Respecting individual privacy, including the protection of personal data, is of utmost importance to us. Geo Energy d.o.o. is firmly committed to the protection of personal data. This policy describes why and how we collect personal data and informs individuals of their rights. We may use the personal data we receive for any of the purposes described in this policy, or in any other manner indicated at the point of collection.
Personal data refers to any information relating to an identified or identifiable living individual. Geo Energy d.o.o. processes personal data for various purposes, whereby the means of collection, legal bases for processing, use, disclosure, and retention periods may vary depending on the specific purpose.
Our policy on the collection and use of personal data focuses on ensuring transparency regarding the reasons for and methods of personal data processing.
We take the security of all data we store very seriously. We adhere to internationally recognized security standards. We have established a framework of policies, procedures, and training regarding data protection, confidentiality, and security, while also conducting regular reviews of the adequacy of the measures implemented to ensure the security of stored data.
For more information, read the sections that apply to your specific situation.
Collection of personal data: Geo Energy d.o.o. processes personal data regarding contacts (existing and potential clients of the company and/or individuals associated with them) using customer relationship management (CRM) systems.
The collection of personal data about contacts and the addition of such personal data to the CRM system starts at the initiative of the user from the company and includes the name, title of the contact, phone number, email address and other data about the business contact. The CRM system can also collect data through the company's e-mail systems (sender's name, recipient's name, date and time) and calendar (organizer's name, participant's name, date and time of the event), resulting from communication between company users and contacts or third parties.
Use of personal data: Company personnel have access to personal data concerning business contacts and may use it to gain a better understanding of an open order, a customer, or an opportunity of interest, for the following purposes:
– business development and the sale of goods and services,
– sending notifications regarding the company and its range of goods and services,
– granting company employees access to personal data for the purpose of performing tasks related to the sale of goods and services,
– identifying customers with similar needs,
– conducting market trend analyses and mapping relationships or sales opportunities.
In addition, the CRM system uses an algorithm that assesses the strength of communication between a company user and a contact. The ranking is based primarily on the frequency, duration and recency of communications and on response times.
Legal basis for processing
We will process the personal data of our business contacts on the basis of our legitimate business interests or consent, where the data subject has been asked to provide it. Our interest is in marketing goods and services or sending communications that we believe may be of interest to recipients.
Data retention
We will retain personal data in the CRM system for as long as necessary for the purposes set out above (for example, for as long as we maintain or are required to maintain records of our relationship with a business contact).
Collection of personal dataOur policy is to collect only the personal data necessary for the specified purposes, and we ask our clients for personal data only where it is necessary for those purposes.
Where we need to process personal data in order to carry out our activities, we ask our clients to provide data subjects with the necessary information about how their personal data will be used.
Our clients may use the relevant sections of this Privacy Policy or direct data subjects to review this Privacy Policy where they consider it appropriate.
In general, we collect personal data from our clients or from third parties acting on the instructions of the relevant client.
Personal data may include a name, job title, telephone number, email address and other business contact information.
Use of personal dataWe use personal data for the following purposes:
Sale of goods and provision of professional services
At our company, we provide tailored energy solutions in the field of electrical energy storage, including the sale of advanced battery energy storage systems and a comprehensive range of services related to the delivery, installation and commissioning of the appropriate energy storage system.
Carrying out these activities requires certain processing of personal data.
Managing, operating and developing the business
We process personal data in the course of operating the company, including:
– customer relationship management,
– business development (such as identifying client needs and finding the most appropriate energy solutions),
– maintenance and use of information systems,
– management and operation of our website, systems and applications.
Activities to ensure security, quality and risk management
We have security measures in place to protect information about our company and our clients, including personal data. These measures include detecting, investigating and resolving security threats. We may process personal data as part of the security monitoring we carry out. To ensure quality, we monitor the goods and services we provide to clients, which may involve processing personal data stored in the relevant client files. We have policies and procedures in place to monitor the quality of goods and services and to manage risks associated with client engagements. We collect and retain personal data as part of our client engagement and client acceptance procedures.
Compliance with all legal, regulatory or professional-body requirements
Like any provider of goods and services, we are required to comply with legal, regulatory and professional obligations. To demonstrate compliance with these obligations, we must maintain certain records that may contain personal data.
Legal basis for processing
Where processing is necessary to comply with a legal obligation, such as obligations under tax legislation or the need to evidence and document professional services performed, the processing is based on that legal obligation.
