Privacy Policy

1. About this Privacy Policy

The purpose of the Privacy Policy of Dukin d.o.o. (hereinafter: “Privacy Policy”) is to inform users of Dukin d.o.o. services and other individuals (hereinafter also referred to as “individuals”) about the purposes and legal bases for the processing of personal data by Dukin d.o.o., Babinska cesta 6a, 9240 Ljutomer, Slovenia (hereinafter: “the Company”) as well as about the rights of individuals in this field.

The Company pays particular attention to the security of your personal data. All personal data provided is treated as confidential and is used only for the purpose for which it was provided. We handle your personal data with the highest level of care, in compliance with applicable legislation and the highest standards of processing.

We ensure the security of your personal data through appropriate organisational measures, work procedures and advanced technological solutions, as well as external experts, with the aim of protecting your personal data as effectively as possible. We use an appropriate level of protection and reasonable physical, electronic and administrative safeguards to protect collected data from accidental or unlawful destruction, loss, alteration, unauthorised disclosure of or access to personal data that has been transmitted, stored or otherwise processed.

This Privacy Policy also further explains the consent you have given for the processing of your personal data.

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: “General Data Protection Regulation” or “GDPR”), this Privacy Policy includes the following information:

  • the Company’s contact information,
  • the purposes, legal bases and types of processing of different categories of individuals’ personal data,
  • the retention periods for individual categories of personal data,
  • the rights of individuals with regard to personal data processing,
  • the right to lodge a complaint regarding personal data processing, and
  • the validity of this Privacy Policy.

2. Personal data collected by the Company

If you are only a visitor to our website, we collect data solely through cookies (see Section 9 for details). If you are a user or customer of the Company’s services, we also collect other personal data necessary for the provision of the services you have ordered or use. Such personal data includes:

  • first and last name
  • contact email address
  • contact phone number
  • IP address
  • data required for issuing an offer based on your inquiry (your address, tax number).

3. Controller of personal data

The controller of personal data processed in accordance with this Privacy Policy is Dukin d.o.o., Babinska cesta 6a, 9240 Ljutomer, Slovenia.

4. Categories of data subjects whose personal data are processed

This Privacy Policy applies to all those who have ordered and/or use our services or have submitted an inquiry, as well as to those who visit our website.

5. Purposes and legal bases for data processing

5.1. Processing based on a contract

In exercising contractual rights and fulfilling contractual obligations, the Company processes your personal data for the following purposes: identification of the individual, preparation of an offer, conclusion of a contract, provision of ordered services, notifications about any changes, additional details and instructions for the use of services, resolution of any technical issues, objections or complaints, invoicing of services and for other purposes necessary for the performance or conclusion of a contractual relationship between the Company and the individual.
When invoicing services, based on tax regulations, we also obtain and process your address to correctly issue the invoice.

5.2. Processing based on legitimate interests

On the basis of legitimate interests, we use your personal data to detect and prevent fraudulent use and abuse of services, to ensure the stable and secure operation of our systems and services, to implement information security measures, to meet service-quality requirements and to detect technical faults in systems and services.

On the basis of legitimate interests, we also use your personal data for potential enforcement, judicial and out-of-court recovery.

In accordance with the GDPR, in the event of suspected abuse the Company may, to a reasonable and proportionate extent, process data on individuals for the purpose of identifying and preventing possible fraud or abuse and, where appropriate, disclose such data to other providers of such services, business partners, the police, the public prosecutor or other competent authorities. For the purpose of preventing future abuses or fraud, data on the history of established abuses or fraud in connection with an individual, which includes data on the contractual relationship and, for example, the IP address, may be stored for five years after the termination of the business relationship.

5.3. Processing based on consent

Processing may also be based on your consent provided to the Company.
Consent may, for example, relate to notifications about offers, benefits and improvements of services provided by the Company. The purpose of such notifications is to tailor services as closely as possible to your needs and wishes and thereby increase their value to you. Notifications are sent through the channels you selected in your consent. You may withdraw your consent at any time, in the manner specified in this Privacy Policy.

You may withdraw or change your consent at any time in the same way as you gave it or in another way specified in this Privacy Policy, whereby the Company reserves the right to identify the customer. You can also change your consent by sending an email to info@dukin.eu or by submitting a written request to the Company’s registered address.

Withdrawal or change of consent applies only to data processed on the basis of your consent. Your most recently received consent is considered valid. The possibility to withdraw consent does not constitute a termination right in the business relationship between the individual and the Company. In the absence of withdrawal, data processed on the basis of your consent will be processed for up to two years after the termination of the business relationship with the Company.

6. Restrictions on disclosure of personal data

Where necessary for the provision of certain activities contributing to our services, we may authorise other companies and individuals. In such cases, the Company may transfer personal data to such carefully selected external processors who will enter into a data processing agreement or a substantively equivalent arrangement or other binding document with the Company (“Data Processing Agreement”).

