Privacy Policy

1. Data Controller

The data controller for personal data collected through this website is:

Biplast d.o.o.
Jama 7
1234 Mengeš, Slovenia
Company reg. no.: 5814839000
E-mail: info@biplast.si

Biplast d.o.o. is committed to protecting personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Slovenian legislation.

2. Data We Collect

a) Contact form (enquiry / interest)

When you fill in the form on our website, we collect the following personal data:

First and last name
E-mail address
Message / enquiry content

b) B2B portal

Access to the B2B portal is granted exclusively at Biplast's initiative – customers cannot create accounts themselves. Within the portal we process:

Login credentials (username, password in hashed form)
Customer business data (company name, contact details)
Portal usage data (orders, enquiries, access logs)

c) Website usage data

The website is informational in nature. Via analytics tools (see §8 Cookies) we collect anonymised statistical data about visits (e.g. number of page views, visit duration, device type).

3. Purpose & Legal Basis

Purpose	Legal Basis (GDPR)
Responding to enquiries / establishing contact	Legitimate interest (Art. 6(1)(f)) or pre-contractual measures (Art. 6(1)(b))
Management and access to the B2B portal	Performance of contract (Art. 6(1)(b))
Website visit analytics and statistics	Legitimate interest (Art. 6(1)(f)) / consent for cookies
Security and abuse prevention	Legitimate interest (Art. 6(1)(f))

4. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which they were collected:

Contact form data: up to 12 months after the last contact or until the matter is resolved.
B2B portal – active accounts: for the duration of the business relationship.
B2B portal – closed customers: up to 5 years after the end of the business relationship (legal obligation).
Analytics data (Google Analytics): up to 26 months (Google default setting).

5. Third Parties & Processors

We do not sell your data to third parties. The following contracted processor, who provides an adequate level of protection, may access your data:

Google LLC – website visit analytics (Google Analytics / Site Kit). Google has signed EU Standard Contractual Clauses.

Data is disclosed to public or law enforcement authorities only when required by law.

6. International Transfers

Some services (e.g. Google Analytics) involve the transfer of personal data to the United States. Google LLC participates in the EU-US Data Privacy Framework and has provided appropriate safeguards under Article 46 GDPR (Standard Contractual Clauses). We transfer your data to third countries only where an adequate level of protection is ensured.

7. Your Rights

As a data subject, you have the following rights under GDPR:

Right of access – request a copy of your data.
Right to rectification – request correction of inaccurate data.
Right to erasure – request deletion of your data ('right to be forgotten').
Right to restriction – request that we restrict processing of your data.
Right to data portability – receive your data in a structured, machine-readable format.
Right to object – object to processing based on legitimate interest.
Right to lodge a complaint – file a complaint with the Information Commissioner of the RS (www.ip-rs.si).

To exercise your rights, contact us at the e-mail address listed in §9 Contact. We will handle your request within 30 days.

8. Cookies

The website uses cookies – small text files stored in your browser:

Essential cookies – ensure basic site functionality (session, security). No consent required.
Analytics cookies – collect anonymised visit statistics (e.g. Google Analytics). Activated only with your consent.

Cookies detected in your browser:

The table below automatically refreshes and shows the actual cookies your browser receives from this site. Content is dynamic and may vary by device or settings.

You can manage or disable cookies in your browser settings. Note that disabling certain cookies may affect site functionality.

More about cookies: www.aboutcookies.org

9. Contact

For any questions regarding personal data protection or to exercise your rights, please contact us:

Biplast d.o.o.
E-mail: info@biplast.si
Phone: +01 724 44 98
Address: Jama 7, 1234 Mengeš, Slovenia

You may also lodge a complaint with the Information Commissioner of the Republic of Slovenia:
www.ip-rs.si · Dunajska cesta 22, 1000 Ljubljana