1. Our values and guidelines regarding the protection of personal data
The operator WEBsome spletne storitve, Živa Remec s.p., Godič 80F, 1242 Stahovica (hereinafter referred to as the “operator “), which operates the website www.zivaplans.com (General Terms of Use of the website are available at this link ), is committed to the permanent protection of all personal data of the user. We respect your privacy and therefore always ensure the protection of your personal data and follow the principles of secure processing of personal data. We handle your personal data responsibly, fairly, transparently and legally. In this Privacy Policy, we present to you what personal data we process, what the purpose of the processing is and what your rights are in relation to data processing.
We use appropriate data security measures to ensure that your personal data is not accessed by unauthorized persons, maintain its confidentiality and integrity, and prevent its loss, accidental destruction, etc., at all times during the processing of personal data. All data will be protected in accordance with personal data protection regulations. We always collect and process personal data in accordance with the law. All collected data is treated as confidential and is not sold to third parties. Under no circumstances will your data be disclosed to unauthorized persons and will not be used for purposes other than those for which it was collected.
The user is also responsible for protecting personal data, namely by ensuring the security of their username and password and appropriate software (antivirus) protection for their computer.
2. Personal data controller and joint controllers
The controller of personal data collected and processed in accordance with this Privacy Policy is Živa Remec s.p., Godič 80F, 1242 Stahovica, Slovenia, E-mail: help@zivaplans.com.
Joint controllers
For certain aspects of the processing, we and the operators of certain social media platforms act as joint controllers, i.e. as joint controllers within the meaning of Article 26 of the General Data Protection Regulation (“ GDPR ”). Our company, Živa Remec s.p. operates the following social media pages:
-Instagram: https://www.instagram.com/zivaplans/
– LinkedIn: https://www.linkedin.com/in/zivaremec
Therefore, operator is a joint controller with Meta Platforms, Inc. (as the operator of the social network platform Facebook, Instagram and Twitter) and with ByteDance Ltd. (as the operator of the social network platform TikTok). The terms of cooperation or agreement between operator and the individual joint controller (the operator of the individual social network platform) are available at the following links:
Facebook: https://en-gb.facebook.com/legal/terms/page_controller_addendum
Twitter: https://gdpr.twitter.com/en/controller-to-controller-transfers.html
TikTok: https://www.tiktok.com/legal/privacy-policy?lang=en#privacy-eea
In the case of online tracking methods used by social media platform operators, the platform operators and we act as joint controllers. Online tracking may take place regardless of whether you are logged in or registered on the individual social media platform.
The legal basis for online tracking methods is your personal consent.
Further information on the recipients or categories of recipients and on the retention periods or criteria for determining the retention period of your personal data collected by the operators of social media platforms can be found in the privacy policies of the individual operators of the social media platforms (specified below).
We have no influence on these. In the privacy policies of the individual operators of the social media platforms you can also find options regarding the exercise of your rights to disable online tracking methods. You can also contact the operators of the platforms using the contact details provided in the legal information of the respective platform operator.
In connection with the statistics offered to us by the individual social network platform provider, we can only influence and disable them conditionally. We would like to point out that we are careful not to provide any additional optional statistics to us by the social network platform provider. It cannot be ruled out that the social network platform provider may use your profile data and online behavior data to analyze your habits, personal relationships, preferences, etc. operator cannot influence whether the social network platform provider processes or passes on your data to third parties.
Responsibility of platform operators
We have only limited influence on the management of personal data carried out by social media platform operators (e.g. management of followers and shared information). In areas where we have influence and where we can process personal data, we strive to ensure that the social media platform operator protects personal data appropriately, within the scope of the options available to us. In many areas, however, we cannot influence the processing of personal data carried out by the social media platform operator and we do not know exactly which data it processes.
The platform operator manages the entire IT infrastructure of the service, has its own provisions on the protection of personal data, privacy policy and its own user relationship with you (if you are a registered user of the social network service). In addition, only the social network platform operator is responsible for all issues related to your user profile data on the social network, to which we, Živa Remec sp., do not have access.
More detailed information about the data processing carried out by social media platform providers and further objection options can be found in the privacy policies of the individual social media platform providers:
– Facebook: https://www.facebook.com/privacy/explanation
– Instagram: https://help.instagram.com/519522125107875
– TikTok: https://www.tiktok.com/legal/privacy-policy?lang=en
When using a particular social media platform, your personal data is usually processed by the respective social media platform operator, including on servers in third countries, in particular in the USA and the UK.
