Google+, LinkedIn, Xing on our website. The buttons are simple HTML links. The procedure we use is within the framework of the Shariff solution. With the Shariff solution a script retrieves the number of times, e.g., the share button on a page has been clicked on: for this the script contacts the social network via the programming interfaces and retrieves the numbers.

None of your personal data are transmitted in the process. Rather than your IP address, only our server address is transmitted to Facebook, Google and Twitter. You only become directly connected to Facebook, Google or Twitter if you perform an action. Before that the social networks cannot collect any data about you. As long as you do not click on a link to share content, you remain invisible to the networks. If you click on a link, the obligation to provide information about data collection and processing no longer rests with us, but rather with the operator of the social network.

b) YouTube

Our website contains links to videos from YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. If you visit a website on our website that contains such a video, a direct connection is established between your browser and the YouTube server after you have activated the video.

YouTube receives the information that you have visited our website with your IP address. If you click on the link to the video, your IP address will be forwarded to YouTube. We would like to point out that, as the provider of our website, we have no knowledge of the content of the transmitted data or of its use by YouTube. For more information, please see YouTube's privacy policy (https://www.youtube.com/)

You have the right:

• pursuant to Art. 15 of the GDPR to request information about your personal data processed by us, in particular about the purposes for processing, the personal data category, the categories of the recipients to whom your data have been or will be disclosed, the planned retention duration, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if they were not collected by us and the existence of automated decision-making including profiling and if applicable meaningful information about their details;
• pursuant to Art. 16 of the GDPR to demand the immediate rectification of incorrect or completion of the personal data saved by us about you.
•  pursuant to Art. 17 of the GDPR to demand the erasure of the personal data saved by us about you as long as processing is not necessary for exercising of the right to freedom of expression and information, for fulfilment of a legal obligation, for reasons of public interest or for assertion, exercising or defence of legal claims;
• pursuant to Art. 18 of the GDPR to demand the restriction of processing of your personal data as long as the accuracy of the data is questioned by you and processing is unlawful, but you reject their erasure and we no longer need the data, but you require them for assertion, exercising or defence of legal claims or you have filed an objection to the processing in accordance with Art. 21 of the GDPR;
• pursuant to Art. 20 of the GDPR to demand receipt in a structured, standard and machine-readable format of your personal data which you provided to us or transmission to another responsible party;
• pursuant to Art. 7(3) of the GDPR to withdraw the consent you previously granted us at any time. This has the consequence that we may not continue the data processing upon which this consent was based in the future and
• pursuant to Art. 77 of the GDPR to file a complaint with a supervisory authority. Usually you can contact the supervisory authority in your usual place of residence or workplace or our headquarters.

If your personal data are processed on the basis of legitimate interests in accordance with Art. 6(1) Sent. 1 (f) of the GDPR you have the right pursuant to Art. 21 of the GDPR to object to the processing of your personal data as long as there are reasons arising from your particular situation for this or the objection is directed to direct advertising. In the latter case you have a general objection right which will be implemented by us without statement of any particular situation.

If you would like to make use of your right to withdraw or reject you only need to send an email to dpo@eos-ksi.si.

Within the website visit we use the widespread SSL (secure socket layer) method in conjunction with the highest level of encryption supported by your browser. In general this is 256-bit encryption. If your browser does not support 256-bit encryption, we fall back on 128-bit v3 technology instead. You can recognise that an individual webpage in our internet presence is being transmitted in encrypted form by the closed key or padlock icon in the bottom status bar of your browser.

We also take suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are being improved continuously according to technological developments.

This privacy policy is currently valid and was last updated in May 2018.

It may be necessary to change this privacy policy due to improvements in our website and the offerings via our website or due to changed legal or official requirements. The current privacy policy can be retrieved from our website at si.eos-solutions.com and printed out at any time.