Terms of Use

These Terms of Use govern the use of the store-steel.si website (hereinafter referred to as the Website) and define the relationship between Štore Steel d.o.o. and users of the Website.

Personal data are processed only where required by law or where the processing of specific personal data is provided for by a legal act or based directly on the individual’s personal consent.

By using the Website, users acknowledge that they have read, understood and fully accept these Terms of Use.

 

Website Owner

The Website is operated by:

Štore Steel d.o.o.
Železarska cesta 3
3220 Štore
Slovenia

E-mail: info@store-steel.si

Phone: +386 3 780 51 00

 

Use of the Website

The Website is intended to present the Company, its products, services and other information.

Users undertake to use the Website lawfully, responsibly and in a manner that does not interfere with the rights of other users or the Website owner.

 

Accuracy of Information

We make every effort to ensure that the information published on the Website is accurate, reliable and up to date.

However, we do not guarantee that all information is complete, error-free or always current. All content published on the Website is provided for informational purposes only and does not constitute a binding offer unless expressly stated otherwise.

Štore Steel d.o.o. shall not be liable for any damage arising from the use of, or inability to use, the information published on this Website.

 

Copyright

All content available on the Website, including text, photographs, graphics, logos, videos, documents and other materials, is protected by copyright and other intellectual property rights.

Without the prior written consent of Štore Steel d.o.o., it is prohibited to:

• copy,
• reproduce,
• modify,
• distribute,
• publish,
• or otherwise use any content for commercial purposes.

The content may be used for personal and non-commercial purposes only, provided that it remains unaltered and all copyright notices are retained.

 

Website Availability

We strive to ensure the uninterrupted operation of the Website.

However, we reserve the right to temporarily suspend or restrict access due to:

• maintenance,
• updates,
• technical upgrades,
• troubleshooting,
• or other technical reasons.

We accept no liability for any interruptions, outages or temporary unavailability of the Website.

 

Enquiries

Information submitted through contact forms or other communication channels available on the Website does not constitute the establishment of a contractual relationship.

We reserve the right not to process or respond to individual enquiries where justified.

 

Links to Other Websites

The Website may contain links to third-party websites.

As we have no control over their content, we accept no responsibility for the information they contain or for their privacy policies.

Users access linked websites at their own risk.

 

Personal Data Protection

Personal data is processed in accordance with the applicable data protection legislation and our Privacy Policy, which forms an integral part of these Terms of Use.

Personal data shall only be disclosed to recipients who demonstrate an appropriate legal basis or the consent of the individual to whom the data relate.

For each disclosure of personal data, the entitled recipient must submit a written request clearly stating the provision of law or other legal basis authorising the recipient to obtain the personal data, or enclosing the written request or consent of the individual to whom the data relate, as well as the purpose for which the personal data will be used, which must be lawful.

Each disclosure of personal data shall be recorded in a disclosure log, which must indicate which personal data were disclosed, to whom, when, and on what basis.

Personal data may be transmitted by information technology, telecommunications, or other means only where procedures and measures are implemented to prevent unauthorised persons from obtaining or destroying the data or gaining unauthorised access to their contents.

Access to data via networks (remote access) and application software shall be protected by a password system for the authorisation and identification of users of programs and data. The password system shall enable logging and subsequent determination of when individual personal data were entered into the database, used, or otherwise processed, as well as who performed such actions and on what basis. All passwords and procedures used to access and administer the personal computer network (supervisor or administrative passwords), email, and application software shall be securely stored and protected against access by unauthorised persons.

Upon expiry of the retention period, personal data shall be deleted, destroyed, blocked, or anonymised, unless otherwise provided by law or another legal act.

When deleting data from computer storage media, a deletion method shall be used that makes it impossible to restore all or any part of the deleted data.

 

Amendments to the Terms of Use

Štore Steel d.o.o. reserves the right to amend these Terms of Use at any time without prior notice.

Any amendments shall become effective upon publication on the Website.

Users are encouraged to review these Terms of Use periodically.

 

Governing Law

These Terms of Use shall be governed by the laws of the Republic of Slovenia.

Any disputes arising in connection with these Terms shall first be resolved amicably whenever possible. If no amicable solution can be reached, the competent court in the Republic of Slovenia shall have jurisdiction.

 

Contact

If you have any questions regarding these Terms of Use, please contact us:

Štore Steel d.o.o.
Železarska cesta 3
3220 Štore

E: info@store-steel.si

T: +386 3 780 51 00

 

Privacy Policy

The purpose of this Privacy Policy is to inform individuals, customers, users of products or services, associates, employees and other persons (hereinafter referred to as the “individual”) who interact with ŠTORE STEEL d.o.o. (hereinafter referred to as the “Company”) about the purposes, legal bases, security measures and individual rights relating to the processing of personal data carried out by the Company.

