PRIVACY POLICY

LASER SMOOTH d.o.o., registration number 9836632000, with its registered office at Koprska ulica 106H, Ljubljana, 1000 Ljubljana (hereinafter referred to as the Company), as the data controller, hereby informs you of the manner in which your personal data is processed and protected.

1. What processing does this notice refer to?

This notice addresses the processing of personal data of visitors to our websites (laserhouse.si) (hereinafter referred to as Users). If you do not belong to any of the groups mentioned above, please contact info@lasersmooth.si and we will provide you with the appropriate privacy notice that applies to you.

2. What information do we collect about you?

When you contact us, we collect and process your personal data (for example, information you provide to us by filling out forms on our website (hereinafter referred to as the Website) or via telephone, email, or otherwise). This includes information you provide when you register to use our website, when you subscribe to our service (place an order on our website, participate in discussions or other social media features on our website, enter a competition, promotion, or participate in a survey, fill out a registration form, for example, to participate in a filming), and when you report a problem with our website. The information you provide may include your name, address, email address, telephone number, personal description and photograph, age, date of birth, and gender, as well as any other information specified from time to time.

Each time you visit our website, we automatically collect the following information:

– technical data, which may include the Internet Protocol (IP) address used to connect your computer to the internet, login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, device type, and mobile device brand; this data may be collected and processed on our behalf by third-party cookies. More information about this can be found via the link at the bottom of each website.

– information about your visit, which may include, for example, the full Uniform Resource Locators (URL) clickstream to, through, and from our website (including date and time), information about pages you viewed or searched for (including articles read and categories accessed), page response times, download errors, length of visits to certain pages (including average time spent on specific pages, viewing of specific content or videos), average time spent using the application and the number of views from such applications, the average number of articles viewed on our website, website interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the website, user behavior data, and any phone number used to call or any email address used to reach our customer service representatives.

In some cases, we obtain your personal data from third parties, such as business partners, subcontractors in technical, payment, and delivery services, advertising networks, analytics providers, search information providers, and credit reference agencies. When visiting and registering on one of our web platforms, we may obtain your personal data from an unaffiliated social media provider (Facebook, Gmail) if you voluntarily choose to register via the unaffiliated social media provider’s platform.

Each time you visit our website, we automatically collect the following information:

3. How do we use your personal data and on what legal basis?

General: We may process your personal data for the purposes of performing a contract we have entered into with you; when we need to comply with a legal obligation; when it is necessary for our legitimate interests (or those of a third party) and your interests (for example, for detecting and preventing fraud or ensuring network and information technology security), unless your fundamental rights override those interests; when it is necessary to protect your vital interests (or the vital interests of others); or when it is necessary for the public interest or for official purposes.

Where we request personal data to comply with legal or contractual obligations, providing personal data is mandatory for you. This means that if such personal data is not provided, we will not be able to manage our contractual relationship or fulfill the obligations that such a relationship imposes on us. In all other cases, the provision of personal data is optional and you are not obliged to provide it.

We may also process your personal data, such as identification data, contact details, and residential address, for the purpose of potentially exercising our rights against you in the future. This processing is based on our legitimate interest in exercising our rights in potential disputes.

Most commonly, we will use your personal data in the following circumstances:

For the purposes of providing services and processing payments in accordance with relevant contracts (including subscription agreements), we may process your personal data, such as identification data and contact details. Such processing is based on the performance of a contract to which the users (especially subscribers) are parties, or on a legal obligation imposed on us.

We may process personal data to provide you with information about goods or services that we feel may interest you.

We will not disclose your personal data to third parties for marketing purposes without your prior express consent.

4. How and to whom do we disclose your personal data?

We will not sell your personal data to third parties.

Within the Company, only a limited number of employees have access to your personal data on a need-to-know basis for the execution of business processes, such as employees in the marketing, legal, production, news, and IT departments. These employees are bound by confidentiality regarding personal data. We implement appropriate technical and organizational measures to protect personal data. Company employees have the right to process personal data only according to the Company’s instructions and as necessary in connection with their work duties.

