PRIVACY POLICY - ESCAPEMED

Expiry date: 10 March 2025

GENERAL

ESCAPEMED d.o.o. (hereinafter referred to as "the Provider" or "ESCAPEMED") is committed to protecting the privacy of Users and to handling their personal data carefully in accordance with the General Data Protection Regulation (GDPR), the Personal Data Protection Act (ZVOP-2) and other applicable regulations in the field of personal data protection.

This privacy policy explains what data we collect, how we use it, how we protect it and what rights users have in relation to it.

DATA CONTROLLER

ESCAPEMED d.o.o.
Dolenjska cesta 324a, 1291 Škofljica, Slovenia
E-mail: info@escapemed.eu
Phone: +386 40 856 100

WHAT DATA WE COLLECT AND HOW WE OBTAIN IT

ESCAPEMED collects and processes personal data of users in the following cases:

  • When placing an order (name, surname, address, contact details, payment details)

  • When registering a user account (first name, last name, email address, password)

  • When signing up for the newsletter (email address)

  • When using the website (IP address, cookies, analytical data)

Data is collected directly from the user or through the use of the website.

PURPOSE AND LEGAL BASIS OF DATA PROCESSING

ESCAPEMED processes personal data on the following legal bases:

  • Performance of a contract: Processing of data for the purpose of order fulfilment and delivery of products.

  • Legitimate interest: website usage analytics to optimise services and ensure security.

  • Legal obligations: storage of accounting and tax data.

  • User consent: Sending of newsletters and personalised marketing (the user can withdraw consent at any time).

DATA RETENTION PERIOD

ESCAPEMED retains personal data in accordance with the law and only for as long as is necessary to achieve the purpose for which it was collected:

  • Purchase data: 5 years (due to accounting and tax regulations).

  • User accounts: until the account is deleted by the user.

  • Marketing data (newsletters, promotions): Until withdrawal of consent.

  • Analytical data (cookies): Retention period depends on the type of cookie and the user's preferences.

After the retention period, the data is deleted or anonymised.

TRANSFER OF DATA TO THIRD PARTIES

ESCAPEMED does not sell or share personal data with third parties, except where necessary for the provision of services:

  • Delivery services (for the delivery of ordered products).

  • Payment providers (for payment processing).

  • Contract processors (accounting, IT support, analytics providers).

All contract processors ensure compliance with the GDPR and have data protection agreements in place.

PICTURES

ESCAPEMED uses cookies to provide a better user experience. Users can manage their cookie settings in their browser.

Types of cookies:

  • Necessary cookies.

  • Analytical cookies.

  • Marketing cookies.

DATA SECURITY

ESCAPEMED uses modern security measures to protect personal data:

  • SSL certificate for encrypted connection.

  • Restricted access to personal data (only authorised persons).

  • Regular backups to prevent data loss.

In the event of a data breach, ESCAPEMED will immediately notify the Information Commissioner of the Republic of Slovenia and the affected users if there is a risk to their rights.

USERS' RIGHTS

Users have the right to:

  • Access to their data and insight into the purpose of processing.

  • To correct or complete their data if they are incomplete or inaccurate.

  • To erase the data ("right to be forgotten") if there is no longer a lawful basis for processing it.

  • Transfer the data to another service provider.

  • To object to the processing of data for marketing purposes.

Users can exercise their rights by making a request to info@escapemed.eu.

RIGHT TO COMPLAIN

If a user considers that ESCAPEMED is unlawfully processing his/her personal data, he/she may lodge a complaint with:

Information Commissioner of the Republic of Slovenia
Dunajska cesta 22, 1000 Ljubljana
E-mail: gp.ip@ip-rs.si

FINAL PROVISIONS

This privacy policy will come into force on 10 March 2025. ESCAPEMED reserves the right to amend the policy and will inform users of this on its website.

For further information, please contact info@escapemed.eu.