The privacy of users of our website www.ampliphi-bio.com is our highest priority. Through organizational and technical measures, we ensure that your personal data is securely processed while using our website, that your privacy is protected, and that you can exercise your rights in accordance with applicable regulations, in particular with the current European legislation (the General Data Protection Regulation /GDPR) and applicable national legislation of the Republic of Slovenia, namely: the Consumer Protection Act (ZVPot-1), the Personal Data Protection Act (ZVOP-2), the Electronic Commerce Market Act (ZEPT), and the Electronic Communications Act (ZEKom-2).
The main purpose of this document is to inform you about the data we collect about you, how we process it, and how this affects you — specifically, the rights granted to you under the law.
1. WHO IS THE CONTROLLER AND WHO IS THE PROCESSOR OF YOUR PERSONAL DATA ON THE WEBSITE www.ampliphi-bio.com?
Your personal data is managed and processed by Ampliphi, Biotechnological Research and Development, d.o.o., Litijska cesta 259, 1261 Dobrunje, Slovenia, registration number: 6551955000, VAT number: SI 54028035 (hereinafter: the “Controller”). At Ampliphi d.o.o., we value your privacy and therefore continuously strive to ensure the highest level of protection of your personal data. This Privacy Policy applies solely to users of the website www.ampliphi-bio.com and defines the rights and obligations of the Controller and processors in the management and processing of user personal data.
A processor is any entity that processes personal data on behalf of the Controller (hereinafter: the “Processor”). Processors may process only the personal data and for the purposes for which they have received documented instructions from the Controller. Processors of personal data on www.ampliphi-bio.com process user data in accordance with applicable legislation, based on a contractual relationship that regulates all aspects of processing.
Processors of personal data for www.ampliphi-bio.com include:
- Google Ireland Ltd., Google Analytics service – website traffic analysis
Contact forms will be processed exclusively internally, without the involvement of external processors.
The Controller undertakes not to disclose or transfer personal data to any third country outside the European Union or to an international organization without an adequate level of data protection.
2. HOW DO WE USE YOUR PERSONAL DATA?
We collect your personal data when you visit our website www.ampliphi-bio.com, when you fill out a form on our site, when you contact us via email, phone, or in any other way.
You are responsible for the accuracy and truthfulness of the personal data you provide.
Your personal data is used for the following purposes:
| Purpose | Legal basis |
| Website visits. When you visit our website, we process the following personal data: IP address, time of visit, content viewed, operating system, device, and browser used. More information on cookies can be found in our Cookie Policy. | This processing is based on our legitimate interest (improving content for a better user experience). If you object, we cannot provide access to the desired content. |
| Handling inquiries. You can submit inquiries in any way (via website forms such as “Work with us,” “Contact us,” or “Schedule a quick meeting,” by phone, email, social media, etc.). We process your full name, phone number, email address, and the information you provide. | This processing is necessary and justified by the pre-contractual relationship arising from your request. |
| Ordering our services. A cooperation agreement will be confirmed with your order or by signing a contract, for which we require your personal data: name, surname, contact details, service content. | This processing is justified based on the contract or cooperation agreement concluded with us. Without these data, we cannot provide the service. |
| Sending newsletters. If you subscribe via the website, we will send you relevant updates about phage production and other biological solutions. We use your email address for this purpose. | This processing is based on your explicit consent and/or, where allowed without consent, our legitimate interest (to provide relevant content and strengthen relationships with existing partners). You can object at any time by clicking the unsubscribe option in the email or by writing to info@ampliphi-bio.com. |
| Managing claims/complaints. If our services do not meet your expectations, we will ask for your feedback, including your personal data: name, surname and contact details. | This processing is based on our legitimate interest (to improve our services and prevent legal disputes). If you object, we cannot process your claim. |
| Responding to your data subject rights requests. (see section What rights do you have?). | This processing is based on our legal obligations and includes verifying your identity. |
We are committed to collecting only the personal data necessary for each specific purpose. Certain data are marked as mandatory — required for fulfilling business agreements, handling your requests, or meeting our legal or contractual obligations. If you do not provide such data, we will not be able to process your request.
Any processing of your personal data beyond our legitimate interest will be carried out only with your explicit consent.
You may object to processing based on legitimate interest or previously granted consent by sending your objection to info@ampliphi-bio.com.