We may also process the personal data of individuals associated with our business clients on the basis of our legitimate business interests, such as delivering goods and providing services related to the supply of goods to the relevant client, or on the basis of consent where the data subject has been asked to provide it.
Data retention
We retain the personal data we process for as long as we consider necessary for the purposes for which it was collected, including as required by applicable law or regulation.
Unless specific legal, regulatory or contractual requirements apply, the standard retention period for records and other documentary evidence created in the course of the company's activities will not exceed 10 years.
Collection of personal data
Our policy is to collect only the personal data necessary for the specified purposes, and we ask our clients for personal data only where it is necessary for those purposes.
Where we need to process personal data in order to carry out our activities, we ask clients to provide the other data subjects involved with the necessary information about how their personal data will be used.
Depending on the services we provide to private customers, we process various types of personal data, including contact information and information relating to business activities. For certain services or activities, and where required by law or based on an individual's consent, we may also collect special categories of personal data. In general, we collect personal data from our clients or from a third party acting on the instructions of the relevant client.
Use of personal data
We use personal data for the following purposes:
Sale of goods and provision of professional services
At our company, we provide tailored energy solutions in the field of electrical energy storage, including the sale of advanced battery energy storage systems and a comprehensive range of services related to the delivery, installation and commissioning of the appropriate energy storage system.
Carrying out these activities requires certain processing of personal data.
Managing, operating and developing the business
We process personal data in the course of operating the company, including:
– customer relationship management,
– business development (such as identifying client needs and finding the most appropriate energy solutions),
– maintenance and use of information systems,
– management and operation of our website, systems and applications.
Activities to ensure security, quality and risk management
We have security measures in place to protect information about our company and our clients, including personal data. These measures include detecting, investigating and resolving security threats. We may process personal data as part of the security monitoring we carry out. To ensure quality, we monitor the goods and services we provide to clients, which may involve processing personal data stored in the relevant client files. We have policies and procedures in place to monitor the quality of goods and services and to manage risks associated with client engagements. We collect and retain personal data as part of our client engagement and client acceptance procedures.
Sending clients information about our company and our range of goods and services
In accordance with applicable law, we use clients' contact details to send them information about us and our activities, our range of goods and services, developments relating to smart energy solutions, and current trends and technologies that we believe may be of interest to them.
Compliance with all legal, regulatory or professional-body requirements
Like any provider of goods and services, we are required to comply with legal, regulatory and professional obligations. To demonstrate compliance with these obligations, we must maintain certain records that may contain personal data.
Legal basis for processing
Where the processing of personal data described in this section is necessary for the performance of a contract to which the data subject is a party, for example where processing is required to supply goods and services, the processing is based on the contractual legal basis.
Where processing is necessary to comply with a legal obligation, such as obligations under tax legislation or the need to evidence and document professional services performed, the processing is based on that legal obligation.
Where personal data is processed for the other purposes described above, we will rely on legitimate interests or consent where the data subject has been asked to provide it.
Data retention
We retain the personal data we process for as long as we consider necessary for the purposes for which it was collected, including as required by applicable law or regulation.
Unless specific legal, regulatory or contractual requirements apply, the standard retention period for records and other documentary evidence created in the course of the company's activities will not exceed 10 years.
We provide external users with access to various applications that we manage. These applications have their own privacy notices explaining why and how personal data is collected and processed within the relevant application.
Individuals who use our applications should refer to the privacy notices available within those applications.
We collect personal data when an individual contacts us with a question, complaint, comment or feedback, including their name, contact details and the content of the communication. In such cases, the individual controls the personal data they share with us, and we will use that data only to respond to the communication and deal with the matter appropriately. The personal data referred to above may include a name, job title, telephone number, email address and other business contact information.
Legal basis for processing
Where personal data is processed for the other purposes described above, we will rely on legitimate interests or consent where the data subject has been asked to provide it.
Data retention
We retain the personal data described in this section for as long as we consider necessary for the purposes for which it was collected.
Introduction
Geo Energy d.o.o. is firmly committed to protecting personal data. This Privacy Policy explains why and how we collect personal data during the recruitment process and provides information about the rights of candidates applying for employment with our company.
Personal data is any information relating to an identified or identifiable living individual.
Our policy on the collection and use of personal data is intended to ensure transparency about the reasons for and methods of processing personal data.
Security
We take the security of all data we hold very seriously. We follow internationally recognised security standards. We have established a framework of policies, procedures and training relating to data protection, confidentiality and security, and we regularly review the adequacy of the measures we have implemented to ensure the security of stored data.
