Privacy policy

1. Data controller

The controller of your personal data is:
Silco d.o.o., Šentrupert 5a, 3303 Gomilsko, Slovenia

Silco d.o.o. respects the importance of personal data protection. We process personal data collected through the www.silco.si website, the Silco B2B Portal (b2b.silco.si) and the Silco mobile application in compliance with the General Data Protection Regulation (GDPR) and applicable Slovenian data protection legislation.

2. What personal data we collect

Depending on how you interact with us, we may process:

• name and surname;
• company name, address and VAT number (for business partners);
• contact details (e-mail address, phone number);
• agreed business and collaboration conditions (for business partners);
• order history and related business documents;
• information you provide when contacting us or submitting a request.

3. Silco B2B Portal

The Silco B2B Portal is a closed online portal intended exclusively for authorised Silco business partners (distributors). Access is granted by Silco, and users cannot register themselves.

When you use the B2B Portal, we process the following data:

• User account data: name, surname, e-mail address, phone number, preferred language and login credentials.
• Company data: company name, address, VAT number and agreed commercial conditions, such as prices and discounts.
• Order data: products, quantities, prices, order numbers, order statuses, order confirmations and outstanding (back-order) quantities.
• Financial data: invoices, due dates and open amounts related to your company account.
• Complaints and requests: data submitted through the Feedback & Support section, such as product, batch number, quantity, application date, description and any attached photographs or files.
• Technical data: data needed for secure sign-in and for the portal to function, such as session cookies and the “Stay signed in” option.

We use this data to manage your portal access, process and confirm orders, provide access to invoices and order history, handle complaints and support requests, and send service e-mails related to your account (for example account activation, password reset and order notifications).

Orders submitted through the portal are transferred to our internal business information system (ERP) for processing.

The Feedback & Support forms are protected with Google reCAPTCHA to prevent spam and abuse. reCAPTCHA may collect technical data about your device and browser, which is processed by Google in accordance with its own privacy policy.

The B2B Portal is not used for online payments, and no payment card data is collected through it.

4. Legal basis for processing

We process personal data on the following legal bases:

• performance of a contract or a business relationship with you or your company (for example B2B Portal access, orders, invoicing and complaints);
• compliance with legal obligations (for example accounting and tax regulations);
• our legitimate interest in ensuring secure and efficient business operations and improving our services;
• your consent, where required (for example for receiving marketing communications).

5. Purpose of processing

Personal data is used only for the purposes for which it was collected and to improve the user experience of our website and services. With your explicit consent, we may also use your contact details to send notifications, offers, news, event invitations and other marketing content. You may withdraw this consent at any time.

6. Disclosure to third parties

We do not use personal data for other purposes, and we do not disclose it to third parties without your explicit consent, except where required by law. To provide our services, personal data may be disclosed to:

• delivery and logistics providers;
• IT service providers (software development and maintenance, hosting and e-mail delivery services);
• the website and B2B Portal administrator;
• accounting service providers.

These providers process personal data only on our behalf and in accordance with our instructions and applicable legislation.

7. Data storage and retention

Personal data is stored in Silco d.o.o. databases and protected with appropriate technical and organisational measures against unauthorised access, loss or misuse.

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected. B2B Portal account data is kept for as long as the account is active. Business documents, such as orders and invoices, are kept for the periods required by law.

8. Your rights

Under the GDPR, you have the right to:

• access your personal data;
• rectification of inaccurate or incomplete data;
• restriction of processing;
• data portability;
• erasure of your personal data (“right to be forgotten”);
• object to processing;
• withdraw your consent at any time, where processing is based on consent.

You also have the right to lodge a complaint with the supervisory authority, the Information Commissioner of the Republic of Slovenia (www.ip-rs.si).

9. Use of the camera in the mobile application

The Silco mobile application uses the camera only to scan and verify product barcodes or data related to the application’s functionality.

The camera is active only while the scanning function is in use. It is not used to take photos or record video, and no images, videos or other content are stored on the device or on Silco servers.

The application does not collect, store or process personal data during scanning and does not record or track users. No additional user data is collected through the mobile application unless explicitly stated and agreed to by the user.

10. Contact

For further information, to exercise your rights, to withdraw consent, or with questions about data protection, the mobile application or the camera, please contact us here.