PRIVACY POLICY 

Last updated: 19. 9. 2023

‍

Welcome to our Website! 

OPUS SOLIS, sončna energija in poslovne storitve, d.o.o. (“OPUS SOLIS”, "we", "our") is a company registered in Slovenia with the business address: at Štihova ulica 13, 1000 Ljubljana, and its registration number: 9457160000, which operates the website https://www.opus-solis.com/home-en (the “Website") and which provides services in the field of solar power and associated energy solutions, including the planning and construction of turnkey solar power plants and consulting in the field of solar energy (the “Services"). 

‍

OPUS SOLIS is the processor of your Personal Data for the purposes set out in this Privacy Policy (the “Privacy Policy”) and is responsible for the collection, use, disclosure, retention and protection of your Personal Data in accordance with this Privacy Policy. 

‍

At OPUS SOLIS, we value your privacy and therefore want to use the information in this Privacy Policy to help you understand what Personal Data we collect about you, why we collect it, how we use it, what processing procedures we carry out, as well as what your rights are and how you can exercise them. In order to familiarise yourself with the contents of this Privacy Policy, we encourage you to read the Privacy Policy in detail. 

‍

The Privacy Policy applies to all Users and partly Clients, as laid out in our Terms and Conditions (the “Terms and Conditions”), unless the circumstances indicate otherwise. Our Terms and Conditions are available at https://www.opus-solis.com/legal-en/terms-and-conditions. 

TABLE OF CONTENT

1. Consent to, withdrawal and restriction of the processing of Personal Data
2. Definitions
3. What Personal Data do we collect? 
4. What do we do with the collected Personal Data? 
5. How do we protect your Personal Data?
6. What are your rights?
7. Links to other websites
8. Do we use cookies?
9. Changes to the current Privacy Policy
10. How to contact us?

‍

1. CONSENT TO, WITHDRAWAL AND RESTRICTION OF THE PROCESSING OF PERSONAL DATA 

By accessing and using our Websites, by submitting the contact form or by otherwise contacting us or ordering our Services that do not arise from the use of our Websites, you consent to the collection, storage and processing of your Personal Data and to the application of the provisions of this Privacy Policy. Where consent is required for the processing of your Personal Data, we will ask you to provide that consent. We reserve the right to inform you about the processing of your Personal Data at a later date. These notices may supplement or clarify our Privacy Policy or provide you with additional choices about how we process your Personal Data. 

Your consent to the processing of your Personal Data for the purposes described in this Privacy Policy is voluntary. You may restrict or withdraw your consent to the processing of your Personal Data at any time by notifying OPUS SOLIS, but this will have no effect on any contractual relationship between you and OPUS SOLIS or on the use of the Services that do not require such consent. 

OPUS SOLIS will continue to process, even after withdrawal of your consent, only the data relating to you that it is required to process in order to comply with its legal obligations, to perform its contract with you and to pursue its legitimate interests. 

If you do not agree with any part of this Privacy Policy, please stop accessing and using our Website.

2. DEFINITIONS

“GDPR” stands for the EU General Data Protection Regulation (Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data).

‍

"Personal Data" (in the context of this Privacy Policy) means any information that identifies or describes an identifiable individual. This information includes, but is not limited to, information relating to an individual's name, age, gender, reproductive status, marital, national, ethnic or social origin, sexual orientation, physical or mental health, disability, conscience, beliefs, culture, language and birth. This information also includes an individual's educational, criminal or employment history, financial situation or information relating to financial transactions in which they have been involved, and any identification number, address or contact details of the individual.

‍

Privacy Policy means this document, which describes how, why, on which grounds and under which conditions does OPUS SOLIS collect, use, disclose, retain and protect your Personal Data and which Personal Data does OPUS SOLIS collect. 

‍

Terms and Conditions mean the OPUS SOLIS Terms nad conditions, which  govern the rights and obligations between you or the company you represent and OPUS SOLIS in connection with your use of our Website. and in part you, as a Client regarding our Services according to the Terms and Conditions and any additional agreements between you and OPUS SOLIS. The Terms and Conditions are available on: https://www.opus-solis.com/legal-en/terms-and-conditions. 

