Thank you for visiting our website. The protection of your personal data is very important to us. In addition to providing high-quality content, we also grant you the right to determine the way in which your personal data is being used. This Privacy Policy governs the collection, storage, and processing of the users’ personal data collected by the controller.

PERSONAL DATA CONTROLLER

The controller is the company AKCS d.o.o., Ulica Gorenjskega odreda 6, 4000 Kranj, Slovenia.
The contact person is accessible by mobile phone at +38641810221 and via e-mail at info@akcs.si.

As a recipient or user, you allow the controller to collect, process, and store the personal data submitted, all in accordance with the applicable personal data protection legislation.

PERSONAL DATA CATEGORIES

‘Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

The data stored by the personal data controller:
• e-mail address;
• name and surname along with a title or gender to facilitate the creation of personalized e-mails;
• company’s name;
• address;
• GSM number;
• past inquiries, purchases, invoices, claims.

THE PURPOSES OF PERSONAL DATA PROCESSING AND LEGAL BASES FOR DATA PROCESSING

The data controller collects and processes personal data on the following legal grounds:
• The processing is necessary to fulfill a legal obligation applicable to the controller;
• The processing is necessary for the fulfilment of a contract to which the data subject is a contracting party, or for the implementation of measures at the request of such an individual prior to the conclusion of the contract;
• The processing is necessary due to the legitimate interests pursued by the controller or a third party;
• The data subject consents to the processing of his or her personal data for one or more specific purposes;
• The processing is necessary to protect the vital interests of the data subject or of another natural person.

The controller, i.e. the company AKCS d.o.o., will use the data obtained from users for the following purposes:
• to facilitate communication-related to subscriptions or (pre-)contractual relations;
• to conduct prize competitions;
• to provide notifications and send newsletters, articles, event notifications by e-mail;
• to conduct direct marketing and send offers via e-mail and on the website;
• to display tailored advertisements on advertising platforms (Google and Facebook).

Notifying Individuals via Email, e.g., E-newsletters

Based on the performance of lawful activities, the controller can inform clients, customers, and users of its services about its services, events, trainings, offers, and other content via their email address. Individuals can at any time request the termination of such communication and processing of personal data, and withdraw from receiving messages through the unsubscribe link in the received message or by sending a request via email or regular mail to the controller’s address.
Legal grounds for data processing are legitimate interest and consent. Data will be processed until the withdrawal of message receipt, or until the purpose of processing is fulfilled. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

EXECUTION OF A CONCLUDED CONTRACT

In cases where an individual concludes a contract with the controller, this represents the legal basis for the processing of personal data. The controller is thus authorized to process personal data for the conclusion and performance of the contract, such as the sale of goods and services, preparation of offers, participation in various programs, etc. If the individual does not provide personal data, the controller cannot conclude the contract, nor can the controller perform the service or deliver goods or other products in accordance with the concluded contract, as it lacks the necessary data for execution. On this basis, the controller processes only and exclusively those personal data necessary for the conclusion and proper performance of contractual obligations.

The legal basis for data processing is the contract. The retention period is until the purpose of the contract is fulfilled or up to 6 years after the termination of the contract, except in cases where there is a dispute between the individual and the controller regarding the contract. In such cases, the controller retains the data for 10 years after the final decision of the court, arbitration, or judicial settlement or, if there was no legal dispute, 6 years from the date of peaceful resolution of the dispute.

LEGITIMATE INTEREST

The controller can also process personal data based on a legitimate interest, which it pursues. This is not permissible where such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require the protection of personal data. In the case of using legitimate interest, the controller conducts an assessment in accordance with the legislation. Processing of personal data of individuals for direct marketing purposes is considered to be carried out in the legitimate interest.

