Privacy Policy

Data Controller

Računalničar, Sebastijan Bandur s.p., Marjeta na Dravskem polju 39, 2206 Marjeta na Dravskem polju, Slovenia. Tax no.: 68283270. Company ID: 8839883000. Owner: Sebastijan Bandur.

For data protection questions or to exercise your rights, contact: [email protected].

What data we process

We only process data you explicitly submit or that is necessary to operate and secure the site:

• Contact form: name, email address, phone (optional), company (optional), selected topic, message content.
• Technical data (server logs): IP address, browser and OS information, requested URL, timestamp — used for security and abuse prevention.
• Client business data in the course of service delivery (contact person details, invoicing data).

Purposes and legal bases

• Responding to inquiries and preparing offers — basis: steps prior to entering a contract (GDPR Art. 6(1)(b)).
• Performance of contracts with clients — basis: contract performance (GDPR Art. 6(1)(b)).
• Issuing invoices and fulfilling legal obligations (tax, accounting) — basis: legal obligation (GDPR Art. 6(1)(c)).
• Preventing abuse, spam, and security incidents — basis: legitimate interest (GDPR Art. 6(1)(f)).

Retention periods

• Contact form data: until the communication is concluded or a contract is entered into; otherwise up to 12 months after the last contact.
• Client data: for the duration of the contract and in line with tax law (10 years for invoices).
• Server logs: up to 30 days, except in the event of a security incident.

Processors (recipients of data)

Some services are entrusted to contractual processors who process data on our behalf under signed DPAs:

• Cloudflare — hosting (Pages) and server infrastructure (Workers, D1 database, R2 storage). Data is hosted in data centres within the EU (Eastern Europe region). No transfers to third countries.
• Resend (Ireland, EU) — delivery of email from the contact form. Data stays within the European Union.

International transfers

Personal data is processed and stored within the European Union (Cloudflare — EU region; Resend — Ireland). We do not transfer data to third countries outside the EU/EEA. Web fonts are self-hosted on our own infrastructure, with no loading from third-party services.

Your rights

As a data subject, you have the right to:

• access your data,
• rectify inaccurate data,
• erase your data (right to be forgotten), where not in conflict with statutory retention,
• restrict processing,
• data portability,
• object to processing,
• lodge a complaint with a supervisory authority.

How to exercise your rights

Send a request by email to [email protected]. We respond within 30 days at the latest. We may ask for additional proof of identity to prevent disclosure of data to unauthorized persons.

Supervisory authority

Complaints may be addressed to: Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, [email protected], www.ip-rs.si.

Changes to this policy

This privacy policy may change. The updated version will be published on this page with a new update date.