Both the controller and the processors acting on its behalf adhere to the general principles of processing the personal data of users of the website www.ampliphi-bio.com, namely:
- Personal data is processed lawfully, fairly and transparently.
- Data is collected for specific, explicit and legitimate purposes and is not further processed for incompatible purposes, except for scientific or historical research or statistical purposes, under certain conditions.
- Data is processed to the minimum extent necessary.
- We ensure data accuracy and keep data up to date; inaccurate data is rectified or deleted.
- Data is stored only as long as necessary for the intended purposes.
- We implement appropriate security measures to protect against unauthorized or unlawful processing and accidental loss, destruction or damage.
3. WHAT DATA DO WE COLLECT ABOUT YOU?
Personal data refers to information that can be used to identify an individual. In addition to “typical” identifiers such as name, address, email, or phone number, this may also include technical information such as IP address.
- Identification data: name, surname, address, email, phone number.
- Business relationship data: contract/invoice number, date of contract/invoice.
- Business partner interaction data: type of inquiry or complaint, date of request.
- Marketing data: type of marketing activity, date of contact, data collected on websites.
All personal data is voluntary unless required for the conclusion of a contract, fulfilling your requests, or enabling website functionality. Without such data, the intended purpose cannot be achieved.
5. WHAT RIGHTS DO YOU HAVE?
As a user of www.ampliphi-bio.com, you have the following rights:
Right to withdraw consent: You may withdraw your consent at any time for any processing based on consent, without affecting the lawfulness of processing carried out before withdrawal. Withdrawal has no negative consequences.
Right of access / to be informed: You have the right to know what personal data we collect, from which sources, and for what purposes. You may contact us at any time to request this information.
Right to rectification: You may request corrections of inaccurate personal data. We strive to maintain accuracy and will honour such requests.
Right to erasure (“right to be forgotten”): You may request that we delete your personal data, unless retention is required by law. We commit to deleting or anonymizing such data.
Right to data portability: You may request your personal data in a structured, commonly used format. We will provide only the data you have supplied to us or obtained from public sources or partners.
Right to restriction of processing: In specific cases, you may restrict processing. Requests will generally be treated as withdrawal of consent or objection to our legitimate interest.
Right to object: You may object to any processing. Objections will be treated as withdrawal of consent or objection to legitimate interest.
Automated decision-making: We do not use automated decision-making.
Right to lodge a complaint: If you suspect a violation of data protection law, you may file a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, Slovenia, telephone number: +386 (0)1 230 97 30, or e-mail: gp.ip@ip-rs.si. We encourage you to contact us first to resolve any issue together.
For reliable identification, we may request additional information before fulfilling a rights-related request. A request may be rejected only if we cannot reliably identify you.
We commit to responding to user requests without undue delay and no later than one month from receipt.
You may exercise your rights by contacting us at info@ampliphi-bio.com.
For questions about data processing, your rights, or suspected misuse, you may also contact our Data Protection Officer at info@ampliphi-bio.com.
6. HOW LONG DO WE RETAIN YOUR DATA?
The controller and the processors of the website www.ampliphi-bio.com retain users’ personal data only for as long as is necessary to fulfill the purpose for which the data was collected. After this period, the data is permanently deleted or anonymized so that the user can no longer be identified.
- Data processed based on law: retained in accordance with legal provisions.
- Contract-related data: retained until contract termination and for the statutory limitation period for potential claims.
- Contractual documentation (invoices, credit notes, confirmed offers, orders): retained for up to 10 years in line with tax and accounting legislation.
- Data obtained with consent (e.g. newsletter subscriptions): retained until withdrawal of consent or for a maximum of 10 years but deleted earlier if the purpose is fulfilled or required by law.
The controller ensures that personal data will be protected and will not be disclosed to unauthorized third parties, except where required by competent state authorities or in cases of suspected misuse.
The controller may transfer personal data to contractual processors who process the data exclusively on behalf of the controller and in accordance with the provisions of this Privacy Policy.
Processors retain the data only for as long as is necessary to fulfill the intended purpose and do not use it for their own purposes.
The controller will not transfer personal data outside the European Union or to international organizations without an adequate level of personal data protection.”
7. UPDATES TO THE PRIVACY POLICY
The Controller of www.ampliphi-bio.com undertakes to publish any changes to this Privacy Policy on this website. By using the website www.ampliphi-bio.com, the user acknowledges and agrees to the full content of this Privacy Policy.
Last update: September 2025