General terms and protection of personal data

The protection of your privacy is important for us, therefore, with this information we wish to help you understand what personal data we collect, why we collect them, how we use them, what your rights are and how you can enforce them.

General terms and conditions of the www.supernova.si website are drawn up in accordance with the Consumer Protection Act (ZVPot), the Personal Data Protection Act (ZVOP-1) and the Law on Electronic Communications (ZEKom-1).

Company data

e-mail: info@supernova.si

Modifications of terms and conditions of use

Supernova Marketing d.o.o. reserves the right to modify the general terms and conditions. Modifications are in force from the moment of their publication on the above-mentioned website.

Limitation of liability

For technical or other types of reasons, Supernova Marketing d.o.o. reserves the right to limit or completely stop the access to the website or otherwise, restrict or stop the functioning of the website for a definite or an indefinite period of time. Neither Supernova Marketing d.o.o., nor any other legal or natural person involved in the creation and construction of this website are in any event liable for any damage resulting from the existence, the access, the use and/or the impossibility of using this website and/or information on this website or related to it, or any errors or shortcomings in its content.

Website contents

By managing the website contents, Supernova Marketing d.o.o. strives to provide the correctness and up-to-dateness of the data published on the website, but cannot guarantee and does not accept any responsibility or liability for their accuracy, and up-to-dateness. All users use all contents published on this website under their own responsability. Supernova Marketing d.o.o. reserves the right to change this website contents at any time, in any way, regardless of the reason, and without prior warning.

User’s duties and responsabilities

While using the www.supernova.si website, the user is particularly obliged to:

• respect all applicable rules governing the use of this website,
• use the website in a way that does not cause harm or any other inconvenience (overload, preventing access, viral transmission, etc.) to Supernova Marketing d.o.o. on the website, software and hardware, as well as to other users of the website and third parties,
• refrain from behaviours that promote racial, political and religious intolerance, discriminate on grounds of nationality or sexual orientation,
• use no hostile speech, use no threats, degrading, obscene manner of expression,
• use the website for his own purposes, therefore any reproduction, modification, transfer, sale, transmission of contents on which third parties have rights or any other violation of other persons’ rights are prohibited,
• respect the protection of other users’ personal data.

Supernova Marketing d.o.o. reserves the right to use, in the event of non-compliance with the above rules or any other violation, all the legal means available to remove the subsequent consequences as soon as possible. At the same time, it gives the user the warning that, in the event of a reasonable suspicion of abuse, or the possibility of the abuse of the user, Supernova Marketing d.o.o. can restrict or completely disable the user’s access to the website, refuse to grant him a user name and/or claim compensation for the resulting damage as well as costs.

Protection of personal data

Supernova Marketing d.o.o. commits itself to protecting the data of legal persons and those of natural persons that users provide. Its contract sub-contractors, who may act as data processors for Supernova Marketing d.o.o., commit themselves to same extent. In order to prevent, in accordance with the Personal Data Protection Act, unauthorized access to such data or their disclosure, maintain the accuracy of personal data and guarantee their appropriate use, Supernova Marketing d.o.o. uses suitable technical and organizational procedures for securing personal data, which are determined by the Rules on the protection of personal data in accordance to the Personal Data Protection Act.

Collection, storage, purpose and output of personal data

1. Newsletter

Identity and contact details of the controller

Supernova marketing d.o.o.
Jurčkova cesta 223, Ljubljana, 1000 Ljubljana
Tax Number: SI 21571325
Telephone number (Supernova Rudnik Info Point): 08 200 80 00
e-mail: dp.si@supernova.at

Purpose

We process personal data to send newsletters, brochures and other information about our products and services or the activities of other entities, where you have expressed interest in receiving such information. The newsletter keeps you informed of the novelties in the offer, discounts, special offers and benefits, activities in its shopping centres and current prize games. You have the option to subscribe to newsletters and similar information services via our website.

For this purpose, we require your email address and your declaration that you consent to receiving the newsletter. When you subscribe to our newsletter, we will also store the date and time of your subscription. This serves as proof of your consent.

In addition, statistics on opening, reading, and click behaviour are created in connection with the newsletter. This enables us to offer you improved and tailored services and to provide you only with information that is actually of interest to you. This also serves the purpose of sending advertising messages and newsletters, as far as possible, only to actual or presumed interested recipients.

We also process your data in order to maintain an accurate and up to date database. We use a system to determine the validity and availability of all stored mail addresses to avoid undeliverable e-mails (“bouncing”).

Legal Basis

The legal basis for sending the newsletter is your consent pursuant to Article 6(1)(a) GDPR.

Profiling and the assignment of interest groups are based on our legitimate interest pursuant to Article 6(1)(f) GDPR in avoiding the misallocation of resources, providing effective and targeted advertising, and avoiding nuisance or negative associations.

