PRIVACY POLICY
Privacy Policy
Last updated: 26 August 2026
PHA FARMED d.o.o. respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use and protect personal data when you visit our website, contact us through the website or communicate with us in connection with our services.
Personal data are processed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), the Slovenian Personal Data Protection Act (ZVOP-2), and other applicable data protection legislation.
1. Data Controller
The controller responsible for the processing of personal data through this website is:
PHA FARMED d.o.o.
Cesta na Brdo 100
1000 Ljubljana
Slovenia
VAT No.: SI63086352
Registration No.: 6430988000
Telephone: +386 1 256 112
E-mail: phafarmed@phafarmed.com
2. Personal Data We May Process
Depending on how you use our website or communicate with us, we may process the following categories of personal data:
Contact information
-
name and surname;
-
e-mail address;
-
telephone number;
-
company or organisation, where provided.
Information submitted by you
-
information contained in enquiries submitted through our contact form;
-
information contained in e-mails or other communications sent to us;
-
any other information you voluntarily provide.
Technical and website usage information
When you access our website, certain technical information necessary for the operation and security of the website may be processed, such as IP address, browser type, operating system, device information, date and time of access and similar technical information.
Where you provide your consent to analytics cookies, information relating to the use of the website may also be processed through Google Analytics 4.
An IP address and cookie identifier can constitute personal data under EU data-protection rules. (European Commission)
3. Purposes and Legal Bases for Processing
We process personal data only where there is an appropriate legal basis.
Personal data may be processed for the following purposes:
Responding to enquiries
When you contact us through our website or by e-mail, we process the information you provide in order to respond to your enquiry and communicate with you.
Depending on the nature of the enquiry, the legal basis may be our legitimate interest in responding to business communications or taking steps at your request prior to entering into a contract.
Provision of services and contractual relationships
Where necessary, personal data may be processed for the preparation, conclusion and performance of contracts and for communication relating to our services.
Compliance with legal obligations
We may process and retain certain information where required by applicable legal, accounting, tax or regulatory obligations.
Website security and operation
Certain technical data may be processed where necessary to maintain the security, integrity and proper functioning of our website.
Website analytics
With your prior consent, we use Google Analytics 4 to obtain statistical information about the use of our website and to help us understand how visitors interact with it.
Consent must be freely given, specific, informed and unambiguous and may subsequently be withdrawn. (European Commission)
4. Google Analytics 4
Our website uses Google Analytics 4 (GA4), a web analytics service provided by Google.
Google Analytics helps us understand how visitors use our website, for example which pages are visited and how visitors interact with the website. We use this information to evaluate and improve the content and usability of our website.
Google Analytics is not activated through our cookie consent mechanism unless you consent to Analytics cookies.
When you first visit our website, Analytics cookies are disabled by default. You can choose whether to enable them through our cookie banner.
Refusing Analytics cookies does not prevent you from using our website.
You can change or withdraw your cookie preferences at any time through the cookie settings available on our website.
5. Cookies
Cookies are small text files stored on your device when you visit a website. They may be used for the technical operation of the website, remembering user preferences and, subject to consent, analysing website usage.
Our website distinguishes between different categories of cookies, including:
Strictly Necessary Cookies
These cookies are necessary for the proper functioning and security of the website and cannot normally be disabled through our cookie management system.
Analytics Cookies
Analytics cookies are used for statistical analysis of website usage. On our website, these cookies are disabled by default and are activated only if you provide your consent.
Additional Cookies
Additional cookies, where applicable, are subject to the choices available through our cookie management system.
On your first visit to the website, you can choose Accept, Reject, or open Settings to manage individual cookie categories.
Non-essential cookies should not be placed before the visitor has given valid consent. (IPRS)
You can subsequently change your cookie preferences through the cookie settings available on our website. Cookies can also be deleted or restricted through your browser settings.
6. Recipients of Personal Data
Access to personal data is limited to persons who require such access for legitimate business, technical or legal purposes.
Where necessary, personal data may also be processed by trusted service providers acting on our behalf, such as website hosting, IT or other technical service providers.
Where Analytics cookies are accepted, data may also be processed in connection with the use of Google Analytics.
We may disclose personal data to public authorities, courts or other competent bodies where required by applicable law.
We do not sell personal data.
7. International Data Transfers
Some service providers used in connection with our website may process data outside the European Economic Area.
Where personal data are transferred internationally, we require an appropriate legal basis and safeguards in accordance with applicable data protection legislation.
8. Retention of Personal Data
We retain personal data only for as long as necessary for the purpose for which they were collected or as required by applicable law.
Information submitted through enquiries is retained for as long as reasonably necessary to respond to and manage the relevant communication or subsequent business relationship.
Information required for contractual, accounting, tax or legal purposes may be retained for the periods prescribed by applicable legislation.
Where processing is based on consent, data will be processed until the consent is withdrawn or until the applicable retention period expires.
9. Security of Personal Data
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Our website uses encrypted HTTPS/SSL communication.
Access to personal data is restricted to authorised persons and service providers who require access for legitimate purposes.
10. Your Rights
Subject to the conditions provided by applicable data protection legislation, you have the right to:
-
obtain information about the processing of your personal data;
-
request access to your personal data;
-
request correction of inaccurate or incomplete personal data;
-
request deletion of your personal data;
-
request restriction of processing;
-
object to processing based on legitimate interests;
-
receive your personal data in a structured, commonly used and machine-readable format where the right to data portability applies;
-
withdraw your consent at any time where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
Under the GDPR, individuals have rights including access, correction and deletion of data and the right to withdraw consent. (European Commission)
To exercise your rights, please contact us at:
We will respond to requests in accordance with the time limits prescribed by applicable data protection legislation.
11. Right to Lodge a Complaint
If you believe that your personal data have been processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority.
In Slovenia, the competent supervisory authority is:
Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec)
Dunajska cesta 22
1000 Ljubljana
Slovenia
12. External Links
Our website may contain links to websites operated by third parties.
PHA FARMED d.o.o. is not responsible for the privacy practices or content of third-party websites. We recommend reviewing the privacy policies of such websites before providing personal data.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our website, services, technologies or applicable legal requirements.
The current version will always be published on this website together with the date of the latest update.
Kaj sem namenoma spremenila
Iz starega teksta sem odstranila nekaj stvari, ki jih ne bi več objavljala v takšni obliki: predvsem trditev, da so Google Analytics podatki anonimni, avtomatično dvoletno obdobje vseh trajnih piškotkov ter precej kategorično trditev, da ima do podatkov dostop izključno PHA FARMED. Pri GA4 sodeluje zunanji ponudnik, zato mora biti tekst natančnejši.
Prav tako sem odstranila staro poglavje Google Fonts. Tega ne bi vključila, dokler ne preveriva, ali se fonti na sedanji strani dejansko nalagajo neposredno z Googlovih strežnikov ali lokalno. Privacy Policy naj opisuje dejansko stanje, ne zgodovinskih nastavitev.
Predlagam, da zdaj ta tekst v celoti zamenjaš za starega. Ko ga shraniš, pa bi še preverila Cookie Policy / Cookie Declaration, ker mora biti tudi ta usklajena z GA4. Potem bo pravni del spletne strani precej bolj urejen. (European Commission)