Baro - Premium priboljški za pse

1.) About the Privacy Policy

The purpose of the Privacy Policy of Baro, Martin Špilak s.p. (hereinafter referred to as the "Privacy Policy") is to inform users of Adria Minerali's services and other individuals (hereinafter also referred to as "individuals") about the purposes and legal basis for the processing of personal data by Baro, Martin Špilak s.p., located at Pečarovci 90, 9202 Mačkovci (hereinafter referred to as the "Company"), as well as about the rights of individuals in this field.

The company provides special care for the security of your personal data. All provided personal data are treated confidentially and used only for the purpose for which they were provided. We handle your personal data with the utmost care, in compliance with applicable legislation and the highest standards of their processing. We ensure the security of your personal data through appropriate organizational measures, work procedures, advanced technological solutions, and external experts, with the aim of providing the most effective protection for your personal data. We employ an appropriate level of protection and reasonable physical, electronic, and administrative measures to safeguard the collected data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure of personal data, or unauthorized access to personal data that have been transmitted, stored, or otherwise processed.

At the same time, this Privacy Policy further clarifies the consent you provided for the processing of your personal data.

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "General Data Protection Regulation" or "GDPR"), the Privacy Policy includes the following information:

  • company contact information,
  • purposes, legal bases, and types of processing of various types of individuals' personal data,
  • storage periods for specific types of personal data,
  • individuals' rights regarding the processing of personal data,
  • the right to lodge a complaint regarding the processing of personal data,
  • validity of the Privacy Policy.

2.) Personal data collected by the company

If you are merely a visitor to the website, we collect information about you solely through the use of cookies. If you are a user of services or a subscriber to services provided by the company, we also collect other personal data about you, that we need to provide the services you have ordered or are using. These personal data are:

  • first and last name
  • contact email address
  • contact phone number
  • IP address
  • data for issuing a quotation based on your inquiry (your address, tax number).

3.) Controller of personal data

Controller of personal data processed in accordance with this Privacy Policy is Baro, Martin Špilak s.p., Pečarovci 90, 9202 Mačkovci


4.) Categories of individuals whose personal data are processed 

This Privacy Policy is intended for all those who have subscribed to and/or use our services, or have submitted inquiries, as well as for those who visit our website.

5.) Purposes of processing and legal bases for data processing 

5.1. Processing based on a contract :

As part of the execution of contractual rights and fulfillment of contractual obligations, the company processes your personal data for the following purposes: individual identification, preparation of quotations, contract conclusion, ensuring ordered services, notifying about any changes, additional details, and instructions for using the services, addressing potential technical issues, objections, or complaints, service billing, and for other purposes necessary for the execution or establishment of a contractual relationship between the company and the individual.

During service billing, based on tax regulations, we also obtain and process your address for accurate invoice issuance.

5.2. Processing based on legal obligation:

Based on legitimate interest, we use your personal data to detect and prevent fraudulent use and abuse of services. Furthermore, within the scope of ensuring the stable and secure operation of our system and services, we use your data for purposes related to implementing information security measures, meeting service quality requirements, and identifying technical system and service malfunctions.

Based on legitimate interest, we also use your personal data for the purposes of potential enforcement, judicial and extrajudicial recovery.

In accordance with the General Data Protection Regulation, in cases of suspected abuse, the company may process data about individuals to an appropriate and proportional extent for the purpose of identification and prevention of potential fraud or abuse. If necessary, this data may also be shared with other providers of similar services, business partners, law enforcement agencies, public prosecutors, or other competent authorities. To prevent future abuse or fraud, data related to the history of identified abuses or frauds in connection with an individual, including data about the subscriber relationship and, for example, IP address, may be retained for up to five years after the termination of the business relationship.

5.3. Processing based on consent for the processing of personal data: 

Data processing can also be based on your consent provided to the company.

For example, consent might relate to receiving information about offers, benefits, and improvements to services provided by the company. The purpose of such communication is to tailor the services more closely to your needs and preferences, thus increasing their value to you. Communication is carried out through the channels you have selected in the consent. You can withdraw this consent at any time, following the procedure outlined in the Privacy Policy.

You can withdraw or modify your consent at any time in the same manner you provided it, or through another method as defined by the Privacy Policy, with the company reserving the right to verify the customer's identity. Changes to consent can also be arranged, among other means, via email to the address or through a written request sent to the company's registered address. 

The withdrawal or modification of consent only applies to data processed based on your consent. The most recent consent we have received is considered valid. The option to revoke consent does not constitute a breach of contractual obligations in the business relationship between the individual and the company.

Data for which your consent has been given will, in the absence of revocation, be processed for up to two years after the termination of the business relationship with the company.

6.) Limitations on the sharing of personal data 

If necessary, we may authorize other companies and individuals to perform specific tasks that contribute to our services. In such cases, the company may also share personal data with carefully selected external processors who will enter into a contract for the processing of personal data or an equivalent agreement or binding document with the company (hereinafter referred to as "Processing Agreement"). We will only provide or grant external processors access to such data to the extent required for a specific purpose. External processors are not allowed to use these data for any other purposes and must comply with at least all the standards for the processing of personal data mandated by applicable laws. External processors are contractually bound to maintain the confidentiality of your personal data.

Based on a substantiated request, the company may also provide personal data to relevant state authorities that have a legal basis for such request. For example, Baro, Martin Špilak s.p. will respond to requests from courts, law enforcement agencies, and other state authorities, which may also include state authorities from other EU member states.

7.) Storage period of personal data

The storage period of data is determined based on the category of individual data. We keep the data for as long as necessary to achieve the purpose for which they were collected or further processed, or until the expiration of the limitation periods for fulfilling obligations or the legally prescribed storage period.

