Information for Individuals

Introduction

These Information for Individuals (hereinafter referred to as “Information”) are issued by the data controller, Edisontrade Ltd., Ankaranska cesta 7b, 6000 Koper (hereinafter referred to as “Edisontrade”). They define all relevant information that must be provided to individuals whose personal data is processed, in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the General Data Protection Regulation). These Information detail the methods of processing personal data of individuals, the purposes of processing, the rights of individuals related to data processing, procedures for protecting personal data, and other information important for informing individuals about the processing of their personal data by Edisontrade.

Edisontrade is aware of the importance of personal data protection and commits to handling the personal data of individuals, who entrust their personal data to it, in accordance with applicable regulations and legislation, primarily in accordance with the current Personal Data Protection Act and the General Data Protection Regulation.

Data Controller Information.

Personal Data Controller:

 

Edisontrade Ltd.

Ankaranska cesta 7b, 6000 Koper

www.edisongold.com

Company Number: 5431328000

Tax Number: SI63332191

Edisontrade Ltd. is a family-owned company that owns the Edisongold brand. We are engaged in the sale of investment gold and silver, and in the purchase of gold and silver.

What is Personal Data and the Processing of Personal Data?

Personal data is any information related to a specified or identifiable individual, to whom personal data pertains. An identifiable individual is one who can be directly or indirectly identified, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that individual.

The processing of personal data is any action or set of actions performed in relation to personal data or sets of personal data, whether by automated means or not, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

What Data Does Edisontrade Collect and Process?

In its operations, Edisontrade collects and processes the following types of data:

Mandatory Data

Mandatory data are those data that Edisontrade must collect due to legislative requirements, such as the Law on the Prevention of Money Laundering and Terrorist Financing (hereinafter referred to as ZPPDFT-2), including:

For natural persons, legal representatives of legal entities, and proxies of natural or legal persons, Edisontrade collects the following data: name, surname, address of permanent and temporary residence, date and place of birth, personal identification number, tax number, citizenship, and number, type, and name of the issuer of the official personal document. For the actual owners of legal entities, the following data are collected: personal name, address of permanent and temporary residence, date of birth, citizenship, and the extent of ownership interest or other means of control.

Edisontrade also collects and processes other data as specified by ZPPDFT-2

Data Necessary for the Execution of Business Relationships

Data provided by clients or potential clients to Edisontrade, which Edisontrade uses with the purpose of most effectively informing clients or potential clients about services or products they use or order, providing them with data or other documents important for the execution of services (e.g., sending invoices, offers, delivering security notifications, etc.) or assisting them in the process of establishing a business relationship. These include, for example:

Address of residence different from the permanent or temporary residence,

Telephone number, mobile phone number;

Email address;

Contact persons of legal entities.

Data Necessary for Establishing Business Relationships Using Mobile Applications

In the use of certain electronic services, user geographical location data may also be utilized. These are used in a form that does not identify the user, and Edisontrade may use them to ensure functionality or services based on the user’s location, and to improve these functionalities. The user can give or revoke consent for the collection and processing of location data at any time, by enabling or disabling the location feature on their mobile device.

How Do We Collect Your Personal Data?

Edisontrade collects personal data of customers and potential customers:

In the process of establishing a business relationship with a customer,

When purchasing or selling goods on behalf of the customer,

While communicating with customers through various channels (in person, by phone, via email, or other means),

From publicly accessible registers and records (e.g., the court register, business register, etc.),

By analyzing personal interests, behavior, or location of the customer, but only with given personal consent for targeted marketing.

Legal Bases for Processing and Purposes of Processing

Contract Execution (Article 6(1)(b) of the General Data Protection Regulation)

Edisontrade processes personal data of customers within the framework and for the needs or purpose of executing the contract concluded between Edisontrade and the customer. This data processing is aimed at providing services that Edisontrade, as a provider of goods and other services, offers to customers (benefits, discounts, and other or additional services) and also for the purpose of concluding contracts and in the negotiation phase or for the needs of implementing measures before entering into a contract. Customers are previously informed about this, and they are also provided with the right to personal intervention, the right to express their views, the right to receive an explanation of the decision made in this manner, and the right to challenge such a decision.

Edisontrade, based on legitimate interest, processes personal data for the purpose of reducing the risks of intrusions into our website (ensuring information security, reducing risks of unauthorized access to important business information, personal data, and the information system). In addition to the purpose of reducing intrusion risks and unauthorized access, these data can also be used for analytical and statistical purposes. Based on prevailing legitimate interest, legally collected personal data are also processed for the purpose of various activities necessary for verifying the use of services or activities, checking the accuracy of business decisions, and planning new ones, direct marketing of general offers, etc.

Legal Basis (Article 6(1)(c) of the General Data Protection Regulation)

Edisontrade also processes certain personal data of individuals based on a statutory legal basis and on the basis of other international treaties, EU regulations, and national laws that require, in certain cases, the provision of personal data to state authorities to fulfill their or our legal obligations or competencies.

Consent (Article 6(1)(a) of the General Data Protection Regulation)

In certain cases, Edisontrade asks its customers and other individuals to give consent for processing their personal data for the purpose of designing and delivering to their interests, preferences, capabilities, etc. Edisontrade also requests certain individuals’ consent for processing personal data for the purposes of participating in special promotions, prize draws, or other marketing campaigns, conducted either by itself or in collaboration with partners. In these cases, the processing of personal data takes place within the scope allowed by the individual’s declaration of personal data, purpose, and agreed channels of communication, until withdrawal.

Disclosure of Personal Data, Contractual Processing, and Users of Personal Data

Edisontrade does not disclose personal data of customers to other data controllers within Edisontrade, contractual partners, or third parties, except in cases where such disclosure has been consented to by the customer.

Edisontrade may also disclose customer personal data to state and other official bodies when such disclosure is required and justified in accordance with applicable law (e.g., disclosure to regulators, courts, public registers (e.g., the central credit register), etc.). Personal data are not transferred to third countries.

In accordance with ZPPDFT-2, Edisontrade is obligated to conduct a risk assessment of money laundering and terrorist financing and, based on the analysis, to implement customer review measures when establishing business relationships.

Data Retention Period

Edisontrade will process personal data to the extent necessary to achieve the purposes of processing and as long as necessary to achieve the pursued goal.

Personal data are thus processed until the purpose is achieved or within the statutory limitation periods for obligations that may arise from the processing of these personal data, especially when the processing of personal data is necessary within the framework of concluding or implementing a contract, except in cases where the data retention period is prescribed by law. In the latter cases, Edisontrade retains data in accordance with the legal mandate.

Authorized Person for Data Protection

The authorized person for data protection at Edisontrade can be reached at the email address info@edisongod.com or via telephone number 05 90 87 640.

Individuals to whom the personal data pertain can contact the authorized person for data protection directly regarding all questions related to the processing of their personal data and the realization of their rights under the regulations governing the protection of personal data.