Privacy

Privacy policy

This policy explains how we handle the personal data of visitors and customers.

Controller

The controller of personal data is Eva Cerar s.p., Soteska pri Moravčah 11, 1251 Moravče, info@glavninaspletu.si.

What data and why

We use the data from forms (website address, e-mail, content of the inquiry) solely to prepare an offer, perform the service and reply to your inquiry. We do not sell the data and do not pass it on to third parties for their own purposes.

Payment by card

When you pay by card, Stripe (Stripe Payments Europe, Ltd., Ireland, and affiliated companies), as the payment service provider, processes the data needed for the payment: name, company name, e-mail address, telephone number, billing address, tax number if any, and payment card details, and issues the invoice on behalf of the provider.

Payment card details go only to Stripe; we never receive them.

After the payment, we store the name, company name, e-mail address, telephone number, selected package, amount and the Stripe payment identifiers with our hosting provider Cloudflare; the billing address and tax number remain with Stripe. We may also receive a payment notification containing this data via the Telegram service.

The legal basis is the contract or steps taken before entering into it (Article 6(1)(b) of the General Data Protection Regulation, GDPR), and for invoices a legal obligation (Article 6(1)(c)). When a payment is requested, we use the IP address briefly to limit the number of requests (legitimate interest, Article 6(1)(f)).

Stripe, Cloudflare and Telegram may also process data outside the European Union; for Stripe and Cloudflare, the transfer is based on standard contractual clauses and on the EU-US Data Privacy Framework.

We keep invoices and the related data for as long as accounting and tax regulations require.

If you have consented to analytics cookies, Google Analytics 4 receives information about the purchase when the payment succeeds (package, amount and a random purchase identifier), but not your name, e-mail address or card details.

Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, or for the duration of the contractual relationship and the statutory periods.

Your rights

You have the right to access, rectification, erasure and restriction of processing of your data, and the right to object. Send your request to info@glavninaspletu.si. You also have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec RS).

Cookies

More about cookies on the Cookies page.