At MOTIVI TOP izdelki za sladoled in slaščice d.o.o. we are aware of how important the security of individuals’ personal data is, which is why we process personal data in accordance with:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter: GDPR); and
• the Personal Data Protection Act (ZVOP-2, Official Gazette of the Republic of Slovenia, No. 163/22).

We process personal data in order to provide the best user and customer experience in connection with our products and services, and we ensure a high level of security and confidentiality in storing and processing it.

As an individual, you have the right to request:

• information about which of your personal data we process and for what purposes;
• rectification of your personal data if it is incomplete or inaccurate;
• restriction of processing or erasure of your personal data from our records;
• transfer of your personal data to another controller (data portability);
• objection to processing, in particular where it is carried out for direct marketing, including the creation of user profiles; and
• not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

All of these rights are described in more detail below.

Legal bases for processing

MOTIVI TOP izdelki za sladoled in slaščice d.o.o. processes your personal data only where it has an appropriate legal basis under Article 6 of the GDPR:

• your consent (e.g. when using the contact form, subscribing to the newsletter or accepting non-essential cookies) – Article 6(1)(a) GDPR;
• performance of a contract concluded with you, or steps taken before entering into a contract at your request – Article 6(1)(b) GDPR;
• compliance with our legal obligations (e.g. issuing and retaining invoices under tax legislation) – Article 6(1)(c) GDPR;
• our legitimate interest in ensuring the secure and uninterrupted operation of the website – Article 6(1)(f) GDPR, where this interest is not overridden by your rights and freedoms.

Data we process and purpose of processing

Data obtained through the contact form and online purchase.

Through the contact form we obtain your first and last name, telephone number, e-mail address and a description of the service you need. To fulfil an order, we obtain your first and last name, address, postal code, town, e-mail address and telephone number. We collect the data securely and use it to respond to your enquiry, to perform contractual obligations and for further business cooperation. We use it for marketing purposes only if you have expressly consented to this.

Data obtained on the basis of a concluded contract.

This data comprises the company name, address, tax and company registration numbers, and the first name, last name and e-mail address of the contact person. We need it for smooth business cooperation, the issuing of invoices and, where necessary, the collection of receivables.

Data obtained from public records.

From public records we obtain the company name, address and tax number, which we need to issue an invoice. We do not use this data for marketing purposes.

We process the data of natural persons that a customer provides to us in the course of business cooperation at the customer’s request and under the contract with the customer; the customer is itself responsible for the lawfulness of collecting this data, and we obtain an assurance from the customer that the data was obtained lawfully.

Cookies and web analytics on the website www.motivi.si

On the website we use a consent management tool (CookieYes), which on your first visit offers you a choice of which cookies to allow. We classify cookies into five categories: necessary, functional, analytics, performance and advertising.

• Necessary (always active) – essential for the basic functions of the website (e.g. secure operation of the online shop, protection of forms against abuse and remembering your consent choice); without them the website does not work as intended. They do not store personal data that could be used to identify you, so they are loaded regardless of your choice.
• Functional – enable certain functionalities, such as sharing content on social media platforms, remembering the selected website language, collecting feedback and other third-party features.
• Analytics – we use them to understand how visitors use the website (e.g. number of visitors, bounce rate, traffic source).
• Performance – we use them to understand and analyse the key performance indicators of the website, which helps us provide a better user experience.
• Advertising – we use them to display ads tailored to your previous visits to the website and to analyse the effectiveness of advertising campaigns.

We place functional, analytics, performance and advertising cookies only after your prior, express consent (opt-in) given in the cookie settings; without it they are not loaded. You can change or withdraw your consent at any time through the cookie settings on the website or through the appropriate setting of the browser you use; withdrawing consent is as easy as giving it. Disabling individual cookies may affect your browsing experience. A detailed list of individual cookies, their provider, duration and purpose is given in our separate Cookie Policy, published on the website.

For analytics and performance purposes we use Google Analytics. For advertising purposes we use Google Ads and Facebook (Meta) Ads Manager; with these tools we do not obtain direct access to your identification data, but display relevant ads to visitors on the basis of anonymised/pseudonymised data.

Because Google (Google LLC) and Meta (Meta Platforms, Inc.) may also process data in the United States of America, such data transfers are based on the European Commission’s adequacy decision (EU–US Data Privacy Framework) where the provider participates in it, and otherwise on the standard contractual clauses adopted by the European Commission.

Recipients of personal data

We may disclose your personal data, solely to the extent necessary for each individual purpose, to the following categories of recipients: our accounting service, IT and website hosting providers, the provider of the cookie consent management tool (CookieYes), providers of web analytics and advertising tools (Google, Meta), delivery/logistics partners where necessary for the delivery of goods, and competent public authorities where we are required to do so by law. All contract processors process personal data solely in accordance with our instructions and on the basis of a data processing agreement.

Rights of individuals whose personal data we process

As an individual, you have the right to request:

• access to your personal data;
• rectification of inaccurate or completion of incomplete personal data;
• erasure of personal data (the “right to be forgotten”);
• restriction of processing of your personal data;
• portability of personal data, where processing is based on consent or a contract and is carried out by automated means;
• objection to processing based on our legitimate interest, including profiling for direct marketing purposes; and
• not to be subject to a decision based solely on automated processing which produces legal effects concerning you.

You exercise these rights by written request to the e-mail address motivi@motivi.si. We will decide on your request no later than one month after receiving it; this period may be extended by up to two further months due to the complexity or number of requests, in which case we will inform you. Providing information about processing is generally free of charge, unless the request is manifestly unfounded or excessive (e.g. because of repetition), in which case we may charge a reasonable fee or refuse the request.

Retention period of personal data

We keep data only for as long as necessary to achieve the purpose for which it was collected, or until the statutory retention periods expire.

• Data of customers/buyers is kept until full payment for the services or, at most, until the limitation period for our claims expires, unless the law provides for a longer period.
• Data processed on the basis of your consent is kept for the duration of the business cooperation and for 2 years after it ends; if no business cooperation takes place, the consent is valid for 2 years from the date it was given.
• As a taxable person, we are required to keep invoices for 10 years after the end of the year to which they relate (the law governing VAT).
• Cookies are kept in accordance with their individual intended validity period, stated in the cookie settings on the website.

After the retention period expires, we delete, destroy, block or anonymise the data, unless the law provides otherwise for a particular type of data.

Security of processing

To protect your personal data against unauthorised access, loss or misuse, we apply appropriate technical and organisational measures in compliance with the GDPR and ZVOP-2.

Controller details

The controller of your personal data is MOTIVI TOP izdelki za sladoled in slaščice d.o.o., Ozeljan 32 d, 5261 Šempas, Slovenia, company registration No. 1828851. For any questions regarding the processing of personal data and the exercise of your rights, you can contact us at motivi@motivi.si.

Right to lodge a complaint

If you believe that the processing of your personal data infringes the GDPR or ZVOP-2, or if we do not decide on your request within the statutory period or we refuse it, you have the right to lodge a complaint with:

Information Commissioner (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, e-mail: gp.ip@ip-rs.si.

You also have the right to judicial protection.

Final provisions

Matters not regulated by these terms are governed by the applicable legislation on personal data protection. We reserve the right to amend these terms; we will notify you of any amendment by publishing it on the website at least one month before it takes effect.

This version of the personal data processing terms applies from 15 October 2026.