‍

ZVOP-2 means the Slovenian Personal Data Protection Act (Uradni list RS, št. 163/22), which went into force on 26.1. 2023. This act more specifically regulates certain aspect of Personal Data protection in the Republic of Slovenia on the basis of GDPR. 

‍

The following terms "controller", "processor", "data subject", "processing activity", "pseudonymisation", "cross-border processing of Personal Data", "supervisory authority" used in this Privacy Policy shall have the same meaning as in the GDPR, unless the context otherwise requires. 

‍

All other terms used in this Privacy Policy shall have their meanings as defined in our Terms and Conditions, unless the context otherwise requires.

3. WHAT PERSONAL DATA DO WE COLLECT?

1. General information 

We collect your Personal Data when you use our Website, when you contact us (e.g. email, telephone, etc.) and through our online contact form. This enables us to provide you with the Services and operation of our Website efficiently. All Personal Data will be processed lawfully, fairly and in a transparent manner. 

2. Basis for collecting Personal Data 

OPUS SOLIS receives, collects, stores and processes the Personal Data provided on the basis of a contract with the Client or on the basis of the Client's explicit consent.

Due to the nature of the Services, certain processing of Personal Data is necessary for the performance of the contract between OPUS SOLIS and you. If you withdraw your consent, the performance of the contract and thus the performance of the Services, and our communication may no longer be possible. 

In some cases, OPUS SOLIS has developed legitimate interests in the processing of Personal Data. OPUS SOLIS's legitimate interests include: 

• asserting any legal action, claim or dispute or defending OPUS SOLIS against any action, claim or dispute;
• compliance with a court order or other legal process, or legal and regulatory requirements of government authorities;
• ensuring information security, including unauthorised access to the Services or confidential information. 

On the basis of legitimate interest, OPUS SOLIS processes Personal Data collected in the context of the performance of a contract or on the basis of the consent of the data subject. Such processing may continue until the lack of legitimate interest is demonstrated.

3. Personal Data we collect

We only collect Personal Data that is necessary for our communication, to inform you and for the provision of the Services. What Personal Data is collected and processed depends on how you interact with our Website, your communication, what you provide in your contact form and the preferences and choices you make about your privacy.

‍

The Personal Data we collect:

• contact details (such as personal name, email, phone number, address, etc.);
• information about the use of our Website;
• device data: information that could identify your device, such as the serial number of your device, or about your device, such as the type of browser; 
• usage data: information about your activity and use of our Services and Websites, including browsing history; search history; product interaction; malfunction, performance and other diagnostic data; and other usage data;
• technical information: including the Internet Protocol (IP) address used to connect your computer to the internet, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; information about your visits, including URLs (uniform resource locator), clickstream to the Website, Services offered, Services viewed or searched for, page response times, download errors, length of visits to specific pages, information about your interaction with the Website (such as page navigation, clicks and mouse movements), the methods used to navigate the site, and any telephone number used to contact us; 
• other information you provide to us: for example details such as the information regarding your specific project, location and needs for the provision of our Services and to obtain the necessary permits (including technical information regarding electrical measurements, electric grid specifications and other relevant data) to provide our Services, the information regarding invoices, the content of your communications with the company, etc.

4. Restriction options

You can also choose what Personal Data we collect about you. Where we ask for your consent to obtain and process Personal Data, you can refuse to do so. If you do not provide us with all the information we need to operate the Website, you may experience certain problems in using it. Also, if you do not provide us with the necessary information to provide the Services, we may not be able to provide those Services. 

4. WHAT DO WE DO WITH THE COLLECTED PERSONAL DATA? 

1. Use of Personal Data

We use the collected Personal Data for communication, support, for the functioning of our Website, to provide our offers and Services and to pursue our legitimate interests. 

‍

Some Personal Data may also be used for marketing purposes (e.g. we may use your email address to send you certain marketing campaigns and offers about our Services).

‍

Personal Data is not used to make automated decisions. 