We may process the e-mail addresses of newsletter subscribers to check whether they are still valid and technically reachable. This helps us keep our newsletter database accurate, avoid unsuccessful delivery attempts and protect the reliability of our newsletter system. The legal basis is our legitimate interest pursuant to Article 6(1)(f) GDPR.

Right to withdraw your consent

You may also unsubscribe from the newsletter at any time using the unsubscribe link included in each newsletter. In addition, users may submit a request for unsubscription and/or deletion of their personal data by contacting web@supernova.si. Such requests are processed manually by our agency’s team without undue delay.

The lawfulness of the processing carried out between the time of your consent and your withdrawal remains unaffected.

Right to object

Where we process your personal data on the basis of our legitimate interests, you have the right to object to this processing at any time on grounds relating to your particular situation.

If you object, we will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defense of legal claims.

Where your personal data is processed for direct marketing purposes, you may object at any time. In that case, we will no longer process your personal data for such purposes.

Processed personal data

For newsletters subscriptions, Supernova Marketing d.o.o. collects the following information: e-mail address. If that mail address includes other personal data about you (such as your real name) that data is processed as a byproduct as well. We collect personal data predominantly through voluntary transmissions at the time of the newsletter’s subscription. However, we also automatically collect data that is required for consent records, such as the date of consent. This is not processed for any other purpose.

Lastly, we might process your mail-address for a so called “bounce-test” to verify if it is still active and reachable. In this case we might also assign a label (active/inactive/unknown) to you based on the results.

Recipients

The newsletter sender and processor of your personal data for Supernova Marketing d.o.o. is: AV studio d.o.o., Koroška cesta 55, 3320 Velenje.

Supernova Marketing d.o.o. newsletters are sent via Brevo platform that provides a complete anonymization of the personal data of the newsletter addressee, and in compliance with the principle of minimization gives access to your personal data only to authorized persons and only on the basis of your requests for correction, access, limitation, objection, transfer, or erasure of personal data.

For bouncing services, we use Bouncer Sp. z.o.o. as our processor. Only your e-mail address is transmitted and will be hashed (anonymized) in all parts of the system, except the layer from which we download the results. All servers are in EU territory.

Your data will not be transferred to a third country.

Storage period

Where processing is based on consent, the data is stored until consent is withdrawn or for the duration of the consent.

Where an e-mail address is identified as invalid or permanently unreachable, we may delete it from the newsletter database or mark it as inactive.

Necessity of provision

You are not required to provide your data to us. Subscribing to the newsletter is completely voluntary. There are no legal disadvantages. However, if you refuse to do so, you won’t be able to subscribe to our newsletter and receive information and offers through it. All other services remain unaffected.

Automated decision making (including profiling)

In connection with our newsletters and similar information services, we may analyse opening, reading and click behaviour in order to understand which content is relevant to recipients and to tailor future communications accordingly.

This may involve assigning recipients to interest groups or adapting the content of future newsletters based on presumed interests. This constitutes profiling within the meaning of the GDPR.

We do not use this profiling to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. In particular, the profiling is used only to improve and personalize our communications and to avoid sending irrelevant information.

You may object to this processing at any time, in particular where your data is processed for direct marketing purposes. You may also unsubscribe from the newsletter at any time using the unsubscribe link provided in each newsletter or by contacting us directly.

Data subject’s rights

The GDPR affords data subjects access to the following rights:

• You have the right to obtain information about whether and how we process your personal data, and to receive a copy of your personal data.
• You have the right to request the correction of inaccurate or incomplete personal data concerning you.
• You have the right to request the deletion of your personal data, in particular where the data is no longer necessary for the purposes for which it was collected or otherwise processed.
• You have the right to request the restriction of processing of your personal data in certain cases.
• Where the processing is based on your consent or on a contract and is carried out by automated means, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to transmit that data to another controller, where technically feasible.
• You also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless such processing is legally permitted.

To exercise your rights, please contact us using the contact details provided in this privacy policy. We may need to verify your identity before responding to your request.

You also have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

2. Participation in prize games

For the participation in prize games, Supernova Marketing d.o.o. collects the following information: e-mail address, name and surname, postal address, contact telephone number and, if needed, tax number (in case the prize is higher than €42). Data processors collect personal data exclusively through voluntary transmission of personal data at the time of the application to participate in the prize game.

By entering your e-mail address, you apply to participate in the prize game. Supernova Marketing d.o.o. and the contract data processors will inform you of the course and the closure of the prize game, the potential draw and the receipt of the prize by mail.