3. Purpose of processing personal data and legal basis for processing personal data
a) Fulfillment of the customer’s order or implementation of the purchase contract with the customer
For the purposes of executing the order or fulfilling the purchase contract (including informing about the status of the order and delivery, carrying out complaint procedures in relation to claims due to material defects or under the warranty, etc.), operator collects and processes your following personal data during the process of placing an order for products from the online store: name and surname, place of residence, delivery address, telephone number, e-mail, other data necessary for executing the order (credit card information – number, bank, …), data on payment habits.
We also collect the aforementioned data for the purpose of communicating with you when you send us communication messages or questions by telephone, email, regular mail or through the use of other communication channels (for example, via digital social media platforms).
The legal basis for processing the aforementioned data listed under this point a) is the law or GDPR (the controller has concluded a purchase contract with the buyer for the purchase of products from the online store or the controller is in business contact with a potential buyer for the purpose of answering a question from the potential buyer regarding the products).
b) Sending e-newsletters or carrying out direct marketing
For the purposes of conducting product surveys and sending e-newsletters, through which we send you news with advice about our products, new products, special offers or promotions, prize games and the like, product surveys, information about customer satisfaction surveys and other marketing messages or for direct marketing purposes, operator collects and processes your following personal data: e-mail, contact information (name and surname, address and telephone number).
The legal basis for the processing of personal data for the purposes of sending e-newsletters or for the purposes of direct marketing and the analysis described in the previous paragraph is the individual’s consent. When you register to receive our newsletters or marketing messages via embedded frames on our social media pages, an analysis of user behavior is performed based on your consent, which primarily includes which areas of the individual website, mobile application or newsletter you visit and which links you open there. In this way, personalized user profiles are created that are assigned to your person and/or email address, so that we can better adapt potential advertising material, especially in the form of newsletters, the inclusion of advertisements on the website and printed advertisements or SMS messages, to your personal interests and so that we can improve the online offering.
The user has the option at any time to request a ban on the use of collected data for the purposes of e-newsletters or direct marketing and to revoke their use. The ban or revocation applies in advance. The user unsubscribes from e-newsletters by unsubscribing from receiving e-newsletters or commercial messages on the website (the link to the unsubscribe page can be found here or at the bottom of each e-newsletter). The individual can also submit the request to the controller’s address or in writing to the controller’s e-mail address help@zivaplans.com. The controller will appropriately prevent the use of personal data for the purpose of direct marketing within 15 days of receiving the request and will notify the user of this within a further five days to their e-mail address. After unsubscribing, the individual’s consent to the creation of a personalized user profile and to receiving e-newsletters based on it is considered revoked. We will delete your user data.
When subscribing to the newsletter on a social media site, we cannot influence whether the social media operator deletes your data. Therefore, please refer to the privacy policy of the relevant social media platform operator regarding deletion options.
c) Participation in prize competitions
You can participate in various prize competitions via our website, our e-newsletter or our social media pages. Unless otherwise specified for a particular prize competition or unless you have given us your explicit consent in more detail, we use the personal data you provide to us as part of your participation in the prize competition solely for the purpose of carrying out the prize competition (e.g. determining the winners, notifying the winners, sending the prize, announcing the winners). If you appear on the relevant social network under your real name or if you are recognizable through your profile photos, we cannot prevent other users from recognizing you.
For the purposes of participating in and implementing prize games, Živa Remec sp. collects and processes your following personal data: email, first and last name, address, telephone number, tax number (only in the event of winning a prize). The legal basis for data processing in the context of prize competitions is the consent of the individual. If you have given consent in the context of the prize competition, you have the option to revoke this consent at any time and with future effect. The individual shall submit a request for revocation to the address of the controller or in writing to the controller’s email address help@zivaplans.com.
d) Our presence and interaction with users on social networks
The purpose of data processing within our social media pages is direct marketing (i.e. promotion, corporate communication, informing customers about offers, products, campaigns, prize games, various topics, company news, etc.) and interaction with visitors to our social media pages and our response to relevant feedback, praise or criticism from individuals. For these purposes, we collect the following personal data from you: email, name and surname, address, telephone number, tax number (only in the event of a prize being won).
We share your content on our page when this is a function of the social network platform and communicate with you via the social network platform. The data you enter on our social network pages, such as comments, videos, images, likes, public news, etc., are published by the social network platform and are never used or processed for other purposes. We reserve the right to delete your illegal content when necessary. This applies, for example, to controversial and illegal posts, hateful comments, obscene comments (explicitly sexually explicit content) or attachments (e.g. images or videos) that could violate copyright, personality rights, criminal law or the ethical principles of Živa Remec sp. or other regulations or codes.
The legal basis for data processing within social networks is the individual’s consent.
e) Web cookies
The operator Živa Remec sp. processes personal data of visitors to the website www.zivaplans.com via web cookies in order to ensure a safe and improved user experience, smooth operation of the website, and analysis of website visits.
