Privacy Notice

This Privacy Notice sets forth how I, as the sole owner and operator of this personal website, collect, use, and safeguard your personal data in full compliance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2). Although I do not presently engage in commercial activities, offer services, or conduct transactions via this website, certain types of personal data may nevertheless be collected as a result of your voluntary interactions or through technologies essential for the proper functionality and performance of the site.

Your privacy is of paramount importance to me, and I am firmly committed to managing your personal data with the utmost integrity, transparency, and accountability. By continuing to browse and use this website, you confirm that you have carefully read, understood, and agreed to the terms set out in this Privacy Notice. Should you not agree with any part of this Notice, I respectfully request that you refrain from further use of the site.

I may collect personal data through two primary methods: directly, when you choose to communicate with me (e.g., via a contact form or email), and indirectly, through automated tools that interact with your device while you browse this website.

Such data may include, but is not limited to: your full name, email address, IP address, browser type and version, device identifiers, operating system, timestamps of access, and usage patterns. This information is typically gathered using industry-standard technologies such as cookies, access logs, and web analytics software.

I do not actively seek to collect sensitive personal data or special category data as defined under Article 9 of the GDPR. If you voluntarily choose to provide such data, you do so entirely at your own risk and discretion.

All processing of personal data is conducted lawfully, fairly, and transparently in accordance with Article 6 of the GDPR. The legal bases I rely on include the following:

(a) Your explicit consent, granted when you actively submit personal information through the website or otherwise choose to communicate with me;

(b) My legitimate interests, particularly in ensuring the operational stability, information security, and performance optimization of this website, as well as in deriving statistical insights to improve its content and usability;

(c) The need to comply with legal obligations under applicable European Union and national legislation.

Where processing is based on your consent, you retain the right to withdraw such consent at any time. This does not affect the lawfulness of data processing carried out prior to the withdrawal.

I process personal data exclusively for legitimate and clearly defined purposes, which include but are not limited to:

- Facilitating effective and timely communication following your direct inquiry;

- Ensuring the secure and optimal technical operation of the website;

- Measuring, analyzing, and improving website traffic and user experience through anonymized usage statistics;

- Fulfilling legal obligations or complying with formal requests issued by authorized public bodies;

- Detecting, preventing, and addressing any misuse, unauthorized access, or potentially fraudulent behavior associated with the website.

I do not engage in the sale, lease, or commercial dissemination of your personal data. However, I may share your data with carefully selected third-party service providers whose functions are necessary for the reliable operation and maintenance of this website. These providers may include website hosting services, analytics platforms, and cybersecurity vendors.

All such service providers are contractually obligated to adhere to strict data protection standards. Where appropriate, I ensure compliance through the execution of Data Processing Agreements (DPAs) as required under Article 28 of the GDPR.

In rare and legally mandated situations, I may be required to disclose your personal data to competent public authorities, regulatory agencies, or judicial entities pursuant to a valid legal obligation or enforceable court order.

As a general principle, I strive to ensure that all personal data processing occurs within the European Economic Area (EEA). In instances where data must be transferred to jurisdictions outside the EEA—such as when a third-party service provider hosts data on non-EEA servers—I implement adequate protective measures in accordance with GDPR requirements.

These measures may include, but are not limited to: the use of Standard Contractual Clauses (SCCs) adopted by the European Commission, binding corporate rules, adequacy decisions, or other lawful transfer mechanisms that provide an equivalent level of data protection.

I retain personal data only for as long as is necessary to fulfill the specific purposes for which it was collected, as outlined in this Notice, unless a longer retention period is mandated or permitted by applicable law. Data submitted for communication purposes may be retained for reasonable follow-up or documentation purposes, provided such retention remains justifiable.

When data is no longer required for these purposes, I implement appropriate procedures to securely delete or irreversibly anonymize it in accordance with established best practices.

You enjoy a comprehensive set of rights under data protection legislation, and I am committed to upholding those rights with due diligence. Specifically, you may exercise the following:

- The right to request access to the personal data I hold about you;

- The right to request correction of inaccurate, outdated, or incomplete personal data;

- The right to request erasure of personal data, also known as the 'right to be forgotten';

- The right to request restriction of processing where appropriate;

- The right to object to processing based on legitimate interests;

- The right to data portability, where applicable.

If the processing of your personal data is based on consent, you may revoke that consent at any time without affecting the lawfulness of processing carried out prior to the revocation. To exercise any of your rights, please contact me using the communication channels provided in this Notice.

In the event that you believe your rights have been infringed, you also have the right to lodge a formal complaint with the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec).

This website may feature hyperlinks to external sites or services managed by independent third parties. Such external resources operate under their own privacy frameworks and are entirely independent of this Privacy Notice.

I bear no responsibility for the content, policies, or practices of these third-party platforms. I encourage you to review their privacy statements prior to disclosing any personal data to them.

This website is designed for a general audience and is not intended for, nor knowingly targeted at, individuals under the age of 16. I do not knowingly collect or store any personal data from minors.

If it comes to my attention that data pertaining to a minor has been inadvertently collected, I will take prompt action to erase such data. Parents or legal guardians may contact me to request removal of their child’s personal data.

I implement appropriate technical and organizational safeguards to ensure the confidentiality, integrity, and availability of personal data. These measures may include but are not limited to: secure encryption protocols, firewalls, access control systems, and routine data backups. While no technological infrastructure is impervious to security threats, I continuously evaluate and enhance these measures to align with current best practices and risk management standards.

I do not engage in any form of automated decision-making or profiling that would produce legal or similarly significant effects for individuals. Should such activities be introduced in the future, I will provide prior notice and implement all necessary legal safeguards in accordance with GDPR requirements.

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, I will notify the competent supervisory authority without undue delay. Where legally required, I will also inform you directly and promptly, in accordance with Articles 33 and 34 of the GDPR.

This Privacy Notice is governed by, and shall be interpreted in accordance with, the laws of the Republic of Slovenia and the applicable legal framework of the European Union. Any legal disputes or claims arising from this Notice shall fall within the exclusive jurisdiction of the competent courts in Slovenia.

This Privacy Notice may be subject to modification from time to time in response to legal, technological, or operational developments. Any revised versions will be made publicly available on this page and will include an updated 'Effective Date'.

I encourage you to review the Privacy Notice periodically to remain informed of any updates. Your continued use of the website following such changes shall constitute acceptance of the updated terms.

Should you have any inquiries, concerns, or requests concerning the processing of your personal data, I invite you to contact me directly via the contact form provided on this website.

I undertake to respond to all legitimate requests in accordance with the timelines prescribed under applicable data protection law.