After entering an e-mail address to participate in a prize game, you will receive a confirmation message to the given address – by confirming it and activating the consent, you will be registered for information on the Supernova Marketing d.o.o. prize game during its duration. Your submitted data will be stored until the end of the purpose or the duration of the prize game.

Personal data will be used only for the purpose or for the purposes for which the user has expressed its consent, with his user name and password-protected access. Only authorised persons (contract data processors) of the personal data administrator (Supernova Marketing d.o.o.), who are bound to diligent management of personal data in accordance with applicable European legislation, have access to the data.

Personal data for participating in the prize game will only be used for the purpose for which the user has given his consent. The prize game results (the participant’s name and surname) will be published on the website www.supernova.si, www.supernova-igra.si and on Supernova Marketing d.o.o. social networks. Supernova Marketing d.o.o. will in no case sell, lend or otherwise pass users’ data on to unauthorised third parties without your consent.

3. User’s rights

The user may at any time send to web1@supernova.si a proper request to access personal data collected and processed by the data controller, to correct personal data, erase personal data, restrict processing in relation to the individual, to which personal data are related, objection to the processing of personal data or the transferring of personal data.

4. Type of requests  

The website users may, at any time, in the case of a violation of their rights in the collection, processing and storage of personal data, file a complaint with the Information Commissioner, and they are also entitled to legal remedies as well as compensation and liability in the event of inaction by the supervisory authority.

5. Photographing and recording at shopping centres

Photographing and recording at Supernova shopping centres shall be carried out for two purposes, in the case of documentation of marketing activities and implementation of technical protection.

At shopping centres, photographing and video recording may be performed during events and special marketing activities. You will be informed of this by the label at the shopping centre entrance. Photographing and video recordings shall be used to promote activities at Supernova shopping centres and shall be kept until revoke. Selected photographs and videos are published in Supernova Marketing d.o.o. internal media (Supernova websites, SuperSytle magazine, Supernova social networks).

Notice to individuals regarding video surveillance implementation

Supernova Slovenija Shopping Centres Group – The Supernova Slovenija Shopping Centres Group includes all Supernova companies as owners of each shopping centre (‘Supernova’). By the provisions of the Personal Data Protection Act (Official Gazette of the Republic of Slovenia, No. 163/2022 and subsequent – ZVOP-2) and the General Data Protection Regulation (GDPR), this notice informs customers that video surveillance is being carried out in some of the Supernova shopping centres and their associated parking lots. Notices about the video surveillance implementation are positioned at the entrance of each monitored area, allowing individuals to opt out of entering the monitored area on time. In connection with the implementation of video surveillance, the following information is provided:

Purpose of video surveillance: Video surveillance is conducted to ensure the safety of individuals and property within areas, premises, and spaces owned by the Supernova shopping centres. It also serves to address liability and other claims, including those about compliance with the shopping centres’ regulations (under paragraph 1 of Article 77 of the Personal Data Protection Act and points 1(d) and 1(f) of Article 6 of the General Data Protection Regulation).

Operator of the Video Surveillance System: KLEMM VAROVANJE d.o.o., Letališka 33, 1000 Ljubljana, registration number: 6577229000; email address: info@klemmsecurity.si

Website address for exercising individual rights in the field of personal data protection: https://www.supernova.si/en/privacy-policy-and-house-rules

Contact information of the authorized person: info@supernova.si.

The legal basis for implementing video surveillance is Supernova’s legitimate interest, which aims to safeguard property from burglary, theft, destruction, damage, vandalism, etc., while also ensuring the protection of employees and customers (as outlined in point (f) of Article 6(1) of the GDPR in conjunction with Articles 76, 77, and 78 of the ZVOP-2).

Information about the transmission of video recordings: Under legal obligations applicable to the Operator, personal data may be disclosed to competent state authorities (e.g., police, court). Other (mainly unusual) further processing of personal data is not carried out. Video recordings from the Video Surveillance System are not transmitted to third countries.

Personal data storage duration: Video surveillance recordings are stored for a maximum of 6 months from the moment of recording. However, they may be retained for a shorter period if older recordings are overwritten due to limited storage capacity. In certain cases, recordings may be stored for longer periods if there is a legitimate interest or a lawful request from authorities.

Information about the right to file a complaint with the supervisory authority: You can file a complaint with the Information Commissioner at Dunajska 22, 1000 Ljubljana, e-mail: gp.ip@ip-rs.si

Additionally, Supernova further informs that individuals have access to all rights under Article 13 of the General Data Protection Regulation (GDPR), where information is provided regarding the existence of the individual’s rights to i) request access to personal data, ii) request rectification or erasure of personal data or restriction of processing or iii) object to processing and iv) data portability.

Individuals’ rights may potentially be limited by the legitimate interests of other parties.