2. Where and for how long do we keep your Personal Data?

Personal Data is stored digitally on third-party servers, specifically on servers of Webflow, located in the European Union and the United States of America, whereas Webflow is registered with the U.S. Department of Commerce as a company that follows the standards and safeguards set forth in the EU with the GDPR and associated regulations pursuant to the EU-USA Data Privacy Framework, as set forth on the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000TT9jAAG&status=Active. Personal Data is stored on these servers on a until there is a basis for such storage or until you withdraw your consent. 

‍

Your Personal data is stored from the moment you submit our online contact form, you otherwise contact us and provide us with your Personal Data (e.g.: through email or telephone). We store different Personal Data for different durations of time: 

• the information regarding invoices are stored until the end of any warranties or any provision of our Services, as agreed between the Client and OPUS SOLIS, but where no such warranties or Services are present, these are stored for 15 years from their issuing (for the technical nature of the Services);
• information needed to establish and fulfill an agreement between the Client and OPUS SOLIS are stored for 15 years from their provision (for the technical nature of the Services);
• Personal Data and metadata sent through the online contact form, are stored indefinitely or until you withdraw your consent; 
• other Personal Data that we process on the basis of your consent are stored until the withdrawal of your consent. 

3. Who has access to your Personal Data in addition to us?

We do not transfer your Personal Data to third parties (outside of OPUS SOLIS), other than those who have concluded contracts with us regarding the storage, use or processing the Personal Data and are following the legal safeguards for the protection of such Personal Data. Such a company is also Webflow that safeguards the Personal Data pursuant to Sub-article 4.2. of this Privacy Policy. 

‍

The aforementioned third parties shall use the Personal Data only in accordance to our instructions and not use the Personal Data for personal use. Personal Data shall also not be transferred to third countries, except as set forth in the Sub-article 4.2. of this Privacy Policy.

5. HOW DO WE PROTECT YOUR PERSONAL DATA?

Your Personal Data is processed in a way that ensures adequate security, which is handled by Webflow. This includes protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.

We do our best to protect your Personal Data. Unfortunately, transmission of information over the internet is never completely secure and, despite our best efforts, we cannot guarantee the complete security of your Personal Data and accept no liability in the event of a breach of security. We also cannot guarantee the complete security of your Personal Data in the event of hacker attacks or other intrusions into our systems. In the event of such intrusions or attacks, we assume no responsibility for the disclosure of your Personal Data.

Appropriate technical and organisational measures are in place to ensure that only Personal Data necessary for each specific purpose of processing are processed. This applies to the amount, scope of processing and accessibility of the Personal Data collected. Such measures are taken to ensure that Personal Data is not accessible to an unlimited number of persons without your intervention, so that the scope and acces of your Personal Data is minimised. 

In the event of a Personal Data breach: we will notify the competent supervisory authority without undue delay, as far as practicable, but at the latest within 72 hours after becoming aware of the breach. We will also notify you without undue delay if there is a risk to your rights and freedoms as a result of a Personal Data breach. 

The above provision does not apply in cases where such a breach would be unlikely to jeopardise your rights and freedoms, or where we have implemented appropriate technical and organisational safeguards applicable to the protection of the Personal Data affected by the breach, or where our further measures ensure that the risk is unlikely to materialise. Nor does the above provision apply where it would involve a disproportionate effort. In the cases described above, we will inform you by public communication or by similar equally effective means.

6. WHAT ARE YOUR RIGHTS?

Under the GDPR, as a user of our Websites (and Services), you are granted certain rights regarding the processing of your Personal Data. 

