Privacy Policy

Data controller

The controller of personal data is:

Elvis Mehić s.p.
Čufarjeva ulica 1
1230 Domžale
Slovenia

Registration number: 7057385000
Tax number: 86450751

Email: info@sloveniaconcierge.com
Phone: +386 31 457 457

Personal data we process

We may receive personal data primarily when you contact us through a contact form or by email. We process information you provide, including in particular:

• your name, where provided,
• your email address,
• your telephone number, where voluntarily provided,
• the selected service or subject of your enquiry, where such a field is available,
• the content of your message and any other information you voluntarily include in your enquiry.

Technical information

When you use the website, limited technical information such as your IP address, date and time of access, browser or device information and the requested URL may also be processed where necessary for website security and proper operation.

Purposes and legal bases

We process personal data for the following purposes:

• responding to enquiries and communicating about services: taking steps at your request prior to potentially entering into a contract (Article 6(1)(b) GDPR),
• general communication, website security, prevention of abuse and technical operation: our legitimate interests (Article 6(1)(f) GDPR),
• measuring and analysing website usage through Google Analytics, where enabled: only on the basis of your consent (Article 6(1)(a) GDPR),
• showing the film in the homepage header, which is loaded from YouTube automatically when the page opens and before consent: our legitimate interests in presenting the service (Article 6(1)(f) GDPR). Details are set out in the Cookie Policy.

Requirement to provide data

Information entered in contact form fields marked as required is necessary for us to process and respond to your enquiry. If you do not provide the required information, we may be unable to respond to or process your enquiry. All other information is provided voluntarily.

Retention

Enquiries and related communications are generally retained for no longer than 12 months from the last relevant communication. If an enquiry results in a business relationship, information required for performance, evidence or compliance with legal obligations may be retained for longer in accordance with applicable law.

Technical logs are retained only for as long as necessary for security, troubleshooting and operation of the website, or in accordance with the hosting provider's settings and legal obligations.

Recipients and service providers

We do not sell personal data. Where necessary for their services, data may be accessible to external providers, including:

• NEOSERV (Webtasy, d.o.o.) as the website hosting and technical infrastructure provider,
• Google as the provider of YouTube, when the film in the homepage header is loaded, and as the provider of Google Analytics where the user consents to it,
• website maintenance providers where access to data is necessary to perform their work.

Transfers outside the European Economic Area

Where a provider processes data outside the European Economic Area, transfers are carried out using a mechanism permitted by the GDPR, such as an applicable adequacy decision or appropriate contractual safeguards including the European Commission's Standard Contractual Clauses. Further information on specific transfers and safeguards is available in the relevant provider's privacy documentation or from the controller upon request.

Cookies and analytics

Non-essential analytics and similar tracking technologies are not activated before you provide consent. The exception is the film in the homepage header, which is loaded from YouTube automatically when the page opens; in doing so, YouTube receives your IP address and basic technical information. Further information about the technologies used, their purposes and consent management is available in the Cookie Policy.

Your rights

Subject to the conditions set out in the GDPR, you may have the right to request:

• access to your personal data,
• correction of inaccurate or incomplete data,
• erasure of personal data,
• restriction of processing,
• data portability where applicable,
• objection to processing based on legitimate interests,
• withdrawal of consent for processing based on consent.

Exercising your rights

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights or ask questions about personal data, contact: info@sloveniaconcierge.com.

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia or another competent supervisory authority.

Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects concerning you.

Changes to this policy

We may update this Privacy Policy when the website, services used or applicable law changes. The current version will always be published on this website.