Privacy Policy

Personal data means any information relating to an identified or identifiable natural person. User means a natural person whose personal data is processed under this policy. Processormeans an entity processing personal data on the Controller's behalf and instructions, under a written agreement, as required by Art. 28 GDPR.

Personal data may be disclosed to processors listed above for the purposes described in Section 7, to legal or governmental authorities where required by law, and to third countries only where an adequate level of protection applies or appropriate safeguards are in place (Standard Contractual Clauses, or an equivalent transfer mechanism).

Users may lodge a complaint with the Slovenian supervisory authority, the Informacijski pooblaščenec.

Some parts of this site store information on your device. What is stored, why, for how long, and whether it requires your consent is set out below. You control non-essential storage through the cookie banner shown on your first visit, and can change your choice at any time via "Cookie preferences" in the footer.

You are responsible for the accuracy of any information you provide (for example through the contact form or the newsletter signup), for keeping any account credentials confidential, and for not submitting false or third-party personal data without authorisation.

If you accept the Personalisation cookie category and later get in touch with us — through the contact form or the newsletter — we combine what you did on this website (pages viewed, when, and what led you here) with your contact details in one record in our CRM. Once you are a contact, we may also see whether you opened or clicked emails we send you.

We use this to understand what you are interested in and to prioritise and personalise how we follow up with you — for example, a salesperson reading your enquiry can see which product pages you looked at beforehand, rather than starting from nothing.

This is not a solely automated decision. A person reads and responds to every enquiry; nothing about your access to our products, services, or any contract with us is decided by this combined record alone, without human involvement. Article 22 GDPR, which specifically governs solely automated decision-making with legal or similarly significant effects, therefore does not apply to this processing.

You can object to this at any time — see Section 9, and in particular your right to object to direct-marketing profiling, which has no exceptions.

You may request access to, rectification of, or erasure of your personal data; request restriction of processing; request data portability; withdraw consent at any time; and lodge a complaint with the Informacijski pooblaščenec. We will respond within one month, extendable by a further two months for complex requests. To exercise any of these rights, contact us at the details in Section 1.

Right to object (Art. 21 GDPR). Where we process your data under legitimate interest (Art. 6(1)(f)), you may object at any time, and we will stop unless we can demonstrate compelling legitimate grounds that override your interests. Where we process your data for direct marketing — including the profiling described in Section 8 that supports it — Art. 21(2) gives you an unconditional right to object: there is no balancing test, and once you object we stop that processing entirely.

We apply technical and organisational measures appropriate to the risk, including encryption in transit and access controls, but no system is completely secure. This policy may be updated; material changes will be indicated by a new effective date.

Data Protection Officer: based on the scale and nature of our processing, we have assessed that a Data Protection Officer is not mandatory under Art. 37 GDPR. Igor Bitežnik (contact details in Section 1) is our named contact for data protection matters and questions about this policy.

Effective date: 30 July 2026.