1. Right to information - you have the right to accurate, transparent, comprehensible and easily accessible information regarding the processing of your Personal Data. 
2. Right of access - You have the right to access the Personal Data we hold about you. You can ask us to confirm whether your Personal Data is used and how it is used (e.g. purposes of processing, recipients). We will also provide you with a copy of your Personal Data upon your request.
3. Right to rectification (updating your data) - upon your request, we will ensure that inaccurate Personal Data is updated without undue delay. You also have the right to have incomplete Personal Data completed, depending on the purposes of the processing.
4. Right to erasure (deletion of your data) - once certain criteria are met (Article 17 GDPR), you have the right to request that we delete all your Personal Data that we process without undue delay. 
5. Right to restriction of processing - in certain circumstances (Article 18 GDPR), you can request that we restrict the way we process your Personal Data.
6. Right to data portability - you have the right to receive your Personal Data that we hold in a structured, commonly used, machine-readable format. You can also transfer this data to a third party service provider. Please note that this right only applies if we are using your data on the basis of your consent or in performance of a contract and our use of your data is by automated means. 
7. Right to object - You have the right to object to our processing of your Personal Data at any time, provided that you have a valid reason for doing so. If there are no compelling legitimate grounds for further processing, we will stop processing your Personal Data. This right also allows you to request that we stop using your Personal Data for direct marketing purposes. 
8. Right to object to automated processing -  You have the right to object to decisions being made with your data solely based on automated processing, including profiling.

Complaints - You can lodge a complaint with the relevant data protection authority under the conditions set out in the GDPR and ZVOP-2 (if applicable to you in Slovenia). 

In the event of a Personal Data breach in Slovenia, you may lodge a complaint against the controller with the competent supervisory authority at the Information Commissioner's Office, Zaloška 59, 1000 Ljubljana or at gp.ip@ip-rs.si. In the cases of other countries, refer to your competent supervisory authority regarding a Personal Data breach.

If you have any questions about your rights or the circumstances in which those rights apply, please contact us. You can also read more detailed descriptions of each right in Chapter III of the GDPR (https://eur-lex.europa.eu/eli/reg/2016/679/oj). 

Legal bases for processing EU residents' data - We will only process your Personal Data if one (or more) of the following requirements is met:

• When we have your consent. If consent is the legal basis for processing your Personal Data, you can withdraw your consent at any time.
• When the processing is necessary for the performance of a contract to which you are a party (e.g. to provide Services you have requested).
• To meet our legal obligations.
• When it's necessary to protect your vital interests or those of others.
• Where processing is necessary for the performance of a task carried out in the public interest. 
• When we or a third party have a legitimate interest in processing your Personal Data.

7. LINKS TO OTHER WEBSITES

Our Website may contain certain hyperlinks to other websites/applications that are not operated by OPUS SOLIS, including the link to the site Calendly and their platform so you can get in touch with us easier and faster. You may be notified when you leave our Website. We are not responsible for your Personal Data collected and stored by these sites, platforms and similar third parties. The latter have their own privacy policies and are not subject to this Privacy Policy. Accordingly, we recommend that you read their privacy policies carefully before providing them with your Personal Data.

Our Website may also include social media features such as a Facebook button and widgets such as a “Share” button or interactive mini-programmes that run on our Website. These features may collect your IP address and may set a cookie to enable the feature to function properly. Social media features and widgets are provided by third parties on their website/application or directly on our Website. Your interactions with these features are governed by the privacy policy of the company providing them. Theefore, we recommend that you read their privacy policies carefully before providing them with your Personal Data.

‍

8. DO WE USE COOKIES?

Yes, OPUS SOLIS uses web cookies in accordance with the OPUS SOLIS Cookie Policy, available at: https://www.opus-solis.com/legal-en/cookie-policy.

‍

9. CHANGES TO THE CURRENT PRIVACY POLICY

We reserve the right to make certain changes to the current Privacy Policy where necessary. For this reason, we encourage you to read our Privacy Policy from time to time to keep up to date. You will see the date of the last update at the beginning of our Privacy Policy.

10. HOW TO CONTACT US?

It is essential to OPUS SOLIS that your privacy needs are met and that you are fully informed. If you have any further questions or complaints about our Privacy Policy, you can contact us at: 

‍

OPUS SOLIS, sončna energija in poslovne storitve, d.o.o.

Štihova ulica 13

1000 Ljubljana

info@opus-solis.com

‍

‍

SUBJECT: PERSONAL DATA PROTECTION

‍