The controller may process personal data of individuals, collected from publicly available sources or in the course of lawful business activities, for the purposes of offering goods, services, employment, informing about benefits, events, etc. For these purposes, the controller may use ordinary mail, phone calls, email, and other telecommunications means. For direct marketing purposes, the controller may process the following personal data of individuals: name and surname, permanent or temporary residence address, phone number, and email address. The controller can process these personal data for direct marketing purposes even without the explicit consent of the individual. The individual can at any time request the cessation of such communication and processing of personal data and withdraw from receiving messages through the unsubscribe link in the received message or by sending a request via email or regular mail to the controller’s address.

The legal basis for data processing is the legitimate interest. Data will be processed until the withdrawal of message receipt or until the purpose of processing is fulfilled. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

PROCESSING BASED ON CONSENT

If the controller does not have a legal basis demonstrated on the basis of law, contractual obligation, legitimate interest, or protection of the individual’s life, they may request consent from the individual. Thus, the controller may process certain personal data of the individual for the following purposes when the individual gives consent:
• Residential address and email address (for the purposes of informing and communication);
• Photographs, video recordings, and other content related to the individual (e.g., publishing pictures of individuals on the website for the purposes of documenting activities and informing the public about the controller’s work and events);
• Other purposes agreed upon with the individual’s consent.

An individual can subscribe to newsletter by entering their first and last name and email address and clicking the “subscribe” button on the website: https://oduduwa-nigeria.com/.

By doing so, they confirm that they have read and accepted the privacy policy and terms of Oduduwa Europe:
https://www.oduduwa-europe.com/privacy-policy.html,
https://www.oduduwa-europe.com/terms-and-conditions.html,

and consent to receiving notifications about news, events, publications, e-store offers, posts, and newsletters via email. The data controller is AKCS d.o.o., and the data will be processed within the system of a contracted data processor, such as Mailchimp (the Rocket Science Group LLC d/b/a Mailchimp).

If the individual consents to the processing of personal data and later wishes to withdraw this consent, they can request the cessation of personal data processing by sending a request via email or regular mail to the controller’s address. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Upon receipt of the withdrawal or deletion request, the data will be deleted within 15 days at the latest. The controller may delete these data before the withdrawal when the purpose of personal data processing has been achieved or if required by law.

Exceptionally, the controller may refuse a deletion request for reasons set out in the General Regulation in cases of exercising the right to freedom of expression and information, compliance with a legal obligation to process, reasons of public interest in the area of public health, purposes of archiving in the public interest, scientific or historical research purposes, statistical purposes, execution, or defense of legal claims.

The legal basis for data processing is consent. Data will be processed until withdrawal of consent or until the purpose of processing is fulfilled. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Protection of Vital Interests of the Individual
The controller can process the personal data of the individual if it is necessary to protect their vital interests. In urgent cases, the controller can search for the individual’s personal document, check whether this person exists in its database, review their medical history, or contact their relatives, for which the controller does not need the individual’s consent. This applies when it is necessary to protect the individual’s vital interests.

DATA RETENTION PERIOD

The controller will retain personal data only as long as necessary to achieve the purpose for which the personal data were collected and processed. If the controller processes data based on the law, they will retain it for the period prescribed by the law. Some data is retained during cooperation with the controller, while some data must be kept permanently. Personal data processed by the controller based on a contractual relationship with the individual will be retained for the period necessary to execute the contract and 6 years after its termination, except in cases where there is a dispute between the individual and the controller regarding the contract. In such cases, the controller retains the data for 10 years after the final decision of the court, arbitration, or judicial settlement or, if there was no legal dispute, 6 years from the date of peaceful resolution of the dispute. Personal data processed by the controller based on the individual’s consent or legitimate interest will be retained until the withdrawal of consent or request for deletion of data. Upon receipt of the withdrawal or deletion request, the data will be deleted without unnecessary delay. The controller can also delete these data before withdrawal when the purpose of personal data processing has been achieved or if required by law. In the case of exercising individual rights, the controller retains the personal data of that individual until the matter is finally resolved, and after final resolution, in accordance with the final decision in the matter.

