Please read these conditions carefully.

The purpose of this Privacy Policy is to inform individuals, customers, users of products or services, business partners, employees, and other persons (hereinafter referred to as the “individual”) who interact with FREKVENCE ZA ŽIVLJENJE d.o.o. (hereinafter referred to as the “Company”) about the purposes and legal bases for processing personal data, the security measures implemented, and the rights of individuals regarding the processing of personal data carried out by the Company.

We value your privacy and therefore always take great care to protect your personal data.

We process personal data in accordance with applicable personal data protection legislation and other legislation that provides us with a legal basis for processing personal data.

Any changes to this document will be published on our website. By using the website, you confirm that you have read and understood the entire content of this Privacy Policy.

Data Controller:

FREKVENCE ZA ŽIVLJENJE d.o.o.

Svetelova ulica 8, 2000 Maribor, Slovenia

Email: info@frekvence.si

Phone: +386 71 520 034

Website: https://frekvence.si/ and https://quanta-remote.com

1) Personal Data

Personal data means any information relating to an identified or identifiable individual. An identifiable individual is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that individual.

2) Purposes and Legal Bases for Data Processing

The Company collects and processes personal data on the following legal bases:

  • processing is necessary for compliance with a legal obligation to which the controller is subject;

  • processing is necessary for the performance of a contract to which the individual to whom the personal data relates is a party, or in order to take steps at the request of such an individual prior to entering into a contract;

  • processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party;

  • the individual to whom the personal data relates has consented to the processing of his or her personal data for one or more specific purposes;

  • processing is necessary to protect the vital interests of the individual to whom the personal data relates or of another natural person.

Provision of Bioresonance Treatments

The Company processes customers’ personal data for the purpose of booking and providing bioresonance treatments. Bioresonance treatments are provided as a complementary/alternative medicine service and not as a healthcare service within the meaning of the Slovenian Health Services Act (ZZDej).

For this purpose, the Company processes, in particular, the following personal data: first name, last name, date of birth, residential address, telephone number or email address, information concerning the scheduled appointment, services provided, payment and issuance of invoices, as well as the content of communication with the individual.

Where necessary for the provision of the treatment and where the individual has consented to the processing of such data, the Company also processes information relating to the individual’s well-being, lifestyle and health condition, such as information about difficulties and symptoms, employment, place of birth, difficulties or conditions that led the individual to seek treatment, duration of such difficulties, visits to doctors, surgeries performed, implants or other devices in the body, pregnancy, chronic diseases or long-term conditions, use of medication, use of dietary supplements, vitamins and herbal preparations, and previous experience with bioresonance treatments.

The legal basis for processing identification, contact, appointment, payment and contractual data is the performance of a contract or taking steps at the individual’s request prior to entering into a contract. The legal basis for processing health data and other special categories of personal data is the individual’s explicit consent, which the individual may withdraw at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Personal data shall be retained until the purpose of processing has been fulfilled or for 6 years after the last service provided or termination of the contractual relationship. Data processed on the basis of consent shall be retained until the consent is withdrawn or until the purpose of processing has been fulfilled, unless another lawful basis exists for further retention.

Performance of a Contract

Where an individual enters into a contract with the Company, the contract constitutes the legal basis for the processing of personal data. The Company may therefore process personal data for the purpose of entering into and performing the contract, such as the sale of goods and services, preparation of quotations, participation in various programmes, etc.

If the individual does not provide the required personal data, the Company cannot enter into the contract. Likewise, the Company cannot provide the service or deliver goods or other products in accordance with the contract, as it does not have the data necessary for its performance.

On this legal basis, the Company processes only those personal data that are necessary for entering into and properly performing its contractual obligations.

The legal basis for processing the data is the contract. The retention period is until the purpose of the contract has been fulfilled or for 6 years after termination of the contract, except where a dispute arises between the individual and the Company in connection with the contract. In such a case, the Company shall retain the data for a further 10 years after the final and binding court decision, arbitral award or court settlement or, where no court proceedings have taken place, for 6 years from the date on which the dispute was resolved amicably.

Legitimate Interest

The Company may also process personal data on the basis of its legitimate interest. This is not permitted where the interests or fundamental rights and freedoms of the individual to whom the personal data relates, which require protection of personal data, override such interests. Where legitimate interest is relied upon, the Company shall carry out an assessment in accordance with applicable legislation.

