Privacy policy

This Privacy Policy, together with the Terms and Conditions of Use of the Website and the Cookie Policy, governs the processing of your personal data collected by XCENTER, located at Trg Edvarda Kardelja 1, 5000 Nova Gorica, Slovenia (hereinafter referred to as "XCENTER" or a person referred to by the first-person plural verbs and the corresponding pronouns), in relation to your use of the website located at www.xcenter.si and any other sub-sites ("Website").

Personal data collected through the contact form on the Website
Personal data collected and legal basis for processing

Upon receipt of a message sent via the contact form on the Website, XCENTER shall collect your full name and email address. XCENTER shall only collect such data if you have consented to such collection when sending the message via the contact form. In the case of a minor under the age of 16, consent shall be given by the parent or the consent given by the minor shall be agreed to by their parent.

1 Purpose of the collection of personal data

XCENTER shall only process the personal data collected through the contact form on the Website for the purposes of replying or responding to questions, comments, queries and/or messages received through the contact form or subscribing to our newsletter and for the purpose of sending such reply and/or response to your e-mail address. Any personal data you provide to us shall be treated as strictly confidential and shall only be processed by persons who are contractually bound to protect your personal data.

Should the need arise to process your personal data for purposes other than those explained in this Privacy Policy, we shall contact you in advance and ask for your prior written consent to the processing in relation to such additional purposes.

2 Storage of personal data

XCENTER shall keep your personal data for the following retention periods:

if the personal data is processed solely on the basis of your explicit consent, until the consent is withdrawn;
if the purpose for which your personal data is processed ceases and you do not withdraw your consent before then, until the purpose for which your personal data is processed is achieved;
if the retention of the personal data is essential for the protection of XCENTER's interests in relation to the content of the communication received via the contact form, until the expiry of the time limits for the exercise of your claims and XCENTER's claims arising from your relationship with XCENTER.

After such period, XCENTER shall delete or anonymise your data to ensure that it cannot be attributed to you in any way.

3 Personal data collected through the use of cookies

By placing small text files, i.e. cookies, on your electronic device, XCENTER collects information about your IP address, your visits to the Website, the time spent on the various sub-sites of the Website, the total time spent on the Website and your movement around the Website. Personal data collected through the installation of strictly necessary cookies essential for the operation of the Website is collected automatically for the purpose of enabling access to the Website. Other personal data collected through the installation of other non-essential cookies is collected solely on the basis of your consent.

The personal data that XCENTER collects by placing cookies on your electronic device, the purpose of such collection, the persons who have access to such personal data, and the retention periods of the personal data collected through cookies are outlined in the Cookie Policy.

4. Your rights in relation to the personal data collected

In order to ensure the transparent and lawful processing of personal data and to protect privacy, every individual has the right to access his or her personal data, to request the data to be rectified, erased, restricted in its processing, the consent to its processing to be withdrawn, the right to data portability and the right to lodge a complaint with a supervisory authority. All these rights are described in detail below.

To exercise the rights set out above, please contact info@xcenter.si. XCENTER reserves the right to verify your identity prior to any consideration of your request.

I. Right of access to personal data

You may request at any time to confirm whether we are processing your personal data. If we are, you may request further information on the purposes of the processing, the types of personal data processed, the persons processing your personal data, the retention periods or the criteria used to determine such periods, the existence of a right to rectification or erasure of personal data or restriction of processing, the right to object to processing, the right to lodge a complaint with a supervisory authority, the source of the personal data, where the personal data has not been collected from you, and the existence of automated decision-making.

II. Right to rectification of personal data

If the personal data processed by XCENTER is incomplete or inaccurate, you may request the rectification of such personal data without undue delay.

III. Right to erasure of personal data

You may request that XCENTER erase the personal data they process in its entirety if:

it is no longer necessary in relation to the purposes for which it was collected;
you have withdrawn your consent to the processing of your personal data and the legal basis no longer exists;
you have objected to the processing of your personal data and all the conditions laid down in the applicable law are met;
XCENTER processed the personal data unlawfully; or
the personal data must be erased in order to comply with a legal obligation of XCENTER.