We will disclose or make available such data to external processors only to the extent required by the specific purpose. External processors may not use such data for any other purpose and must meet at least all standards of personal data processing prescribed by applicable law. External processors are contractually obliged to maintain the confidentiality of your personal data.

Based on a reasoned request, the Company also discloses personal data to competent state authorities that have a legal basis to request such data.

7. Personal data retention periods

The retention period depends on the category of individual data. We retain data no longer than is necessary to achieve the purpose for which it was collected or further processed, or until the expiry of limitation periods for the fulfilment of obligations or the legally prescribed retention period.

Billing data and related contact data of individuals may be retained for the purpose of fulfilling contractual obligations until full payment for the service or, at the latest, until the expiry of limitation periods relating to an individual claim, which may be from one to five years under the law. Invoices are retained for 10 years after the end of the year to which the invoice relates, in accordance with VAT legislation.

Other data obtained on the basis of your consent are retained for the duration of the business relationship and for two years after its termination, unless a longer retention period is prescribed by law. If an individual who has given consent for the processing of personal data has not entered into a business relationship with us, their consent is valid for two years from its submission or until it is withdrawn.

After the expiry of the retention period, data are deleted, destroyed, blocked or anonymised, unless the law provides otherwise for a particular type of data.

8. Rights of individuals regarding personal data processing

We ensure the exercise of your rights regarding the processing of your personal data without undue delay. We will decide on your request within one month of receiving it. In the case of complexity and a large number of requests, we may extend the deadline by up to two additional months. If we extend the deadline, we will inform you of any such extension within one month of receiving the request, together with the reasons for the delay.

We accept requests regarding the exercise of your rights by email at info@dukin.eu or by post to Dukin d.o.o., Babinska cesta 6a, 9240 Ljutomer, Slovenia.

If you submit a request by electronic means, we will, where possible, provide the information by electronic means, unless you request otherwise.

Where there is reasonable doubt regarding the identity of the individual who submits a request concerning any of their rights, we may request additional information necessary to confirm the identity of the individual.

If an individual’s requests are manifestly unfounded or excessive, in particular because of their repetitive character, the Company may:

  • charge a reasonable fee taking into account the administrative costs, or
  • refuse to act on the request.

We enable the following rights:

  • (i) right of access,
  • (ii) right to rectification,
  • (iii) right to erasure (“right to be forgotten”),
  • (iv) right to restriction of processing,
  • (v) right to data portability,
  • (vi) right to object.

9. Cookies

Our website uses cookies to ensure proper functioning, improve the user experience, and analyse traffic and the effectiveness of advertising campaigns. Cookies are small text files that are stored on your device when you visit our site. We classify cookies into necessary cookies and third-party cookies.

9.1. Necessary cookies

These cookies are essential for the proper functioning of the website and cannot be disabled. They enable basic functions such as saving privacy preferences, logging into the administration and language selection.

  • moove_gdpr_popup – stores the user’s cookie consent choice (1 year)
  • wordpress_logged_in_*, wordpress_sec_*, wordpress_test_cookie, wp-settings-*, wp-settings-time-* – enable login and admin functionality (session / up to 1 year; used for logged-in admins)
  • pll_language – stores language preference (1 year)
  • _lscache_vary – enables caching and faster loading (2 days)

9.2. Third-party cookies

These cookies originate from external services and are loaded only if the user provides consent. They are used for statistics, analytics and advertising.

  • Google Analytics / Ads: _ga (2 years), _ga_PNHT7820XS (2 years), _gid (1 day), _gat_UA-* (1 minute), _gcl_au (3 months)
  • Facebook Pixel: _fbp (3 months), _fbc (2 years)
  • Microsoft Clarity: _clck (1 year), _clsk (1 day)

9.3. Cookie management

Upon your first visit to the website, you can select which cookies to allow via the pop-up (GDPR notice). You can change your selection or delete cookies at any time in your browser settings.

10. Right to lodge a complaint

You can send a complaint to info@dukin.eu or by post to Dukin d.o.o., Babinska cesta 6a, 9240 Ljutomer, Slovenia.

If we do not decide on your request within the statutory time limit or if we reject your request, you may lodge a complaint with the Information Commissioner. You also have the right to lodge a complaint directly with the Information Commissioner if you believe that the processing violates Slovenian or EU regulations.

If you have exercised your right of access and, after receiving the decision, believe that the data provided are not those you requested, you may file a reasoned complaint with the Company within 15 days. We must decide on it within 5 working days.

11. Final provisions

For all matters not regulated by this Privacy Policy, applicable legislation shall apply.

The Company reserves the right to amend this Privacy Policy. We will inform you of any changes by publishing them on the official website 30 days before they take effect.

If you have any questions about this Privacy Policy or about the data we hold about you, please write to us at info@dukin.eu.

12. Validity of the Privacy Policy

This Privacy Policy is published on www.dukin.eu and enters into force on 18.08.2025.

Dukin d.o.o.
Babinska cesta 6a
9240 Ljutomer, Slovenia
Tel: +386 (0)59 100 150
Email: info@dukin.eu