The processing of individuals’ personal data for the purposes of direct marketing is considered to be carried out on the basis of a legitimate interest.

The Company may also process personal data of individuals collected from publicly available sources or in the course of the lawful performance of its business activities for the purposes of offering goods, services and employment opportunities, informing individuals about benefits, events, etc.

For these purposes, the Company may use ordinary mail, telephone calls, email and other means of electronic communication.

For the purposes of direct marketing, the Company may process the following personal data of individuals: first name and last name, permanent or temporary residential address, telephone number and email address.

The Company may process the above personal data for direct marketing purposes without the individual’s explicit consent. The individual may request the termination of such communication and processing of personal data at any time and may withdraw from receiving messages by using the unsubscribe link contained in the message received or by submitting a request by email or ordinary mail to the Company’s address.

Processing Based on Consent

If the Company does not have a legal basis for processing based on law, a contractual obligation, legitimate interest or the protection of an individual’s life, it may request the individual’s consent.

Accordingly, the Company may process certain personal data for the following purposes where the individual has provided consent:

  • residential address and email address (for information and communication purposes);

  • photographs, video recordings and other content relating to the individual (e.g. publication of photographs of individuals on the website for the purposes of documenting activities and informing the public about the Company’s work and events);

  • other purposes to which the individual has consented.

If an individual has given consent to the processing of personal data and subsequently no longer wishes this to take place, the individual may request termination of the processing of personal data by submitting a request by email or ordinary mail to the Company’s address.

Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Upon receipt of a withdrawal of consent or a request for erasure, the data shall be deleted no later than within 15 days. The Company may also delete such data before withdrawal of consent where the purpose for which the personal data was processed has been fulfilled or where required by law.

In exceptional cases, the Company may refuse a request for erasure on the grounds set out in the General Data Protection Regulation, including where necessary for exercising the right to freedom of expression and information, compliance with a legal obligation requiring processing, reasons of public interest in the area of public health, archiving purposes in the public interest, scientific or historical research purposes, statistical purposes, or the establishment, exercise or defence of legal claims.

The legal basis for processing the data is consent. The data shall be processed until consent is withdrawn or until the purpose of processing has been fulfilled. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Protection of Vital Interests of an Individual

The Company may process personal data relating to an individual where this is necessary to protect the individual’s vital interests.

In emergency situations, the Company may seek to identify an individual by means of an identity document, check whether the individual is included in its records, review the individual’s medical history, or contact the individual’s relatives, without requiring the individual’s consent.

This applies where such processing is strictly necessary to protect the individual’s vital interests.

3) Retention and Erasure of Personal Data

The Company shall retain personal data only for as long as necessary to fulfil the purpose for which the personal data was collected and processed.

Where the Company processes data on the basis of a legal obligation, it shall retain the data for the period prescribed by law. Certain data may be retained for the duration of the individual’s relationship with the Company, while some data may be required to be retained permanently.

Personal data processed on the basis of a contractual relationship with an individual shall be retained for the period necessary to perform the contract and for a further 6 years after its termination, except where a dispute arises between the individual and the Company in connection with the contract.

In such a case, the Company shall retain the data for a further 10 years after the final and binding court decision, arbitral award or court settlement or, where no court proceedings have taken place, for 6 years from the date on which the dispute was resolved amicably.

Personal data processed on the basis of the individual’s consent or the Company’s legitimate interest shall be retained until the consent is withdrawn or until a request for erasure is submitted.

Upon receipt of a withdrawal of consent or a request for erasure, the data shall be deleted without undue delay. The Company may also delete such data before withdrawal of consent where the purpose for which the personal data was processed has been fulfilled or where required by law.

Where an individual exercises his or her rights, the Company shall retain the individual’s personal data until a final and binding decision has been made in the matter and, thereafter, in accordance with the final and binding decision in the case.

In exceptional cases, the Company may refuse a request for erasure on grounds such as the exercise of the right to freedom of expression and information, compliance with a legal obligation requiring processing, reasons of public interest in the area of public health, archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, or the establishment, exercise or defence of legal claims.

After the applicable retention period has expired, the Company shall effectively and permanently delete or anonymise the personal data so that it can no longer be linked to a specific individual.