We value your privacy and therefore always take great care to protect your data. We process personal data in accordance with applicable personal data protection legislation and other legislation providing a legal basis for the processing of personal data. Any changes to this document will be published on our website. By using the website, you confirm that you have read and understood the entire Privacy Policy.

 

Data Controller

Štore Steel d.o.o.
Železarska cesta 3
3220 Štore
Slovenia

E: info@store-steel.si

T: +386 3 780 51 00

Website: https://www.store-steel.si/

Personal Data

Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

 

Purposes and Legal Bases for Data Processing

The Company collects and processes personal data on the following legal bases:

 

Communication with Individuals by Email, e.g. Newsletters

As part of its lawful business activities, the Company may send customers, buyers and users of its services information about its services, events, training courses, offers and other content by email.

Individuals may request the termination of such communications and the processing of their personal data at any time and unsubscribe by clicking the unsubscribe link in a received message or by submitting a request to the Company by email or regular post.

The legal bases for data processing are legitimate interest and consent. Data will be processed until the individual unsubscribes, withdraws consent or the purpose of processing has been fulfilled. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

 

Performance of a Contract

Where an individual enters into a contract with the Company, the contract constitutes the legal basis for processing personal data. The Company may therefore process personal data for the conclusion and performance of a contract, such as the sale of goods and services, preparation of quotations, participation in various programmes, etc.

If an individual does not provide their personal data, the Company cannot enter into a contract or provide services, deliver goods or other products in accordance with the contract, as it does not have the information necessary to do so.

On this basis, the Company processes only the personal data necessary for the conclusion and proper performance of contractual obligations.

The legal basis for processing is the contract. Personal data is retained until the purpose of the contract has been fulfilled or for up to six years after its termination, except where a dispute arises between the individual and the Company in connection with the contract.

In such cases, the Company retains the data for a further 10 years after a court judgment, arbitration decision or court settlement becomes final or, where no legal proceedings have taken place, for six years from the date of an amicable resolution of the dispute.

 

Legitimate Interest

The Company may also process personal data on the basis of its legitimate interests. This is not permitted where such interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data. When relying on legitimate interest, the Company carries out an assessment in accordance with applicable legislation.

The processing of personal data for direct marketing purposes is considered to be carried out in the legitimate interests of the Company.

The Company may also process personal data collected from publicly available sources or in the course of its lawful business activities for the purposes of offering goods, services, employment opportunities, information about benefits, events and similar activities.

For these purposes, the Company may use regular post, telephone calls, email and other means of telecommunication.

For direct marketing purposes, the Company may process the following personal data: first and last name, permanent or temporary residential address, telephone number and email address. The Company may process this personal data for direct marketing purposes without the individual’s explicit consent.

Individuals may request the termination of such communications and the processing of their personal data at any time and unsubscribe by clicking the unsubscribe link in a received message or by submitting a request to the Company by email or regular post.

 

Processing Based on Consent

Where the Company has no legal basis for processing personal data under the law, a contractual obligation, legitimate interest or the protection of an individual’s life, it may request the individual’s consent.

With the individual’s consent, the Company may process certain personal data for the following purposes:

 

If an individual has given consent to the processing of personal data and subsequently wishes to withdraw it, they may request the termination of processing by contacting the Company by email or regular post.

Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Following receipt of a withdrawal of consent or a request for erasure, the data will be deleted within 15 days at the latest. The Company may also delete the data before consent is withdrawn if the purpose of processing has been fulfilled or if required by law.

In exceptional circumstances, the Company may refuse a request for erasure on grounds provided for in the General Data Protection Regulation, including the exercise of the right to freedom of expression and information, compliance with a legal obligation, reasons of public interest in the area of public health, archiving purposes in the public interest, scientific or historical research purposes, statistical purposes, or the establishment, exercise or defence of legal claims.

The legal basis for processing is consent. Data will be processed until consent is withdrawn or the purpose of processing has been fulfilled. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

 

Protection of an Individual’s Vital Interests

The Company may process an individual’s personal data where this is necessary to protect their vital interests.

In emergencies, the Company may locate an individual’s identity document, check whether the person is included in its records, review their medical history or contact their relatives without requiring the individual’s consent.

This applies only where such processing is strictly necessary to protect the individual’s vital interests.

 

Retention and Erasure of Personal Data

The Company will retain personal data only for as long as necessary to fulfil the purpose for which it was collected and processed. Where the Company processes data on the basis of a legal obligation, it will retain such data for the period prescribed by law. Some data is retained for the duration of the relationship with the Company, while other data must be retained permanently.

Personal data processed on the basis of a contractual relationship with an individual is retained for the period necessary to perform the contract and for a further six years after its termination, except where a dispute arises between the individual and the Company in connection with the contract.

