privacy & cookie
policy.

At Hermes Consilium, business consulting, Ltd., Cesta v Mestni log 88a, 1000 Ljubljana, Slovenia (“Hermes Consilium”, the “Company”, “we”, “our”, or “us”) we are committed to protecting your privacy and providing a safe and secure online environment. Our Privacy Policy applies to any and all platforms owned and personal data processed by Hermes Consilium. It explains what type of data is collected and how we may use it, as well as provides an overview of how we protect your privacy. You will also learn how you can exercise your data subject’s rights. If you have any questions or concerns about our use of your personal data, please contact us using the contact form provided at the bottom of our front page.

Contact information

Hermes Consilium, business consulting, Ltd., Cesta v Mestni log 88a, 1000 Ljubljana, Slovenia

email: info@hermes-consilium.com

phone: +386 1 434 56 78.

website: https://hermes-consilium.com/

We collect your personal data in two ways: 

(A) directly, including personal data such as name, address, date of birth, place of birth, nationality, level of education and other personal data  and email address, as well as the date of contact, company, job title, country, company type provided to us by you when you subscribe to our services: newsletter, technical papers, infographics and presentations, when you reach out to us when applying for a job or when contacting us regarding our business cooperation with the company you work at; and

(B) indirectly, when you visit our website (in such case Hermes Consilium automatically collects and stores certain technical data, including the IP address, broad geographic location, pages accessed, the operating system and the internet browser used), or when we use your publicly available personal data. 

You may have given your prior consent for the processing of your personal data, which you may withdraw at any time. The reasons why you are asked to provide the above data will be made clear to you at the point we ask you to provide it.

Purpose and legal basis for personal data processing 

Hermes Consilium uses personal data to provide its services to its users and business partners. Any further processing of personal data only occurs on the basis of other statutory obligations or permissions or if the respective data subject has provided its consent for such processing. 

We use the collected data in the following ways:

• To provide you with our newsletters, technical papers, infographics and presentations, informing you on relevant company and industry news.
• To generate traffic insights in order to understand how users interact with our platform and how we can improve our services.
• To improve the websites and our services’ presentation, features and functionalities.
• To perform our general administration tasks.
• To perform and comply with our contractual obligations.
• To create statistics about the use of our services.
• To further protect our products and services against misuse.
• To carry out medical research. 
• To comply with employment laws and regulations, namely, to conclude and perform employment agreements, to provide data to legitimate users, to fulfil obligations related to the provision of preventive health checks, ensuring occupational health and safety and fire safety measures, and carrying out other obligations arising from regulations and agreements. 
• To ensure compliance with all other statutory obligations that apply to us.

The legal basis for collecting and using your personal data described above will depend on the personal data concerned and the specific context in which we process it. We collect and use your personal data: 

• where it is necessary for the performance of a contract, as well as for the performance of our services, and the provision of our website, (Art. 6(1)(b) GDPR); 
• where it is necessary for compliance with Hermes Consilium’s legal obligations, such as laws and regulations in the areas of employment and social security, tax etc.; 
• where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms (Art. 6(1)(f) GDPR.

Processing your personal data in any other way will only occur if you have given us your express consent for such processing (Art. 6(1)(a) GDPR). From time to time, we may receive personal data about you from third-party sources, but only where we have made sure that these third parties either have obtained your consent or are otherwise legally permitted or required to disclose your personal data to us. 

Retention periods and storage of personal data

We process and store personal data only until the purpose for which it was collected has been fulfilled or in accordance with the statutory storage periods for each individual personal data. For the purpose of determining the retention period, the time limits laid down by the applicable regulations shall be taken into account. If the retention period is not specifically provided for by law, it shall be limited to the shortest possible period, taking into account the principle of proportionality. The retention periods shall vary according to the type of personal data, the basis for the processing of personal data or the purpose of the processing of personal data:

• In the case of processing of personal data based on the law, the applicable law and regulation determines how long we are obliged to keep certain personal data, some of which we are even obliged to keep permanently.
• When the processing of personal data is necessary for the performance of a contract and the performance of our services, we retain this data for the period necessary for the performance of the contract, including warranty and statute of limitation periods.
• We retain personal data processed on the basis of the consent of data subjects permanently or until the consent is withdrawn unless the purpose for which the personal data was collected has been achieved before.

