VIAL Automation d.o.o. (hereinafter: “the Controller”) respects your privacy and is committed to protecting your personal data in accordance with the Slovenian Personal Data Protection Act (ZVOP-2) and Regulation (EU) 2016/679 (GDPR). This Privacy Policy explains what personal data we collect, for what purposes we process it, on what legal basis, and what rights you have as a data subject.
Controller: VIAL Automation d.o.o.
Contact e-mail: info@vial-automation.si
1. Data Controller
The controller of personal data collected through this website is:
VIAL Automation d.o.o.
Gotovlje 57, 3310 Žalec
Slovenia
E-mail: info@vial-automation.si
For any questions regarding the protection of personal data, please contact us at the address above.
2. Personal Data We Collect
2.1 Automatically Collected Data
When you visit our website, we automatically collect the following technical data:
- IP address
- browser type and version
- operating system
- referring website (referrer URL)
- time and duration of visit
- pages visited
These data are collected to ensure the operation of the website, to analyse security incidents, and for statistical purposes.
2.2 Cookies and Tracking Technologies
Our website uses cookies. Cookies are small text files stored on your device. We distinguish between:
- Strictly necessary cookies – required for the operation of the website (no consent required).
- Analytical cookies (Google Analytics) – only collected with your prior consent.
- Advertising cookies (Google Ads) – only collected with your prior consent.
Analytical and advertising cookies will only be placed after you have given explicit consent via the cookie banner. You may withdraw your consent at any time through the cookie settings on the website or via your browser settings.
3. Purpose of Processing and Legal Basis
We process your data on the following legal bases under Article 6 GDPR:
- Legitimate interest (Article 6(1)(f) GDPR)
Ensuring the operation, security, and maintenance of the website.
- Consent (Article 6(1)(a) GDPR)
Placement of analytical and advertising cookies and tracking technologies (Google Analytics, Google Ads). Consent is voluntary and may be withdrawn at any time without consequence.
4. Processors and Recipients of Data
We may share your personal data with the following categories of recipients:
- Google LLC (Google Analytics, Google Ads) – only on the basis of your consent; Google LLC acts as a processor and provides appropriate safeguards for transfers to third countries (Standard Contractual Clauses).
- Hosting and technical service providers – only to the extent necessary for the operation of the website, under a data processing agreement (Article 28 GDPR).
We do not sell personal data to third parties and do not share it for third-party commercial purposes.
5. Transfers of Personal Data to Third Countries
When using Google Analytics and Google Ads services, your data may be transferred to the United States of America. Google LLC provides appropriate safeguards for such transfers (Standard Contractual Clauses pursuant to Article 46 GDPR). Transfers take place only with your prior consent.
For details on how Google handles data, please refer to Google’s Privacy Policy at https://policies.google.com/privacy.
6. Retention Periods
- Technical log data: up to 12 months.
- Analytical data (Google Analytics): in accordance with the data retention settings in Google Analytics (default 26 months), unless consent is withdrawn earlier.
- Advertising campaign data: until consent is withdrawn, or a maximum of 24 months.
Upon expiry of the retention period, data will be deleted or anonymised.
7. Rights of Data Subjects
As a data subject, you have the following rights under ZVOP-2 and the GDPR:
- Right of access (Article 15 GDPR): you may request confirmation of whether we process your data and access to it.
- Right to rectification (Article 16 GDPR): you may request correction of inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”, Article 17 GDPR): you may request erasure of data where there is no longer a lawful basis for processing.
- Right to restriction of processing (Article 18 GDPR): you may request restriction of processing in cases defined by the GDPR.
- Right to data portability (Article 20 GDPR): where processing is based on consent or a contract and is carried out by automated means, you have the right to receive your data in a structured, machine-readable format.
- Right to object (Article 21 GDPR): where processing is based on legitimate interest, you have the right to object to processing.
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time, free of charge and without consequence (without affecting the lawfulness of processing carried out before withdrawal).
- Right to lodge a complaint: you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (www.ip-rs.si, phone: +386 1 230 97 30).
To exercise your rights, please send a request to: info@vial-automation.si. We will respond without undue delay and within one month of receipt of the request.
8. Security of Personal Data
We have implemented appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or disclosure (Article 32 GDPR), including:
- encryption of data in transit (HTTPS/TLS),
- restriction of access to data to authorised persons only,
- regular review of security measures.
Nevertheless, no method of transmission over the internet is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you in accordance with Article 34 GDPR.
9. Privacy of Minors
Our website is not intended for persons under the age of 16, and we do not knowingly collect their personal data. In accordance with ZVOP-2, the processing of data of children under 16 requires the consent of a parent or legal guardian. If we become aware that we have inadvertently collected data from a minor, we will delete it immediately.
10. Links to Third-Party Websites
Our website may contain hyperlinks to third-party websites. We are not responsible for the data practices of those websites. We recommend that you review their privacy policies before providing any personal data.
11. Changes to This Privacy Policy
We may update this Privacy Policy at any time to reflect changes in our practices or applicable law. All material changes will be posted on this page with an updated date. We recommend that you review this policy periodically. Continued use of the website after the publication of changes constitutes acceptance of the updated policy.
12. Contact and Complaints
For any questions, requests, or concerns regarding the protection of personal data, please contact us:
E-mail: info@vial-automation.si
You also have the right to lodge a complaint with the supervisory authority:
Information Commissioner of the Republic of Slovenia
Dunajska cesta 22, 1000 Ljubljana, Slovenia
Phone: +386 1 230 97 30
E-mail: gp.ip@ip-rs.si
Website: www.ip-rs.si
Last updated: 11 June 2026