Claime Privacy Policy

Last updated: 24 September 2026

The controller of the personal data covered by this Privacy Policy is Pauka, posredništvo in storitve, d.o.o., Prožinska vas 55, 3220 Štore, Slovenia, company registration number 7534353000, tax number 20803460, which operates the Claime service (hereinafter “Claime”, “we” or “us”).

For questions concerning the protection of personal data, we can be reached at info@claime.eu.

1. Who this policy applies to

This Privacy Policy applies to personal data that Claime processes as an independent controller, in particular the data of business users of the Claime service, website visitors, potential customers and persons who contact us for support, information or business cooperation.

Where a business user uses Claime to operate its loyalty programme and Claime processes the personal data of the business user's customers or cardholders solely on the business user's documented instructions, the controller of that data is the business user, and Claime acts as processor. Such processing is governed by the Data Processing Agreement (DPA) and is not the subject of this Privacy Policy.

The business user must provide its customers with appropriate information about the processing of their personal data. Where Claime provides a user interface for enrolment in the loyalty programme or for adding a digital card, Claime may display this information to the individual on behalf of the business user.

2. What data we process

The data we process depends on how the service is used and may include:

• data about the user account and the business user, such as first name and surname, email address, telephone number, company details and user account data;
• contractual, subscription, billing and payment data;
• data from communications with us;
• technical data, such as IP address, device or browser data, login data, and technical and security logs;
• other data necessary to provide a particular functionality of the service.

As a rule, we obtain personal data directly from the individual or their organisation. Where we lawfully obtain it from another source, that source may include publicly available business registers, company websites or other lawful business sources.

Claime does not use the personal data of website visitors for behavioural advertising or profiling, unless such practice is expressly introduced in future and lawfully and appropriately presented to users.

3. Why we process personal data

We process personal data only where there is an appropriate legal basis for doing so.

We may process data to set up and manage the user account, provide the Claime service and carry out the contractual relationship. The legal basis is the performance of a contract or the taking of steps prior to entering into a contract.

Where an individual uses the service on behalf of a company or other organisation, we may process their business contact details on the basis of the legitimate interest in managing the business relationship.

We may also process data for the purposes of providing support and security, preventing abuse, maintenance and ensuring the reliable operation of the service, where the appropriate legal basis is our legitimate interest.

We process data on invoices, payments and business records in order to comply with legal, tax and accounting obligations.

We may also use contact details to send information about Claime's services, news or offers, where such communication is permitted by applicable law. Where prior consent is required, we carry out such communication only on the basis of consent.

We do not sell personal data.

4. Who we may disclose data to

Only persons who need personal data to perform their tasks, and the external providers necessary for the operation of Claime, have access to personal data.

These may include providers of hosting and IT infrastructure, payment and accounting services, communication and support services, and other technical contractors.

Depending on the nature of the particular service, external providers may act as our personal data processors or as independent controllers. Where they act as our processors, they process personal data only in accordance with our instructions and applicable personal data protection requirements.

We may also disclose data to competent state authorities or other persons where this is required by law or where it is necessary to assert or protect our rights.

5. Where and for how long we keep data

Data that Claime stores within its primary infrastructure is stored within the European Union.

If a particular support service requires the processing of personal data outside the European Economic Area, the transfer is carried out only in accordance with Chapter V GDPR, for example on the basis of a European Commission adequacy decision, standard contractual clauses or another valid transfer mechanism.

We retain personal data only for as long as is necessary for the purpose for which it was collected, or for as long as required by applicable legal obligations.

As a rule, we retain data about the user account and the business relationship for the duration of the business relationship. After it ends, we may retain certain data in order to meet legal obligations, establish or defend legal claims, or resolve disputes.

We retain accounting and other records in accordance with statutory periods.

We retain technical and security logs for as long as is reasonably necessary to ensure the security and proper operation of the service.

When data is no longer needed, we delete it or anonymise it appropriately.

6. Cookies and similar technologies

The Claime website and platform may use strictly necessary cookies or similar technologies required for the operation of the service, security, user login or the provision of explicitly requested functionality.

If Claime uses analytics, advertising or other technologies for which applicable law requires prior consent, such technologies are activated only after appropriate consent has been obtained.

7. Data security

To protect personal data, we use appropriate technical and organisational measures designed to prevent unauthorised access, loss, destruction, alteration, disclosure or other unauthorised processing.

Access to personal data is restricted to persons and providers who need it to perform their tasks.

8. Your rights

Under the GDPR, where the legal conditions are met, you may, with regard to your personal data, request access to the data, its rectification, erasure, restriction of processing or portability, and object to certain processing.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

Where we process personal data for direct marketing purposes, you may object to such processing at any time.

You may send a request to info@claime.eu. Before fulfilling a request, we may verify your identity where necessary.

If you believe that we are not handling your personal data appropriately, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia.

9. Other information

Some personal data is necessary to enter into a contract, open a user account or provide the service. If you do not provide this data, we may not be able to provide certain services to you.

In the processing covered by this Privacy Policy, Claime does not use automated decision-making that would produce legal or similarly significant effects concerning the individual, unless such decision-making is subsequently expressly introduced and is lawful.

10. Changes to the Privacy Policy

We may update the Policy due to changes in legislation, the service or the way personal data is processed.

The version in force is published on the Claime website together with the date of the last update.

Where appropriate or required, we will also notify users of significant changes in another appropriate way.

For questions regarding this Privacy Policy or the processing of personal data, you may contact us at info@claime.eu.