4) Contractual Processing of Personal Data and Transfers of Data

The Company may entrust certain personal data processing activities to a data processor on the basis of a data processing agreement.

Data processors may process the entrusted data exclusively on behalf of the controller, within the scope of the authorisation granted to them, as set out in a written agreement or other legal act, and in accordance with the purposes defined in this Privacy Policy.

The data processors engaged by the Company primarily include:

  • accounting service providers and other providers of legal and business consulting services;

  • infrastructure maintenance providers (video surveillance, security services);

  • information systems maintenance providers;

  • email service providers and software and cloud service providers (e.g. Microsoft, Google);

  • social media and online advertising providers (Google, Facebook, Instagram, etc.).

For the purposes of ensuring better oversight and control of data processors and maintaining an orderly contractual relationship, the Company also maintains a list of data processors containing all specific data processors with whom the Company cooperates.

Under no circumstances shall the Company disclose an individual’s personal data to unauthorised third parties.

Data processors may process personal data solely in accordance with the Company’s instructions and may not use personal data for any other purposes.

The Company, as the controller, and its employees do not transfer personal data to third countries (outside the Member States of the European Economic Area – the EU Member States, Iceland, Norway and Liechtenstein) or to international organisations, except to the United States, where relationships with data processors in the United States are governed on the basis of Standard Contractual Clauses (standard contractual terms adopted by the European Commission) and/or Binding Corporate Rules (adopted by the Company and approved by supervisory authorities in the EU).

5) Cookies

The Company’s website operates with the use of so-called cookies, which are important for the provision of online services. Cookies are used to store information about the status of an individual webpage, to assist in collecting statistics about users and website visits, etc.

When visiting the website, only cookies that are strictly necessary for the operation of the website (e.g. for the shopping cart) are loaded onto the device. Other cookies will only be loaded with the individual’s consent. The individual may change their cookie settings and delete cookies at any time (instructions are available on the websites of the respective web browsers).

The website uses the following cookies:

Cookie name Duration Function
_ga 2 years Used to distinguish between users.
_gid 24 hours Used to distinguish between users.
_gat 1 minute Used to regulate access to the website.
_gali 24 hours Enhanced link attribution.
mfn-gdpr 1 year Stores your decision regarding the use of cookies and prevents the cookie notification from being displayed again.

6) Data Security and Accuracy

The Company takes care of information security and the security of its infrastructure (premises and application and system software).

Our information systems are, among other things, protected by antivirus software and a firewall. We have implemented appropriate organisational and technical security measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of or access to such data, as well as against other unlawful or unauthorised forms of processing.

Where special categories of personal data are transmitted, such data is transmitted in encrypted form and protected by a password.

The individual is responsible for ensuring that their personal data is transmitted securely and that the data provided is accurate and reliable.

7) Individual’s Rights Regarding the Processing of Personal Data

The individual to whom the personal data relates has the right to request access to their personal data and the rectification or erasure of personal data, or restriction of processing concerning them, as well as the right to object to processing and the right to data portability.

The individual’s request shall be handled in accordance with the provisions of the General Data Protection Regulation (GDPR) and applicable personal data protection legislation.

All of the above rights, as well as any questions, may be exercised by submitting a request to the Company’s address.

The Company shall respond to the individual’s request without undue delay and, in any event, no later than one month after receipt of the request. This period may be extended by a maximum of two additional months, taking into account the complexity and number of requests. The individual shall be informed of any such extension, together with the reasons for the delay.

The exercise of rights is free of charge for the individual. However, the Company may charge a reasonable fee where a request is manifestly unfounded or excessive, in particular because of its repetitive character. In such cases, the Company may also refuse to act on the request.

Where there are reasonable doubts concerning the identity of the individual making the request, the Company may request additional information necessary to confirm the individual’s identity.

In its decision regarding the individual’s request, the Company shall also inform the individual of the reasons for the decision and of their right to lodge a complaint with the supervisory authority within 15 days of being notified of the decision.

The individual may exercise the right to lodge a complaint with the supervisory authority:

Information Commissioner of the Republic of Slovenia
Dunajska cesta 22
1000 Ljubljana
Slovenia
Email: gp.ip@ip-rs.si
Website: www.ip-rs.si

This Privacy Policy shall apply from 1 August 2026 onwards.