Billing data and related contact information about individuals can be retained for the purpose of fulfilling contractual obligations until the complete payment of the service or for the maximum duration of the limitation periods related to individual claims, which may be prescribed by law to range from one to five years. In accordance with the law regulating value-added tax, invoices are kept for an additional 10 years after the end of the year to which the invoice pertains.

Other data obtained based on your consent are kept for the duration of the business relationship and an additional 2 years after its termination, unless the law prescribes a longer storage period. If an individual who has given consent for the processing of personal data has not entered into a business relationship with us, their consent remains valid for 2 years from its provision or until its revocation.

Upon expiration of the storage period, the data is deleted, destroyed, blocked, or anonymized, unless the law specifies otherwise for a specific type of data.

8.) Rights of Individuals regarding the processing of personal data 

We ensure the realization of your rights regarding the processing of your personal data without undue delay. We will respond to your request within one month of receiving it. In cases of complexity and a large number of requests, this period can be extended by a maximum of two additional months. If an extension is necessary, we will inform you of such extension within one month of receiving the request, along with the reasons for the delay.

Requests related to the exercise of your rights are accepted at the email address or by mail to the address Baro, Martin Špilak s.p., Pečarovci 90, 9202 Mačkovci.

When you submit a request electronically, we provide you with information through electronic means whenever possible, unless you request otherwise.

If there is a reasonable doubt regarding the identity of the individual submitting a request related to any of their rights, we may request additional information necessary to confirm the identity of the individual to whom the personal data relates.

If the requests from the individual to whom the personal data relates are manifestly unfounded or excessive, especially due to their repetitive nature, the company may:

  • charge a reasonable fee, taking into account the administrative costs of providing information, communication, or carrying out the requested action, or
  • refuse to take action on the request.

We provide you with the following rights regarding the processing of your personal data:

(i) the right to access the data
(ii) the right to rectification
(iii) the right to erasure ("right to be forgotten")
(iv) the right to restriction of processing
(v) the right to data portability
(vi) the right to object

(i) The right to access the data 

You always have the right to be informed whether personal data concerning you are being processed, and if so, to access personal data and the following information:

  • the purposes of processing,
  • the types of personal data being processed,
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed,
  • the envisaged retention period for the personal data or, if not possible, the criteria used to determine that period,
  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of your personal data or to object to such processing,
  • the right to lodge a complaint with a supervisory authority,
  • when personal data are not collected from you, any available information as to their source.

(ii) The right to rectification 

You have the right to obtain the rectification of inaccurate personal data concerning you without undue delay and considering the purposes of processing. You also have the right to have incomplete personal data completed, including by providing a supplementary statement.

(iii) The right to erasure ("right to be forgotten") 

You have the right to obtain the erasure of your personal data without undue delay when one of the following reasons applies:

  • the personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
  • you withdraw the consent on which the processing is based, and there is no other legal ground for the processing,
  • you object to the processing, and there are no overriding legitimate grounds for the processing,
  • the personal data have been unlawfully processed,
  • the personal data must be erased for compliance with a legal obligation under EU law or the national law of Slovenia.

(iv) The right to restriction of processing 

You have the right to obtain the restriction of processing of your personal data in cases where one of the following applies:

  • you contest the accuracy of the data, for a period enabling us to verify the accuracy of the personal data,
  • the processing is unlawful, and you oppose the erasure of the personal data and request the restriction of their use instead,
  • we no longer need the personal data for the purposes of processing, but you require them for the establishment, exercise, or defense of legal claims,
  • if you have objected to processing based on the legitimate interests of the company, pending the verification whether our legitimate grounds override your grounds.

When the processing of your personal data has been restricted in accordance with the preceding paragraph, such personal data, except for storage, shall only be processed with your consent, or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person.

Before lifting the restriction of processing your personal data, we are obligated to inform you about it.

(v) The right to data portability

You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, and the right to transmit those data to another controller without hindrance from the company, where the processing is based on your consent and is carried out by automated means. Upon your request and where technically feasible, personal data can be directly transferred to another controller.

(vi) The right to object

When we process your data based on our legitimate interest for marketing purposes, you have the right to object to such processing at any time.

We will cease processing your personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

9.) The right to lodge a complaint regarding the processing of personal data 

Any potential complaint regarding the processing of your personal data can be sent to the email address or by mail to the address Baro, Martin Špilak s.p., Pečarovci 90, 9202 Mačkovci.

In case we do not respond to your request within the legal timeframe or if we reject your request, you have the option to file a complaint with the Information Commissioner.

Furthermore, you have the right to file a complaint directly with the Information Commissioner if you believe that the processing of your personal data violates Slovenian regulations or EU regulations regarding the protection of personal data.

If you have exercised the right to access your data and after receiving the decision you believe that the personal data you received are not the personal data you requested, or that you have not received all the requested personal data, you can submit a reasoned complaint to the company within 15 days before lodging a complaint with the Information Commissioner. We must decide on your complaint as a new request within five working days.

10.) Final provisions

For matters not covered by this Privacy Policy, applicable legislation applies.

The company reserves the right to amend this Privacy Policy. We will inform you about any changes by posting them on the official website Baro, Martin Špilak s.p. 30 days before its effective date. 

If you have any questions regarding the Privacy Policy or the data we hold about you, please contact us at the email address

11.) Validity of the Privacy Policy 

This Privacy Policy is published on the website Baro, Martin Špilak s.p. and becomes effective on 25.5.2023.

Baro, Martin Špilak s.p.

Basket summary
Back to top