Collection of personal data
As part of our recruitment process, we collect personal data about job applicants. Personal data may be provided directly by the candidate or obtained from a third party, such as a recruitment agency, depending on the recruitment process concerned.
The data we process includes standard information about your education, employment history, other work-related information and any other information obtained from your CV, application or other recruitment forms that you are required to complete as part of the recruitment process.
Please do not provide us with any special categories of personal data, including information about race, ethnic origin, political opinions, religious beliefs, trade-union membership, genetic and biometric data where used for identification purposes, health data, or data concerning sex life or sexual orientation.
Use of personal data
We use the data we hold about you for the following purposes:
– to enable you to participate in the recruitment process for a specific position,
– to inform you about relevant employment opportunities within the company, where you have given your consent.
Legal basis for processing
Geo Energy d.o.o. retains and processes your data on the applicable legal basis, including employment-law provisions where you apply for a position under an employment contract with the company, and on a contractual basis where you apply for work under a civil-law contract. We may also process some of your data in pursuit of our legitimate interests in recruiting you as a candidate. Where you give consent for us to use your data for specific purposes, we will process the data on the basis of that consent.
If the recruitment process is unsuccessful, we will retain your data in accordance with your consent.
Data retention
If your application is successful, your data will be retained for the purpose of fulfilling the employment or contractual relationship in accordance with applicable law. Application documents of unsuccessful candidates are deleted no later than six months after the recruitment process ends. Before retaining your application documents for a longer period in our candidate database, we will ask for your consent.
Collection of personal data
We have security measures in place at our business premises. Entry to the premises is possible by prior arrangement. Video surveillance is carried out at the premises located at Bolfenška ulica 62, Maribor. A notice displayed before entering the building informs visitors that video surveillance is in operation, allowing them to be informed about the surveillance and to choose not to enter the monitored area.
The notice clearly states, in writing and graphically, that video surveillance is carried out for the protection of people and property. Information about the video surveillance can be obtained via the email address stated in the video-surveillance notice displayed at the entrance to the building.
Video-surveillance recordings capture only images of individuals and no other data.
Contact details for data protection
The controller has not appointed a Data Protection Officer (DPO). All information relating to personal data protection can be obtained by emailing info@geoenergy-group.com.
Use of personal data
Personal data is used for the purpose of ensuring the safety of people and property, including the company's employees, clients, business partners, visitors and others who enter the business premises.
Legal basis for processing
The processing is necessary to protect the vital interests of the data subject or another natural person and for the legitimate interests pursued by the controller.
Data retention
Video-surveillance recordings are retained for 72 hours.
Specific impacts of processing
Recordings may be reviewed retrospectively and extracts may be prepared for authorised recipients, such as the police.
Unusual further processing
Video recordings are not transferred to third countries, and no live monitoring is carried out.
Collection of personal data
Website visitors generally control the personal data they share with us. Through the use of cookies on our website, a limited amount of personal data may be collected automatically. More information is provided in the Cookies section below.
We may receive personal data from website visitors, such as name, job title, company address, email address, telephone number and fax number, for example when an individual subscribes to receive updates.
Visitors may also send electronic messages through our website. Their messages may contain the user's online identifier, email address and any additional information the user chooses to include in the message.
When using our website, please do not provide us with sensitive information, such as information about race or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, physical or mental health, genetic data, biometric data, sex life or sexual orientation, or criminal records. If, for any reason, you choose to provide us with sensitive information, doing so constitutes your explicit consent for our company to collect and use that information in the ways described in this privacy notice or as described at the point at which you choose to disclose it to us.
Cookies
Small text files, or “cookies”, that are downloaded to your device help us personalise and enhance your browsing experience by displaying content that is more relevant and interesting to you. The use of cookies is standard practice on most websites. If you do not wish to use cookies, most browsers allow you to refuse their installation. Registration on our website may require you to accept cookies. Certain website functions may be limited if cookies are disabled. After visiting our website, you may delete cookies from your system if you wish.
More information about our use of cookies can be found on the Cookies page.
Use of personal data
We will use personal data provided by a visitor for the purposes for which it was provided, as stated at the point of collection or as is apparent from the context of collection. As a rule, personal data is collected for:
– registration for specific sections of the website,
– subscribing to receive updates,
– requesting additional information,
– providing requested reference materials,
– submitting enquiries and CVs,
– monitoring and ensuring compliance with the terms and conditions governing use of our website,
– managing and operating our website,
– aggregated data for website analytics and improvements.