In such cases, the Company retains the data for a further 10 years after a court judgment, arbitration decision or court settlement becomes final or, where no legal proceedings have taken place, for six years from the date of an amicable resolution of the dispute.

Personal data processed on the basis of an individual’s consent or legitimate interest will be retained until consent is withdrawn or a request for erasure is submitted. Following receipt of a withdrawal of consent or a request for erasure, the data will be deleted without undue delay. The Company may also delete the data before consent is withdrawn if the purpose of processing has been fulfilled or if required by law.

Where an individual exercises their rights, the Company retains their personal data until a final decision has been made on the matter and thereafter in accordance with that decision.

In exceptional circumstances, the Company may refuse a request for erasure on grounds such as the exercise of the right to freedom of expression and information, compliance with a legal obligation, reasons of public interest in the area of public health, archiving purposes in the public interest, scientific or historical research purposes, statistical purposes, or the establishment, exercise or defence of legal claims.

After the retention period has expired, the Company must effectively and permanently erase or anonymise personal data so that it can no longer be linked to an identifiable individual.

 

Processing of Personal Data by Contractual Processors and Data Transfers

The Company may entrust certain personal data processing activities to a contractual processor under a data processing agreement. Contractual processors may process the entrusted data exclusively on behalf of the controller, within the scope of their authorisation as specified in a written agreement or other legal act, and in accordance with the purposes defined in this Privacy Policy.

The contractual processors engaged by the Company primarily include:

• Accounting service providers and other legal and business consultancy providers.

• Infrastructure maintenance providers (video surveillance, security services).

• Information system maintenance providers.

• Email service providers, software providers and cloud service providers (e.g. Microsoft, Google).

• Social media and online advertising providers (Google, Facebook, Instagram, etc.).

To ensure better oversight and control of contractual processors and proper management of contractual relationships, the Company also maintains a list of contractual processors identifying all specific processors with which it cooperates.

Under no circumstances will the Company disclose an individual’s personal data to unauthorised third parties. Contractual processors may process personal data solely in accordance with the Company’s instructions and may not use it for any other purposes.

The Company, as the data controller, and its employees do not transfer personal data to third countries (outside the European Economic Area, which comprises the EU Member States, Iceland, Norway and Liechtenstein) or international organisations, except to the United States.

Relationships with contractual processors in the United States are governed by Standard Contractual Clauses (standard contracts adopted by the European Commission) and/or Binding Corporate Rules (adopted by a company and approved by supervisory authorities in the EU).

 

Cookies

The Company’s website uses cookies, which are important for providing online services. Cookies are used to store information about the status of individual web pages, assist in collecting statistics about users and website traffic, and for other similar purposes.

When an individual visits the website, only cookies that are strictly necessary for its operation (e.g. for a shopping cart) are placed on their device. Other cookies are placed only with the individual’s consent.

Individuals may change their settings and delete cookies at any time. Instructions are available on the websites of the respective browser providers.

More information about the use of cookies is available in the Cookie Policy on the website: https://www.store-steel.si/en/cookie-policy/

 

Data Security and Accuracy

The Company ensures information security and the security of its infrastructure, including premises and application and system software.

Our information systems are protected by antivirus software and firewalls, among other security measures.

We have implemented appropriate organisational and technical security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, and other unlawful or unauthorised forms of processing.

When transmitting special categories of personal data, we use encryption and password protection.

Individuals are responsible for ensuring that they provide their personal data securely and that the information submitted is accurate and reliable.

 

Individual Rights Regarding Data Processing

Data subjects have the right to request access to their personal data, rectification or erasure of personal data, restriction of processing, as well as the right to object to processing and the right to data portability.

Requests are handled in accordance with the provisions of the General Data Protection Regulation and applicable personal data protection legislation.

Individuals may exercise any of these rights or submit questions by sending a request to the Company’s address.

The Company will respond to requests without undue delay and no later than one month after receiving them. This period may be extended by up to two additional months, taking into account the complexity and number of requests. In such cases, the individual will be informed of the extension and the reasons for the delay.

Exercising these rights is free of charge. However, the Company may charge a reasonable fee if a request is manifestly unfounded or excessive, particularly if it is repetitive. In such cases, the Company may also refuse to act on the request.

If there are doubts regarding an individual’s identity, the Company may request additional information necessary to verify their identity.

In its response to the individual’s request, the Company will also provide the reasons for its decision and information about the right to lodge a complaint with the supervisory authority within 15 days of being informed of the decision.

Individuals may exercise their right to lodge a complaint with the supervisory authority:

Information Commissioner of the Republic of Slovenia

Dunajska 22 1000 Ljubljana Slovenia

Email: gp.ip@ip-rs.si Website: www.ip-rs.si

 

Changes to the Privacy Policy

We may update this Privacy Policy from time to time due to changes in legislation, technological developments or our business processes.

The current version is always available on this Website.

 

Last updated: August 2026