We may share personal data with government or law enforcement authorities if required by applicable law or if necessary to exercise our rights, including our terms of use, or to protect our legitimate interests (including the legitimate interests of third parties) in accordance with applicable law.

We may also disclose your personal data to third parties, including:

(i) service providers who provide administrative, professional, and technical support to the Company for IT, security, and business resource support;

(ii) business partners, suppliers, and subcontractors for the performance of any contract we enter into with you (including subscriptions to our services);

(iii) advertisers and advertising networks that require your data to select and display relevant advertisements. We do not disclose information about identifiable individuals to advertisers, but we provide them with aggregate data about our users (for example, we may inform them that 500 men under the age of 30 clicked on their advertisement on any given day). Such aggregate data helps advertisers reach specific types of their target audience. We may use the personal data we have collected from you to fulfill our advertisers’ wishes by displaying their advertisements to the desired target audience;

(iv) analytics and search engine providers that assist us in improving and optimizing our website; the Company may also share personal data with external consultants (e.g., lawyers, accountants, auditors) as necessary. In some cases, we may disclose personal data to our affiliates (including all subsidiaries or our ultimate holding company and its subsidiaries) listed at the link: http://www.cetv-net.com. Together with our affiliates, we have ensured appropriate safeguards against potential disclosure of personal data. We may share personal data with our affiliates and other third parties in the context of certain types of transactions, including any transactions involving a change of control of the Company, the sale of a substantial part of assets, or restructuring. The Company strives for due diligence in selecting unaffiliated service providers and requires these service providers to maintain appropriate technical and organizational security measures to protect personal data and to process personal data only in accordance with the Company’s instructions. Service providers may use subcontractors in providing services to the Company, provided that the subcontractor meets the same data protection requirements as the service provider itself.

5. Storage of personal data and its transfer abroad.

Your personal data that we collect is stored within the European Union (hereinafter EU) and the European Economic Area (hereinafter EEA). However, data collected by third parties through cookies (e.g., Google Double Click for Publishers) typically serves traffic from the data center closest to the location from which the traffic originates. This means that the transfer of this data, including advertising traffic, may occur through servers located within the EEA as well as outside the EEA. For more information, please see our Cookie Policy, available at the bottom of each website. In doing so, the laws and regulations protecting your personal data in the country to which it is transferred may be different (or offer a lower level of protection) than those applicable in the country where you work.

If you would like more information about any such transfer and the appropriate safeguards we have established prior to the transfer, you may contact the data privacy administrator or the data protection officer via the contact details provided below.

6. Your rights

You may request confirmation from us as to whether or not your personal data is being processed, a copy of your personal data, or its modification/correction. In certain circumstances, you have the right to request that we delete your personal data or that we transfer some of your personal data to you or to other entities based on the right to portability. You also have the right to object to certain processing of your personal data (for example, processing for direct marketing purposes or for certain decisions made solely by automated processing, including profiling). If we have requested your consent for the processing of your personal data, you have the right to withdraw that consent without any negative impact on you. If we process your personal data based on our legitimate interest (as explained above), you have the right to object to such processing. You also have the right to restrict the processing of your personal data in certain circumstances.

Please note that in some cases, your rights described above may be limited and subject to applicable data protection laws and regulations; your right to object to the processing of your personal data may, for example, be limited if we demonstrate that we have compelling legitimate grounds for processing your personal data that override your interests. Upon submitting your request, you will need to prove your identity and provide us with other information that will enable us to respond to your request. We will not charge any fees for responding to your request unless permitted by law; if we do charge fees, they will be reasonable and proportionate to your request.

If you wish to exercise these rights, please contact us via the contact details provided below. We hope that we can satisfactorily answer any inquiries regarding the manner in which your personal data is processed. In any case, you have the right to lodge a complaint with the competent data protection authorities. You may file a complaint in the member state where you reside, where you work, or where the alleged breach of data protection legislation occurred.