An individual may, with a written request sent to our address or email info@supernova.si, at any time request the exercise of rights granted to individuals by the ZVOP-2 or the GDPR Regulation. These rights can only be exercised because personal data generated by video surveillance contain only the recording of the individual (image), location, and date and time of the recording. Access to personal data may be requested by specifying the exact time when the individual was present in the areas/facilities under video surveillance. The Operator will enable access to personal data if the individual can be identified without disproportionate effort and costs, and if the technical capabilities allow the obscuring of the image of all other identifiable individuals in the recording.

The individual does not have the right to correction since it is inherently impossible to correct the recording of the Video Surveillance System in terms of rectifying inaccurate or incomplete personal data.

The Operator may, upon request, delete personal data if one of the circumstances listed in Article 17(1) of the GDPR is fulfilled, provided that none of the exceptions listed in Article 17(3) of the GDPR apply.

The right to data portability under Article 20 of the GDPR is not applicable. However, individuals have the right to object to processing and the right to restriction of processing, considering the nature of the data.

In the implementation of video surveillance, the Operator does not engage in automated decision-making or profiling.

Use of the common spaces of the shopping center and the outside surroundings of the center

Performances by artists, musical groups or singers and similar activities are not permitted without the express prior approval of the center management.

Also, without the approval of the management, selling, gathering, commercial filming and photography, commercial events or distribution of flyers, brochures or any other promotional material (even if free of charge) and collection of contributions in the common areas of the shopping center are not allowed.

Events or gatherings of a political or religious nature are strictly prohibited.

Destruction or destructive use of shopping center equipment and inappropriate behavior towards employees of the shopping center and other visitors are strictly prohibited and inadmissible.

In the common areas of the shopping center, cycling, skateboarding, and driving motorized vehicles of any kind are strictly prohibited.

For health and safety reasons, dogs and other animals can only enter the shopping center on a leash, larger dogs must also be muzzled.

Scammers, casual sellers, beggars and vagrants are not allowed in or around the mall and may be removed by mall security.

Smoking is allowed only outside the buildings of the shopping center and in places specifically designated for this purpose by the center administration.

Outside of the mall’s opening hours, only authorized personnel may enter the mall.

Parking

Parking is allowed only in marked places for customers of the shopping center.

Parking is allowed only to visitors of the shopping center during the operating hours of the shopping center and for a maximum of 3 hours. If the user/owner of the vehicle violates the parking rules, he will be charged a user fee of EUR 50.00/day for the first use and EUR 300.00/day for each subsequent use. Vehicles parked outside the operating hours of the shopping center or parked for another purpose may also be removed at the expense of the vehicle owner.

Different rules may apply if and as specified at the location of the shopping center.

The management of the shopping center may exclude the customer/visitor and deny him access to the shopping center if they do not respect the house rules and/or the instructions of the management of the center.

Copyright

On the basis of the provisions of the Law on Copyright and Related Rights, Supernova Marketing d.o.o. is the holder of material copyright on all contents published on the website in the widest sense (texts, graphics, images, illustrations, designs, audio, video). Without Supernova Marketing d.o.o. written permission, any copying, transcription, re-publishing or other publications of contents for commercial purposes are prohibited. The contents published on the website can only be reproduced for non-commercial purposes and must maintain all the above-mentioned warnings on copyright or other rights. Supernova Marketing d.o.o. has the right to use trademarks and service brands that appear on this website.

Google Analytics

The website uses Google Analytics, Google Inc. company web analysis tool. Users’ IP addresses are processed only in an anonymized form by extending the »anonymize IP«. Thus, the data cannot be linked to an individual. Example of cookies used: _ga, __utma, __utmb,__utmc, __utmz and __utmv.

If you wish to explicitly disable the Google Analytics tool in the future, click on the following link: tools.google.com/dlpage/gaoptout.

Cookie Collection Policy

This web site uses cookies. We use cookies to adapt contents and advertisements, provide functions through social media and analyse access to our websites.

In addition, we provide information on our website visits to our partners for social networks, marketing and analysis.

Our partners can link these data to other information you have provided or they have collected as part of your use of these services.

Cookies are small text files used by websites to make their websites function more effectively.

In accordance with the law, we can store cookies in your device if it is necessary for the functioning of this website. We need your consent for all other types of cookies. Different types of cookies are used on this site. Some cookies that appear on our website are determined by our partners.

Your consent is valid for the following areas: www.supernova.si.

Final provisions

Any legal dispute arising from the use of this website shall be governed exclusively by Slovenian substantive law. Any dispute, that either directly or indirectly, arises form the use of this website, is in the substantive jurisdiction of the Court of Justice, in Ljubljana, in accordance with the legislation in force. If individual provisions of the terms and conditions of use are invalid or become invalid, this shall not affect the validity of the other provisions.