GDPR | Crypto2Gold

GDPR General Data Protection Regulation

Information concerning the use of your data by ATH INVEST d.o.o. in accordance with Article 13 of the GDPR

Name and contact information of the controller:
ATH INVEST d.o.o.
Dunajska cesta 106
1000 Ljubljana
Slovenia

Contact information of the data protection officer:
info@ath.si

General

The personal data provided by you, in particular your name, address, and email address, which are stored with ATH INVEST d.o.o., is used for the purpose of processing your order, purchase order, or other customer requests (see also purposes of data processing).

ATH INVEST d.o.o. does not store or process any data that the data subjects themselves did not disclose to ATH INVEST d.o.o. Therefore, the obligation to inform in accordance with Article 14 of the GDPR does not apply

Legal bases and purposes of data processing

On the basis of Article 6(1)(a) of the GDPR for sending newsletters, promotional materials, and considering your stated areas of interest.
On the basis of Article 6(1)(b) of the GDPR for handling the orders you have placed with our online shop and managing payment and order processes.
On the basis of Article 6(1)(c) of the GDPR in compliance with our legal obligations arising particularly from the Slovenian Tax Code (Zakon o davčnem postopku), the Prevention of Money Laundering and Terrorist Financing Act (Zakon o preprečevanju pranja denarja in nanciranja terorizma), and other applicable regulations.
On the basis of Article 6(1)(f) of the GDPR for pursuing our overriding legitimate interests in the areas of advertising and marketing, as well as for combating misuse and defending legal claims.

Consequences for non-disclosure of data:

Should data that is absolutely necessary for compliance with contractual and legal obligations not be provided, no contract can be concluded.

Recipients:

Personal data is only processed on an internal basis and not distributed to third parties. There are no transfers to third-party countries.

If there is a legal or regulatory obligation, personal data may be disclosed to public authorities and institutions such as tax authorities or other regulatory bodies. Personal data may also be passed on to courts, banks, or insurance companies in defense of our legal or economic claims.

Retention period for data:

Your data will be processed for the duration of the statutory retention periods or until revocation. As a rule, this is 10 years, contingent on the retention requirement governed by tax law in accordance with the Slovenian Tax Code (Zakon o davčnem postopku).

Your rights in the scope of data processing by ATH INVEST d.o.o.:

Right of access
Right to rectication
Right to erasure
Right to restriction of processing
Right to data portability
Right to withdraw consent
Right to object

Any consent granted by you may be revoked at any time with eect for the future.

If you believe that the processing of your data violates data protection laws, you may le a complaint with the competent supervisory authority. In Slovenia, this is the Information Commissioner (Informacijski pooblaščenec) (www.ip-rs.si).