We may also use your information to keep you informed about us and our activities, our range of goods and services, developments relating to smart energy solutions, and current trends and technologies that may be of interest to you, unless you ask us not to do so. Visitors who later decide to unsubscribe from our mailing list or cancel their registration will be provided with instructions for doing so on the relevant website or in individual communications. You may also contact us at info@geoenergy-group.com.
Our websites do not collect or aggregate personal data for distribution or sale to external parties for consumer marketing purposes, nor do they host mailing lists on behalf of third parties.
Legal basis for processing
We will process the personal data of visitors to our website on the basis of our legitimate business interests or consent where the data subject has been asked to provide it. For example, it is in our interest to ensure that marketing activities are relevant to identified individuals so that, by processing personal data, we can send marketing material tailored to the interests of the data subject.
Data retention
We will retain personal data collected through our website for as long as necessary, for example for as long as we maintain a relationship with the relevant individual.
The legal bases for each processing activity are set out in the relevant sections above. When we process personal data on the basis of our legitimate interests, we consider and seek to balance any potential impact on the data subject, whether positive or negative, and we take into account the data subject's rights under data protection law. Our legitimate business interests do not automatically override the interests of data subjects. We will not process personal data for activities where the impact on the data subject outweighs our interests, unless we have obtained consent or the processing is otherwise required or permitted by law.
As the controller, the company processes individuals' personal data in order to fulfil its obligations arising from contractual relationships concerning the supply, installation and commissioning of electrical energy storage systems and services directly or indirectly related to those activities, as well as any other service that the company provides or procures under a contract.
In exercising rights and fulfilling contractual obligations, the company processes individuals' personal data for the following purposes:
– identification of the individual,
– preparation of an offer,
– conclusion of a contract,
– delivery and installation of goods and the performance or modification of services,
– informing individuals about changes in relevant legislation or changes to general terms and conditions,
– implementing changes to the contractual relationship,
– billing for the subject matter of the contract,
– resolving any issues raised by individuals,
– sending notifications to individuals,
– carrying out any debt-collection procedures,
– resolving legal disputes, and
– other purposes necessary for entering into or performing the contractual relationship.
The individual is informed that, when ordering certain services or in connection with the exercise of particular contractual rights and obligations, their identity may be verified and compared with the information they provided when entering into the contract, either to the company as controller or to a third party acting as controller.
The company processes the personal data of individuals who apply for advertised positions and protects that personal data as described in the section “Job applicants”.
The company may also process data on the basis of legitimate interests pursued by the company or a third party, except where those interests are overridden by the interests or fundamental rights and freedoms of the individual that require protection of personal data. This applies in particular where the data relates to a child.
Where data collected about an individual is to be used further, the company carries out an assessment in accordance with the General Data Protection Regulation (GDPR). Further use of data in pseudonymised or aggregated form may, for example, constitute lawful use of data for the company's marketing, other business or statistical analyses. As an additional safeguard for certain forms of further processing, specific data may also be deleted or anonymised.
On the basis of legitimate interests, the company may contact individuals to assess their satisfaction with the company's activities for the purpose of improving services, even where this is not strictly necessary for the performance of a contract. In balancing this interest against the individual's interests, the company will not contact again those individuals who have objected to such contact.
The company has a legitimate interest in anonymising or aggregating data until the expiry of the applicable retention period and subsequently using it for analyses and research for marketing, business planning and similar purposes. Other legitimate interests may include preventing abuse, asserting claims or defending against claims in administrative and judicial proceedings. Where abuse is suspected, the company may process personal data to an appropriate and proportionate extent for the purpose of identifying and preventing possible fraud or abuse and, where appropriate, may also disclose such data to business partners, the police, the public prosecutor's office or other competent authorities. To prevent future abuse or fraud, information about the history of identified abuse or fraud associated with an individual, including personal data about that individual, may be retained for five years after the contractual relationship ends.
Data processing may be based on consent given by the individual to the company. Consent may, for example, relate to receiving information about the company and its activities, its range of goods and services, important developments relating to smart energy solutions, and current trends and technologies that may be of interest to the individual. Communications are sent through the channels selected by the individual when giving consent. The data subject may withdraw or change their consent at any time in the same manner in which consent was given or in another manner specified by the company, and the company reserves the right to verify the individual's identity. Withdrawal or amendment of consent applies only to data processed on the basis of consent. The most recent consent received by the company is considered valid.
Data for which consent has been given is processed until that consent is withdrawn.