- – Necessary cookies: are essential for the smooth operation of the website www.zivaplans.com. Without mandatory cookies, the website and portals would not function properly. Cookies are assigned and set when a visitor performs any interaction on the website (click, scroll, fill out a form, etc.) and confirms tracking by clicking the “OK” button.
- – Analytical cookies: Google Analytics is a service provided by Google LLC or Google Ireland Limited, depending on the location from which you access zivaplans.com with “Google”. Google uses the collected data to track and test the use of www.zivaplans.com, to prepare reports upon activation and share them with other Google services. With analytical cookies, the controller uses appropriate tools to analyze traffic and ensure the security of the website in order to improve the shopping experience. The analysis of visits to our websites is based on the processing of anonymized data. IP addresses are also collected, so each user is assigned a cookie at the beginning of their visit to the website that identifies and tracks shopping carts. www.zivaplans.com may also store other cookies on your computer, such as: an encrypted user identification number (to identify the user on the next visit), product ratings and Google Analytics cookies (analysis of website visits). Session cookies are stored in the server’s memory only for the duration of the visit and are deleted after one hour of inactivity, while persistent cookies are stored on the visitor’s computer.
- – Cookies for personalized advertising and tracking: with them, the controller improves the user experience, as we use digital tracking to display the most relevant offers and products on social networks and other sites based on your shopping habits. The visitor accepts cookies by clicking on the “OK” button in the pop-up window.
4. Users of personal data
In addition to the controller, the following persons also process your personal data on its behalf and for its account:
– companies that provide logistics and postal services or delivery services for products available for sale in the online store www.zivaplans.com;
– companies that provide the controller with technical support in the processing of personal data, such as manufacturers and maintainers of computer applications, websites and information services, developers and implementers of software solutions;
– companies engaged by the controller to provide services necessary for the performance of contracts, such as accounting services, printing houses, marketing, research and analytical companies, sending e-newsletters, external marketing agencies and event or prize game organizers, prize game sponsors and the like;
– competent tax authorities, pension and disability insurance institutions, health insurance institutions, etc., when required in accordance with regulations.
We share your content that you submit via the respective social media platforms on our site, when this is a function of the social media platform, and when we communicate via the social media platform. In this way, an indefinite number of third parties become aware of the content. Please note that on some social media sites, participation may also be possible directly on publicly accessible websites (e.g. on an electronic bulletin board or via comments) and that other users may also learn about your participation through your interaction with us. In addition, third parties are in such cases enabled to become aware of your personal data, including the identity of the prize recipient on the relevant social media. If you appear under your real name on the relevant social media site or if you are recognizable through your profile photos, we cannot prevent other users from recognizing you.
If you ask us a question via a social media platform, we will refer you to other, more secure channels of communication that ensure confidentiality, depending on the response required. You always have the option to send us confidential questions to our email address help@zivaplans.com.
5. Transfer of data to third countries
The controller Živa Remec sp. does not transfer your personal data to third countries (i.e. countries outside the EU) or international organizations.
Your use of a particular social media platform may result in the platform operator processing your data in a third country (based outside the European Union and the European Economic Area). For more information about the processing of your data in a third country over which Živa Remec sp. has no influence, please see the data protection statements of the respective social media platform operators referred to in Section 2.
6. Personal data retention periods
The retention periods for your personal data vary depending on the purposes for which we collect and process your personal data. The retention periods are as follows:
– Personal data collected for the purpose of fulfilling an order or performing a contract: The data is stored until the expiry of the preclusive or limitation periods for exercising claims from concluded contracts, which in principle is 5 (years) from the due date of the claims. In the case of making payments, the data is stored for 5 (five) years after the relevant tax or duties would have to be paid, or in the case of introducing a tax procedure, 10 (ten) years from the start of the limitation period in accordance with the ZDavP-2. All invoices are stored for 10 years after the end of the year to which the invoices relate.
– Personal data collected for the purposes of e-newsletters or direct marketing: the retention period is “until withdrawal” of consent, which the individual can give at any time. After six months, we will delete your data from the relevant e-mail distribution channels. When subscribing to e-newsletters on a social network site, we cannot influence the deletion of your data by the operator of the social network platform. Therefore, please check the privacy policy of the relevant social network platform operator regarding the retention period.
– Personal data collected for the purposes of our presence and interaction with users on social networks: All your public posts on our social media pages remain published on the timeline indefinitely, unless we delete them due to updating the original topic, illegality of the post or violation of our guidelines, or if you delete the post yourself. All personal data that you provide to us via a secure channel when asking a question (encouragement, praise or criticism) will be deleted or anonymized no later than 90 days after we have finally answered you.