Exceptionally, the controller may refuse a deletion request for reasons such as: exercising the right to freedom of expression and information, compliance with a legal obligation to process, reasons of public interest in the area of public health, purposes of archiving in the public interest, scientific or historical research purposes, statistical purposes, execution, or defense of legal claims. After the retention period, the controller must effectively and permanently delete or anonymize personal data so that they can no longer be linked to a specific individual.

PERSONAL DATA PROTECTION

The controller will protect the obtained data in accordance with the applicable personal data protection legislation and in accordance with internal acts implemented on the basis of the law. The controller will provide adequate organizational and technical protection and will not submit or disclose the obtained data to third persons under any circumstances. The company AKCS d.o.o. initiates and maintains appropriate technical and organizational measures to protect personal data.  However, no one can guarantee one hundred percent safety when transferring data online.

USER RIGHTS

The provisions of the EU General Data Protection Regulation (GDPR) stipulate that the personal data controller must, at the user’s request:

• confirm whether the data related to the user is being processed or not and enable the user to access their data;
• provide a copy of the personal data related to the user;
• allow the user to correct or amend their personal data;
• allow the user to partially or completely delete their personal data;
• allow the user to transfer their personal data to another provider of similar services;
• allow the user to partially or completely revoke their consent to personal data processing.

The controller will honour your wish to revoke your consent and finalize the revocation of your consent to personal data processing within 15 days.

Any individual who feels that their rights in relation to personal data protection have been breached by the controller may file a complaint with the supervisory authority (the Information Commissioner of the Republic of Slovenia DUNAJSKA CESTA 22, 1000 LJUBLJANA, SLOVENIJA, T: 00 386 1 230 97 30, e-mail: gp.ip@ip-rs.si) at any given time.
Every user has the option of sending an e-mail with the revocation as an answer to a received e-mail.

COOKIE NOTICE

Information about cookies is available at the link: https://oduduwa-nigeria.com/cookie-policy/

CONTRACTUAL PROCESSORS AND STORAGE AREA

The controller forwards the collected personal data to the contractual processors, who may process the data solely within the scope of the controller’s instructions and authorizations and who are obliged by a written contract concluded with the controller to provide an adequate level of personal data protection, specifically: for CRM, an e-mail marketing system, and a marketing automation system. The provider stores personal data files in the EU and does not export them to third countries.

The controller may forward personal data to digital advertising platforms (Google, Facebook, LinkedIn, etc.) and use their cookies that enable the controller to create more precise segments, display targeted ads, and conduct remarketing. The controller thus provides the user with more relevant advertisements on these platforms. This may involve the export of data to a contractual processor outside the EU on the basis of an individuals express consent.

Relations with contract processors from the USA are regulated on the basis of standard contractual clauses (model contracts adopted by the European Commission) and/or binding business rules (adopted by the operator and approved by supervisory authorities in the EU).

LEGAL NOTICE

The entire graphic design of the website, including all graphic elements and all content published on www.oduduwa-nigeria.com, is owned by the company AKCS d.o.o. and is subject to copyright protection or another form of intellectual property protection. Without permission from the company AKCS d.o.o., the content must not be copied, disseminated, or distributed in any other way. It is forbidden to use the content in any form, including, but not limited to, alteration, copying, and publication of any content in its entirety or in parts, unless the controller issues a written authorization.

The company AKCS d.o.o. will make its best efforts to provide accurate and up-to-date information on the website; however, the user should take note of the fact that all texts are for information purposes only and the company does not guarantee their accuracy or up-to-dateness nor does it assume any liability in this regard. All users use the published content on their own responsibility.  The company AKCS d.o.o. shall not be held responsible for any potential issues related to website functionality. AKCS d.o.o. reserves the right to potential errors regarding the content published on www.oduduwa-nigeria.com and the right to alter or remove the website’s content at any time, regardless of the reason and without prior notice.

AKCS d.o.o.
Ulica Gorenjskega odreda 6
4000 Kranj
Slovenia

Kranj, November 2024