IV. Right to restriction of processing of personal data

You have the right to restrict the processing of your personal data if:

the personal data processed is inaccurate and relates to a period which enables the controller to verify its accuracy;
the processing of the personal data is unlawful; or
XCENTER no longer needs the personal data for the purposes of the processing, but the data subject needs it for the establishment, exercise or defence of legal claims.

V. Right to withdraw consent

You may withdraw your consent given in accordance with Section 2 and/or Section 3 of this Privacy Policy at any time. Withdrawal of consent shall not affect the lawfulness of processing based on consent prior to withdrawal.

VI. Right to data portability

You may at any time request to receive the personal data processed by XCENTER in a structured, commonly used and machine-readable format. You may at any time communicate the personal data thus obtained to another controller or request that the personal data be directly communicated to another controller.

VII. Right to lodge a complaint with a supervisory authority

If you believe that XCENTER is processing your personal data in violation of the relevant provisions of the applicable legislation, you may lodge a complaint with the Information Commissioner (Dunajska cesta 22, 1000 Ljubljana, e-mail: gp.ip@ip-rs.si, telephone number: 012309730, website: www.ip-rs.si).

5 Newsletter

We may from time to time send an e-newsletter ("Newsletter") to those who subscribe to the Newsletter. All Newsletters that we send will clearly indicate that we are the source of the Newsletter. You can cancel your subscription to the Newsletter at any time using the link provided in the Newsletter or by sending us an email at info@xcenter.si.

GDPR

Xcenter, which operates within the framework of the Public Institute GO! 2025, declares that it will process personal data in accordance with the applicable provisions of the Personal Data Protection Act (ZVOP-2; Official Gazette of the Republic of Slovenia, No. 163/22), the General Data Protection Regulation of the European Parliament and of the Council No. 679/2016 (General Data Protection Regulation GDPR) and the internal Rules on technical and organisational measures for the processing of personal data.

The data entered in this form (first name, surname and email address of the individual) will be processed solely for the purpose of sending the Xcentre newsletter to the email address provided. The legal basis for the processing of personal data is the consent or assent of the data subject - Article 6(1)(a) of the GDPR.

Xcenter will use the personal data obtained lawfully and transparently and only for the purpose for which it was obtained.

Xcenter will process the data obtained for the period until the consent is withdrawn.

I CONFIRM THAT I HAVE BEEN INFORMED:

- that my consent is not mandatory, that it depends on my free will and that I will not suffer any negative consequences should I not consent to the processing of my personal data.

- that I may withdraw my consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal. The withdrawal of consent may be sent to the following email address of the data controller: info@xcenter.si

- that I have the right to information, rectification, restriction of processing, erasure, objection and portability with regard to my personal data.

- that the Data Protection Officer of GO! 2025 (within which Xcenter operates) is Omnimodo, d.o.o., address: 68 Barjanska cesta, 1000 Ljubljana, e-mail: dpo@omnimodo.si, telephone: 01 23 223 47.

- that I have the right to lodge a complaint with the supervisory authority - the Information Commissioner, address: Dunajska cesta 22, 1000 Ljubljana, e-mail: ip@ip-rs.si phone: 01 23 097 30.

- that Xcenter does not transfer personal data to third countries or international organisations.

- that Xcenter does not engage in automated decision-making with regard to personal data, including profiling.

6 Amendments to the Privacy Policy

XCENTER reserves the right to change this Privacy Policy at any time. XCENTER reserves the right to change this Privacy Policy at any time. The amended Privacy Policy shall be effective as of the date of its publication on the Website and shall regulate the further processing of personal data collected and the processing of personal data collected after the amended Privacy Policy has come into force. You are advised to read the latest version of this Privacy Policy and to familiarise yourself with any changes or amendments to it before you provide us with any personal information.

XCENTER will notify you of any significant changes to this Privacy Policy (such as changes to the purposes of processing or the types of personal data collected) before the changes come into force. At the same time, we may ask for your consent to process your personal data in accordance with the amended Privacy Policy.

The latest revision date of this Privacy Policy is indicated below.

7 Queries and requests

Should you have any queries or requests, please contact us at info@xcenter.si