(Information on the Processing of Personal Data of Business Partners, Website Users and Other Individuals)

 

1. Introduction

TRIGAL RENEWABLES, upravljanje naložb, d.o.o. (“Trigal Renewables” or the “Company”) respects the privacy of individuals and is committed to processing personal data lawfully, fairly and transparently.

This Privacy Policy explains which personal data the Company processes, for what purposes, on which legal bases, to whom personal data may be disclosed, and what rights individuals have in relation to the processing of their personal data.

 

2. Data Controller

The controller of personal data is:

TRIGAL RENEWABLES, upravljanje naložb, d.o.o.

Tomšičeva ulica 1
1000 Ljubljana
Slovenia

E-mail: katja.savor@trigal.com

Telephone: +386 40 728 115

Trigal Renewables processes personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), the Personal Data Protection Act (ZVOP-2), and other applicable legislation.

 

3. Scope of this Privacy Policy

This Privacy Policy applies to:

• business partners, contractors and their representatives;
• project stakeholders and counterparties;
• users of the Company’s website;
• individuals who communicate with the Company.

 

4. Purposes and Legal Bases for Processing

Business Relationships

Personal data of business partners, contractors and their representatives is processed for the negotiation, conclusion and performance of contractual relationships.

Legal basis: performance of a contract (Article 6(1)(b) GDPR).

Compliance with Legal and Regulatory Obligations

Personal data is processed in order to comply with applicable legal and regulatory requirements, including accounting, tax and record-keeping obligations.

Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).

Communication and Handling of Requests

Personal data may be processed for responding to inquiries, requests, complaints and other communications.

Legal basis: performance of a contract and/or legitimate interests (Articles 6(1)(b) and 6(1)(f) GDPR).

Website Operation

When visiting the website, certain technical data may be processed to ensure the secure and efficient operation of the website.

Further information is available in the Cookie Policy.

 

5. Categories of Personal Data

Depending on the purpose of processing, the Company may process the following categories of personal data:

• identification data;
• contact details;
• information relating to business partners, contractors and their representatives;
• information relating to business relationships and projects;
• communication records;
• technical and website usage data.

 

6. Sources of Personal Data

Personal data is generally obtained directly from individuals.

Where permitted or required by law, personal data may also be obtained from:

• public registers and publicly available sources;
• business partners;
• authorised representatives;
• competent authorities;
• other lawful sources.

 

7. Recipients of Personal Data

Personal data may be disclosed to:

• courts and other competent public authorities;
• statutory auditors;
• legal, tax and other professional advisers;
• IT service providers and other contractual processors;
• other recipients where disclosure is required by law.

All processors are required to implement appropriate technical and organisational measures to ensure the protection of personal data.

 

8. Transfers of Personal Data to Third Countries

As a general rule, Trigal Renewables does not transfer personal data to countries outside the European Economic Area.

Where such transfers are necessary, they will be carried out in accordance with the GDPR and subject to appropriate safeguards.

 

9. Retention Periods

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable laws and regulations.

Purpose	Retention Period
Business partner and contractor management	5 years following termination of the business relationship
Accounting and tax documentation	10 years
Complaints and legal claims	Until completion of the relevant proceedings and expiry of applicable limitation periods
Website communications	Until the purpose has been fulfilled or the communication has been concluded

 

10. Rights of Individuals

Individuals have the right to:

• access their personal data;
• rectify inaccurate or incomplete personal data;
• request erasure of personal data;
• request restriction of processing;
• object to processing;
• receive personal data in a structured, commonly used and machine-readable format where applicable;
• withdraw consent at any time where processing is based on consent.

Requests may be submitted using the Company’s contact details provided above.

 

11. Right to Lodge a Complaint

If an individual believes that their personal data is being processed in breach of applicable data protection laws, they have the right to lodge a complaint with the competent supervisory authority.

In Slovenia, the competent authority is:

Information Commissioner of the Republic of Slovenia

Dunajska cesta 22
1000 Ljubljana
Slovenia

Official website: https://www.ip-rs.si

 

12. Automated Decision-Making

Trigal Renewables does not carry out automated decision-making, including profiling, which would produce legal effects concerning individuals or similarly significantly affect them.

 

13. Amendments to this Privacy Policy

Trigal Renewables reserves the right to amend or update this Privacy Policy at any time.

The current version of this Privacy Policy is published on the Company’s website.

 

Trigal Renewables, upravljanje naložb, d.o.o.

September 2026