We will share personal data with others only where permitted by law. When sharing data with others, we have contractual arrangements and security mechanisms in place to protect the data and to meet standards relating to data protection, confidentiality and security.
For personal data governed by EU law, please note that cross-border transfers may involve countries outside the European Economic Area (EEA), including countries that do not have laws providing specific protection for personal data. We have put appropriate measures in place to ensure that all personal data is adequately protected and that all transfers of personal data from the EEA are carried out lawfully.
If we transfer personal data to a country outside the EEA that the European Commission considers not to provide an adequate level of protection for personal data, the transfer will be made on the basis of an agreement that meets EU requirements for transfers of personal data from the EEA, such as the standard contractual clauses approved by the European Commission.
We may transfer personal data that we hold to:
– external organisations that provide us with applications or functionality, data processing or information services.
– third parties that assist us in providing our services and in providing, operating and managing our internal information systems. These may include information-technology providers, cloud software-as-a-service providers, identity-management providers, website hosting and management providers, data-analytics providers, data-backup providers, security-service providers and data-storage providers.
– external organisations that otherwise assist us in providing goods, services or information.
– auditors and other professional advisers.
– law-enforcement authorities, other governmental or regulatory agencies, or other third parties where required by or in accordance with applicable law or regulation.
– third parties authorised to request disclosure of personal data. From time to time, we may receive such requests, for example to verify our compliance with applicable laws and regulations, to investigate an alleged criminal offence, or to establish, exercise or defend legal rights. We will comply with requests for personal data only where permitted by applicable law or regulation.
Individuals have certain rights in relation to their personal data, and data controllers are required to respect those rights. Where we determine how and why personal data is processed, we act as the data controller. Further information about individuals' rights and how to exercise them is provided below.
You have the right to access the personal data that we hold as data controller. You can exercise this right by contacting us at info@geoenergy-group.com.
You can update personal data that you have provided to us by emailing info@geoenergy-group.com or, where applicable, by contacting us through the relevant registration page on our website or by updating the personal data held in the relevant applications with which you registered.
Once we become aware that any personal data we process is no longer accurate, we will, where appropriate and reasonably practicable, correct it in accordance with the updated information you provide.
Where we process personal data on the basis of consent, individuals have the right to withdraw that consent at any time. As a rule, we do not process personal data on the basis of consent where another legal basis is available. You can withdraw your consent to the processing of your personal data by emailing info@geoenergy-group.com.
If you wish to stop receiving marketing emails from the company, click the unsubscribe link in the emails you receive from us.
You may send a request for erasure to info@geoenergy-group.com where you wish to have personal data deleted:
– because the purpose for which the data was processed has been fulfilled,
– because you have objected to the processing of personal data based on the company's legitimate interests,
– where the data was provided for direct marketing purposes.
You have the right at any time to request restriction of processing or to object to the processing of your personal data on grounds relating to your particular situation, unless the processing is required by law.
In such a case, we will cease or restrict the processing of personal data unless we can demonstrate compelling legitimate grounds for the processing or where processing is necessary for the establishment, exercise or defence of legal claims.
This Privacy Policy is intended to inform you about the personal data we collect about you and how we use it. In addition to the rights of access, rectification, restriction of processing and objection described above, individuals also have other rights in relation to the personal data we hold, including the right to erasure and the right to data portability.
To exercise any of these rights, please contact us at info@geoenergy-group.com.
In the event of a personal data breach that is likely to result in a high risk to an individual's rights and freedoms, we will notify the affected individual without undue delay.
In the event of a personal data breach, we will notify the competent supervisory authority without undue delay and, where required, no later than 72 hours after becoming aware of the breach.
Although we hope this will not be necessary, you may send any complaint regarding our use of personal data to info@geoenergy-group.com.
We will review and respond to every complaint we receive.
You also have the right to lodge a complaint with the Slovenian Information Commissioner. More information about your rights and how to submit a complaint to the Slovenian Information Commissioner is available at www.ip-rs.si.
We recognise that privacy is an ongoing responsibility, and we will review this Privacy Policy regularly.
Privacy Policy je bila nazadnje posodobljena 20.2.2023.
The data controller is Geo Energy d.o.o., where it is the contracting party for the purpose of providing or receiving goods or services, or the entity with which you have established contact.
Any questions regarding this Privacy Policy or how and why we process personal data should be sent to:
Geo Energy d.o.o., Bolfenška ulica 62, 2000 Maribor
Email: info@geoenergy-group.com
Telephone: +386 70 511 425