7. Period of retention of your personal data

We intend to keep your personal data only for as long as necessary to fulfill the purposes stated in this notice, or in accordance with applicable law, taking into account applicable minimum statutory retention periods, or as necessary to exercise our legitimate rights (and the legitimate rights of others). If you would like additional information on how long we keep your personal data, please write to us at info@lasersmooth.si. Please note that we may process any of your personal data that has been anonymized without further notice.

When we process your personal data based on your consent, we process it only for the period specified in your consent, unless you withdraw or restrict your consent before the end of that period. In such cases, we will stop processing the relevant personal data for the respective purposes, subject to any legal obligation to process such personal data or the need to process such personal data to exercise our legitimate interests (including the legitimate interests of others).

8. Data security

We store your data on our servers and on servers hosted by third parties (including third-party cloud computing services). To this end, we have implemented appropriate technical and organizational measures to protect your personal data and prevent unauthorized access to it. Regarding services hosted by third parties, we have entered into contractual agreements that include obligations regarding the organizational and technical security of personal data. You are responsible for maintaining the confidentiality of all authentication methods (e.g., passwords) that you use to access specific parts of our websites.

The transmission of data over the internet is not completely secure. Although we will strive to protect your data, we cannot guarantee the security of your data transmitted via our website; any transmission is at your own risk. Upon receiving your data, we will implement strict procedures and security measures to prevent unauthorized access.

9. Children’s privacy

On its website, the Company does not (knowingly) collect personal data from persons under the age of 15. If a parent or guardian discovers that their child has provided personal data to the Company, they should immediately notify the Company. If the Company discovers that a person under the age of 15 has provided personal data to the Company, the Company will immediately delete this data from its servers, unless the parent or guardian expressly permits the Company to process the child’s personal data for specific purposes.

All websites associated with the Company group (including all subsidiaries or our ultimate holding company and its subsidiaries) collect and process limited personal data of children (as defined by applicable law) for services intended for children (data such as name, age, and email address may be collected to assess eligibility for participation in competitions related to programs intended for children). In relation to these websites, we ask (and encourage) children to obtain parental or guardian consent on these websites, and the Company has taken appropriate measures to verify the validity of such consents.

10. Cookies and social media plugins

To distinguish users of our website, our website uses cookies. In this way, we provide users with a good experience when they browse our websites and simultaneously improve our websites. Such processing is based on your consent expressed on our websites or through settings in your browser. For detailed information about the cookies we use, how long we use them, and for what purposes we use them, please see our Cookie Policy, which is published at the bottom of each website.

Our websites may include social media features, such as Instagram, Facebook, LinkedIn, or Youtube buttons. These features may collect information about you, such as your IP address and the pages you visit, and may set a cookie to ensure the feature functions properly. The processing of this data through interactions with these features is governed by the privacy notice/policy of the company providing the service.

11. Links to other websites

Our websites may contain links to websites that are not under the control of the Company. When you click on a third-party link, you will be redirected to their website. If you visit any of these linked websites, please read their privacy notices. We are not responsible for the policies and practices of other companies. Our company has no control over and assumes no responsibility for the content, privacy policies and notices, or practices of third-party websites or services.

12. Contact us

If you have any questions or concerns regarding the processing of your personal data or if you wish to exercise any of your rights, please contact us by phone at 041 443 200, by email at info@lasersmooth.si, or by letter addressed to LASER SMOOTH d.o.o. at Koprska ulica 106H, Ljubljana, 1000 Ljubljana.

Please do not disclose sensitive personal data (e.g., information about racial or ethnic origin, political opinions, religious or other beliefs, health status, or trade union membership), your tax identification number, or criminal record information in your communications with us.

Last updated: October 27, 2025

We may update this notice from time to time and will publish the new notice via the Privacy Policy link on all our websites. If you have provided us with your contact details and allowed us to contact you, we will inform you of any significant changes in content. Please check this notice regularly for any changes.