– Personal data collected for the purposes of the prize draw: After the prize draw has ended and the winners have been announced, we delete the personal data of the participants within two months of the prize being awarded. We store the data of the winners of prizes exceeding a value of EUR 42 for ten (10) years in accordance with applicable tax legislation. When participating in a prize draw on a social network page (e.g. via a post or comment), we cannot influence the platform operator to delete your data. Therefore, please check the privacy policy of the relevant social network platform operator regarding the retention period.
7. Your rights regarding personal data
The data subject may exercise the following rights in relation to his or her personal data: right of access, right of rectification, right of erasure (so-called right to be forgotten), right to restriction of processing, right to data portability, right to object and right to lodge a complaint with a supervisory authority. The rights may be restricted in accordance with Article 23 of the GDPR.
An individual may exercise their rights defined under this point 7. by sending a written request to Živa Remec s.p., Godič 80F, 1242 Stahovica, Slovenia, or to help@zivaplans.com. Before granting the request, the Controller verifies the identity of the individual exercising their rights under the personal data protection regulations, for security reasons and to prevent unauthorized disclosure or misuse of personal data.
a) right to access data
You have the right to request confirmation from us as to whether personal data concerning you are being processed, and if so, you may request access to your personal data and the following information: the purposes for which the personal data are being processed; the types of personal data being processed; the users or categories of users to whom the personal data concerning you have been or are being disclosed; the intended duration of the storage of the personal data concerning you, or if specific information on this cannot be obtained, the criteria for determining the storage period; the existence of the right to request the rectification or erasure of personal data concerning you, the existence of the right to restrict the processing of your personal data and the existence of the right to object to such processing; the existence of the right to lodge a complaint with a supervisory authority; all available information on the origin of the data, if the personal data are not obtained from the individual concerned; the existence of automated decision-making, including the creation of profiles referred to in Article 22(1) and (4) of the GDPR, and at least in such cases, meaningful information about the reasons for it as well as the significance and envisaged consequences of such processing for the individual concerned.
b) Right to rectification
You have the right to request that we rectify any inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data concerning you completed, including by providing a supplementary statement.
c) Right to erasure (“right to be forgotten”)
You have the right to request that we erase your personal data without undue delay where one of the following reasons applies:
– personal data are no longer necessary for the purposes for which they were obtained or otherwise processed;
– if you withdraw your consent or consent on which the processing of your personal data is based on consent and there is no other legal basis for the processing;
– if you object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate interests for the processing, or if you object to the processing pursuant to Article 21(2) of the GDPR;
– personal data has been processed unlawfully;
– the deletion of personal data is necessary to comply with a legal obligation;
– personal data were obtained in connection with the services offered by information companies in accordance with the first paragraph of Article 8 of the GDPR.
d) Right to restriction of processing
You have the right to request from us the restriction of the processing of your personal data where one of the following conditions applies:
– you dispute the accuracy of personal data;
– the processing is unlawful and you oppose the erasure of your personal data and instead request the restriction of their use;
– the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims, or
– you have filed an objection to the processing pursuant to Article 21(1) of the GDPR, pending verification of whether the legitimate interests of the controller override your reasons.
e) Right to data portability
You have the right to receive your personal data concerning you, which we process, in a structured, commonly used and machine-readable format, and the right to transmit these data to another controller without hindrance from us, where the processing of your personal data is based on your consent and we carry out the processing by automated means.
When exercising your right to data portability, you have the right to have your personal data transferred directly from us to another controller, where technically feasible.
f) Right to object
Under the conditions of Article 21 of the GDPR, you have the right to object to the processing of your data on grounds relating to your particular situation. This right applies to the processing of personal data carried out by us for direct marketing purposes (including profiling).
g) Right to lodge a complaint with a supervisory authority
You always have the option to file a complaint with the competent supervisory authority if you believe that we are not processing your personal data in accordance with the regulations:
Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, e-mail address gp.ip@ip-rs.si; telephone: 01 230 97 30, website: www.ip-rs.si or to the responsible person of Živa Remec sp. at the email address: help@zivaplans.com.
8. Contact person
For any questions regarding the personal data we manage, or to exercise your rights regarding your personal data in accordance with applicable regulations, or for any questions regarding our social media pages, you can contact us at the address below:
WEBsome spletne storitve, Živa Remec s.p.
Godič 80F
1242 Stahovica
Slovenia
Or to the email address help@zivaplans.com.
9. Privacy Policy Changes:
We may change our Privacy Policy at any time. Therefore, we would like to point out that when you visit our website after the change to the Privacy Policy has been implemented, the changed Privacy Policy will apply, so we advise you to check its content from time to time. For all changes that require your consent in accordance with applicable law, we will ask you for it in the prescribed form and manner.
This Privacy Policy is effective from August 15, 2026