PRIVACY POLICY

Last updated: 12 October 2026

This policy explains what personal data we collect when you visit our website or contact us, how we use it and what rights you have. We process data in accordance with the General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).

1. Data controller

For any questions about data protection, please email diyankolev88@gmail.com.

2. What data we process and why

Enquiries (form, email, phone)

When you send us an enquiry, we process the data you enter yourself: name, email address, phone number, subject and message. We use it only to reply, arrange a site visit and prepare a quote.

• Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering your question (Art. 6(1)(f) GDPR).
• Retention: until the communication is concluded; if no cooperation follows, no longer than 2 years, after which the data is deleted.

Performing work and client relations

If we conclude a contract, we process the data needed to carry out the work, issue invoices and meet legal obligations (e.g. name, site address, contact details, tax details for companies).

• Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR).
• Retention: for the duration of the contract and warranty periods, and as long as required by law (accounting records generally 10 years).

Visiting the website

Our hosting provider automatically logs technical data on every visit (IP address, date and time, browser type, page visited). This is necessary for the website to work securely.

• Legal basis: legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR).

For fonts and icons the website uses external servers (Google Fonts and the cdnjs/Cloudflare, unpkg and jsDelivr networks). When loading these files your browser shares your IP address with these providers. They do not set cookies.

Google Maps

The Google Maps embed is loaded only if you allow it in the cookie banner. Google then receives your IP address and may set cookies. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. See our cookie policy.

We do not use analytics tools, advertising cookies or tracking pixels.

3. Who has access to your data

We do not sell your data or share it for marketing. Access is limited to staff who need it and to external processors bound by appropriate agreements:

• FormSubmit (formsubmit.co) – forwards contact form messages to email,
• Google (email service, Google Maps, Google Fonts),
• GitHub (website hosting),
• the external website developer and maintainer,
• our accounting service (for issuing and storing invoices).

We may also disclose data to public authorities where required by law.

4. Transfers outside the EU

Some of the providers listed (Google, GitHub, Cloudflare) also process data in the USA. Such transfers rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

5. Your rights

You have the right at any time to:

• access your data and receive a copy,
• have inaccurate data rectified,
• have your data erased when it is no longer needed or there is no legal basis for it,
• restrict processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw consent – without affecting the lawfulness of processing before withdrawal.

Send your request to diyankolev88@gmail.com. We will reply within one month at the latest. Exercising your rights is free of charge.

6. Complaints

If you believe we process your data unlawfully, you may lodge a complaint with the supervisory authority: Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, www.ip-rs.si, or with the authority in your EU country of residence.

7. Security and other information

We use appropriate technical and organisational measures to protect data (HTTPS encryption, restricted access, secured accounts). We do not carry out automated decision-making or profiling. This website is not intended for children under 15.

8. Changes to this policy

We may update this policy from time to time. The current version is always published on this page, with the date of the last change shown above.