Privacy policy

In short

This website sets no cookies, embeds no analytics or tracking tools and loads no content from third-party servers. The fonts are served from our own server, so no connection to Google Fonts or a comparable service is made.

We process personal data only when you write to us via the contact form or by email.

Controller

A data protection officer is not required under Art. 37 GDPR, as we neither process special categories of data on a large scale nor carry out large-scale regular monitoring.

Company

KPJP, zagotavljanje kakovosti d.o.o.

Address

Cesta Ceneta Štuparja 137 1231 Ljubljana-Črnuče Slovenia

Represented by

Kristof Peymann, Managing Director

Email

contact@kpjp.si

Visiting the website

When you access the site, the server processes technically necessary connection data: IP address, date and time, the address requested, volume of data transferred, status message and browser and system details.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and uninterrupted operation of the website. This data is not combined with other sources.

Hosting

The website is operated at Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. The servers are located in Nuremberg, Germany.

A data processing agreement under Art. 28 GDPR is in place with the provider. It processes the data solely on our instructions. Its technical and organisational measures are audited annually by TÜV Rheinland.

The provider uses sub-processors, some outside the European Union. As we selected a server location within the EU, server data is processed exclusively within the EU; support is likewise provided from within the EU.

Web server access logs are rotated daily and deleted automatically after 14 days. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and reliable operation of the website.

Contact form and email

When you write to us, we process the details you provide in order to answer your enquiry.

• Name, email address, company and your message
• Time of receipt

Disclosure to third parties

Your message is transmitted via the mail server of our provider united-domains (smtps.udag.de) and stored in our mailbox there. The provider processes the data as a processor acting on our instructions.

Beyond that we do not pass your data on — in particular not for advertising purposes and not to recipients outside the European Economic Area.

Legal bases and retention

Enquiries relating to a contract or its initiation are processed under Art. 6(1)(b) GDPR; all others under our legitimate interest in responding, Art. 6(1)(f) GDPR.

We delete your enquiry once it has been dealt with conclusively and no statutory retention periods apply. Commercial and tax obligations may require retention for up to ten years.

No cookies, no tracking

We use neither technically necessary nor analytical cookies. There is no audience measurement, no profiling and no integration of social networks.

As no processing requiring consent takes place, this website needs no consent banner.

No automated decision-making

Automated decision-making including profiling under Art. 22 GDPR does not take place.

Your rights

You have the following rights in relation to us:

• Access to the data processed about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)

Right to lodge a complaint

You may lodge a complaint with a supervisory authority at any time. The authority responsible for us is the Slovenian Information Commissioner:

Informacijski pooblaščenec, Dunajska cesta 22, 1000 Ljubljana, Slovenia — gp.ip@ip-rs.si

You may equally contact the supervisory authority where you habitually reside.

Changes

We update this policy whenever our processing or the legal situation changes. The version published here applies.