The storage periods for each type of personal data are defined in the Records of Processing Activities kept by the Company in accordance with the applicable regulations.

Upon expiry of the retention period, the personal data shall be erased or destroyed, unless they are not classified as archival material under the law governing archives and archival material or unless the law provides otherwise for specific types of personal data.

Disclosure of personal data to third parties

 We may disclose your personal data to third-party service providers and partners who provide data processing services to us in order to support the delivery of, provide functionality on, or help to enhance the security of our website, to carry out audits to certify circulation or carry out other services for us. These service providers and partners may also process your personal data. Hermes Consilium involves specialized service providers in processing personal data in accordance with Article 28 of the GDPR or as separate data controllers. 

We may also disclose your personal data to the competent law enforcement body, regulatory or government body, court or other third party where we believe disclosure is necessary as a matter of applicable laws or regulations, to exercise, establish or defend our legal rights, or to protect your vital interests or those of any other person

Cookies

We use cookies and similar technologies (collectively “cookies”) on our website. You can find more information on the cookies used by our website at https://hermes-consilium.com/cookies/. There, you can select your preferences for each purpose or reject all cookies. In the latter case, only cookies that are technically necessary to provide you with this website will be used. Your consent is set per browser and computer. 

Automated decision-making and profiling

We make all decisions relating to contractual relationships and other decisions involving legal or similar effects by employees or contractual partners, and the decisions are not made by automated means. The individual has the right not to be subject to a decision based solely on automated processing, including profiling which has an effect concerning him or her or similarly significantly affects him or her, except in certain cases arising under the GDPR.

We do not carry out profiling or processing of personal aspects of individuals. 

Transfer of personal data to third countries or international organizations

As a general rule, we only process your personal data within the European Union and the European Economic Area. However, in certain cases, we may also transfer your personal data to users in third countries, in which case we guarantee that adequate data protection will be ensured and that all conditions relating to the transfer of personal data to third countries will be met.

We may only transfer personal data if:

• the transfer is made to one of the countries or international organizations for which the European Commission has adopted an adequacy decision or to one of the countries on the list of third countries with an adequate level of data protection maintained by the Information Commissioner;
• the transfer is subject to appropriate safeguards under Article 46 of the GDPR (e.g. standard data protection clauses, binding corporate rules);
• the conditions for derogations in specific cases referred to in Article 49 of the GDPR are met.

Your data subject rights 

At any time, you may exercise the right to access your data. Additionally, provided that the respective requirements are met, you may exercise the following rights:

• Right to rectification: You have the right to have false personal data concerning you corrected or updated.
• Right to erasure: You may also request the deletion of your personal data, for example, if your data are no longer required for the purposes for which they were collected or otherwise processed.
• Right to restriction of processing: You also have the right to request that the processing of your personal data be restricted; in such a case, the data will be blocked for any processing. This right exists in particular if the accuracy of the personal data between you and us is debated.
• Right to lodge a complaint with the respectively competent data protection supervisory authority: You also have the right to file a complaint at any time with a supervisory authority, in particular a supervisory authority in the Member State where you are staying, working or the place of alleged infringement, if you believe that the processing of your personal data violates applicable data protection laws.
• Right to data portability: If we process your personal data to fulfil a contract with you or on the basis of your consent, you also have the right to receive your personal data in a structured, commonly used and machine-readable format, provided and to the extent that you have made the data available to us.
• Right to withdraw consent: if you have provided consent to us to process your personal data, you have the right to withdraw any such consent with effect for the future at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

You can exercise these rights by contacting us on our mail and email under the contact information above or using the contact form provided at the bottom of our front page. You have the right to opt out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or link in the marketing e-mails we send you.

To opt out of other forms of marketing (such as postal marketing or telemarketing), then please contact us by using the contact form provided at the bottom of our front page. Similarly, if we have collected and processed your personal data on the basis of your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal data conducted in reliance on lawful processing grounds other than consent.