1. Who is responsible for your data
The controller of your personal data is:
Gorenje Orodjarna d.o.o.
Partizanska cesta 12, 3320 Velenje, Slovenia
Registration no.: 5735378 (Registration Court Celje) · VAT ID: SI67023428
Email: privacy@gorenje-orodjarna.si · Phone: +386 3 899 2364
Gorenje Orodjarna is part of the Hisense Europe group.
Data protection officer: write to the privacy email above.
In this policy, “we” and “us” mean Gorenje Orodjarna d.o.o.
2. What personal data we collect
We collect only the data needed to run the website and answer your enquiries. We do not use analytics, advertising or social-media tracking on this website.
- Technical data when you visit the site: IP address, browser type and version, operating system, requested page, date and time of access, referring URL. These are recorded automatically in server logs by our hosting provider.
- Data you send us by email or phone: name, surname, company, job title, email address, phone number, the content of your message, and any files you attach (for example technical drawings or 3D models, which may contain names of engineers or company contacts).
- Business contact data: contact details of representatives of customers, suppliers and partners with whom we correspond about quotes, orders or projects.
- Job application data: CV, cover letter, contact details, education and work history and any other data you choose to send us (see section 5).
- Employees shown on the website: name, job title and photo of team members presented on the Company page, published with their consent.
We do not knowingly collect special categories of personal data (Art. 9 GDPR). Please do not include such data in your messages.
3. Why we process your data and on what legal basis
Every processing activity rests on one of the legal bases in Article 6(1) GDPR.
| Purpose | Data | Legal basis |
|---|---|---|
| Delivering the website, keeping it secure, preventing abuse | Technical data, server logs | Legitimate interest, Art. 6(1)(f) – a functioning, secure website |
| Answering enquiries and preparing quotes | Contact data, message, attachments | Steps before a contract, Art. 6(1)(b); otherwise legitimate interest, Art. 6(1)(f) |
| Performing contracts with customers and suppliers | Business contact data | Contract, Art. 6(1)(b), and legitimate interest in B2B communication, Art. 6(1)(f) |
| Recruitment | Application data | Steps before an employment contract, Art. 6(1)(b); consent for keeping your application for future openings, Art. 6(1)(a) |
| Presenting team members on the website | Name, title, photo | Consent, Art. 6(1)(a) |
| Accounting, tax and other statutory obligations | Data in invoices and contracts | Legal obligation, Art. 6(1)(c) |
| Establishing, exercising or defending legal claims | Relevant correspondence and records | Legitimate interest, Art. 6(1)(f) |
Where we rely on legitimate interest, we have weighed our interest against your rights. You may object at any time (section 9). Where we rely on consent, you may withdraw it at any time; this does not affect processing carried out before withdrawal.
4. Cookies and similar technologies
This website uses only technically necessary cookies and storage, so no cookie consent banner is required under Article 157 ZEKom-2 and the ePrivacy Directive. We do not use analytics, marketing or social-media cookies.
| Cookie / technology | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| wf_auth_page (only on password-protected pages) | Webflow | Remembers access to a protected page | Strictly necessary | Session |
| Font and file delivery via CDN | Webflow / Fastly | Loads fonts and images; your IP address is processed to deliver files | Strictly necessary, no cookie set | – |
If we later add analytics, video embeds, maps or other third-party content, we will ask for your consent first through a cookie banner and update of this table.
You can block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop parts of the site from working.
5. Job applicants
If you apply for a job, we use your application only to assess your suitability for the position. Only HR staff and the hiring managers involved see it.
If you are not hired, we delete your application within 6 months after the selection process ends, unless you consent to us keeping it for future openings. In that case we keep it for up to 2 years, and you can withdraw consent at any time. Applications of candidates who are hired become part of the personnel file under Slovenian employment law.
6. Who receives your data
We do not sell your personal data. We share it only where needed for the purposes above:
- Website hosting: Webflow, Inc. (USA) hosts the website and its server logs; files are delivered through the Fastly content delivery network. Both act as our processors under a data processing agreement (Art. 28 GDPR).
- Email and IT services: informatika@gorenje-orodjarna.si, which hosts our mailboxes as a processor.
- Hisense Europe group companies: where an enquiry or project concerns other group companies, or for shared IT and administrative services, under intra-group agreements.
- Professional advisers and authorities: accountants, auditors, lawyers, courts and public authorities, where required by law or to protect our legal rights.
All processors may use your data only on our instructions and must keep it confidential and secure.
7. Transfers outside the EU/EEA
Our hosting provider Webflow is based in the United States, so technical data may be processed there. These transfers rely on the EU–US Data Privacy Framework adequacy decision, where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR) with additional safeguards.
If data is shared with Hisense group companies outside the EEA (for example in China), we use Standard Contractual Clauses and assess the level of protection before any transfer. You can request a copy of the safeguards from the contact in section 1.
8. How long we keep your data
We keep personal data only as long as the purpose requires or the law obliges us, then delete or anonymize it.
| Data | Retention period |
|---|---|
| Server logs | Up to 30 days, longer only to investigate a security incident ([confirm with hosting settings]) |
| Enquiries that do not lead to a contract | 2 years after the last contact |
| Business correspondence, quotes and contracts | Duration of the business relationship plus 5 years (general limitation period, Obligations Code) |
| Invoices and accounting records | 10 years after the end of the year they relate to (Slovenian VAT and tax law) |
| Job applications (not hired) | 6 months after selection ends; up to 2 years with consent |
| Team member photos on the website | Until consent is withdrawn or employment ends |
9. Your rights
Under Articles 15–22 GDPR you have the right to:
- Access – get confirmation whether we process your data and a copy of it.
- Rectification – have inaccurate or incomplete data corrected.
- Erasure – have your data deleted when it is no longer needed or was processed unlawfully.
- Restriction – have processing limited, for example while accuracy is checked.
- Data portability – receive data you gave us in a structured, machine-readable format.
- Objection – object at any time to processing based on legitimate interest.
- Withdraw consent – at any time, without affecting earlier lawful processing.
To use these rights, write to [privacy email] or to our postal address in section 1. We reply within one month; this can be extended by two months for complex requests. We may ask you to confirm your identity.
Right to complain. You can lodge a complaint with the Slovenian supervisory authority:
Informacijski pooblaščenec (Information Commissioner of the Republic of Slovenia)
Dunajska cesta 22, 1000 Ljubljana · gp.ip@ip-rs.si · +386 1 230 97 30 · www.ip-rs.si
You may also complain to the authority in the EU country where you live or work.
10. Security, minors and changes
Security. We protect personal data with appropriate technical and organizational measures (Art. 32 GDPR), including encrypted HTTPS connections, access limited to authorized staff, and confidentiality obligations for employees and processors. Customer drawings and 3D models are also covered by our confidentiality and NDA obligations.
Automated decisions. We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.
Minors. This website is aimed at businesses and adult job seekers. We do not knowingly collect data from children under 15, the age of digital consent in Slovenia.
Obligation to provide data. You are not obliged to give us personal data. Without contact details, however, we cannot reply to your enquiry or consider your application.
Changes to this policy. We may update this policy when our website or the law changes. The current version is always published on this page with its effective date.
Effective from: 14.10.2026