Privacy Policy

The controller of the personal data processed through this website and by e-mail is:

Registered name

Poslovno svetovanje, Madea Mojca Majhen s.p.

Registered office

Gosposka ulica 4, 1000 Ljubljana, Slovenia

Registration number

9300783000

VAT ID

SI47010045

Register

AJPES, izpostava Ljubljana

E-mail

info@institut-am.si

I AM is the name under which the controller trades (“I AM”, “we”). The details above are also the provider information required by Article 45 of the Slovenian Companies Act (ZGD-1).

No data protection officer has been appointed, as the scale of our processing does not require one by law. For any question about personal data we can be reached at info@institut-am.si.

The website is static and, without your consent, entirely self-contained. When you visit, it:

• sets one necessary cookie only once you decide in the banner, and only to remember your choice;
• uses Google Analytics solely if you have accepted it — the details, cookie names and durations are in the cookie notice;
• loads no script, font, image or embedded content from third-party servers without consent — the typeface and the illustrations are part of the site;
• has no forms, sign-ups, user accounts or newsletters.

The only way to reach us is a link to our e-mail address. Clicking it opens your own e-mail program; the website itself sends nothing.

When you write to us. If you send us an e-mail, we process your e-mail address, your name and whatever you choose to include: the content of your message, details of the organisation you represent and any attachments.

Purpose

Answering your enquiry, preparing a proposal, agreeing and delivering the service, and business communication with you.

Legal basis

Steps taken at your request prior to entering into a contract, and performance of the contract (Article 6(1)(b) GDPR). For communication that does not lead to a contract, our legitimate interest in answering a message you sent us (Article 6(1)(f) GDPR).

Retention

For as long as the correspondence or business relationship lasts and for no more than three years after the last contact; records of concluded business for ten years as required by tax and accounting law.

Providing your data is voluntary. Without an e-mail address we cannot reply; we ask for nothing else.

When you visit the website. Each time a page is requested, the hosting provider's server necessarily receives and briefly logs technical data about the request: IP address, date and time, the address requested, the response status, the browser and operating system type and the page you came from.

Purpose

Delivering the website, keeping it secure, detecting and preventing abuse, and fixing faults.

Legal basis

Our legitimate interest in the secure and reliable operation of the website (Article 6(1)(f) GDPR).

Retention

A limited period set by the hosting provider for security logs. We do not combine this data with any other data and do not use it to identify individual visitors.

When you consent to analytics. If you choose “Accept” in the banner, Google Analytics 4 loads and records page views, approximate location (country, town), device and browser type, the page you came from and the time of your visit. Google truncates your IP address before storing it; we use no advertising features and no Google signals.

Purpose

Visit statistics: which pages are read and where visitors come from, so that we can improve the website.

Legal basis

Your consent (Article 6(1)(a) GDPR and the Slovenian Electronic Communications Act). You may withdraw it at any time via “Cookie settings” in the footer; withdrawal applies from then on.

Retention

Google Analytics cookies for up to two years in your browser (we delete them on withdrawal); data in the tool for no more than 14 months.

We do not sell your data and do not pass it to third parties for their own purposes. To run the website, our e-mail and the analytics we use providers that process data on our behalf and on our instructions under data processing agreements:

Website hosting

Vercel Inc., USA — the server infrastructure and network that deliver the pages to visitors (provider's privacy policy).

E-mail

Google Ireland Limited (Google Workspace) — the mailbox your messages arrive in (provider's privacy policy).

Website analytics

Google Ireland Limited (Google Analytics 4) — visit measurement, only with your consent (provider's privacy policy).

We may also disclose data where the law requires it — for example to tax or other competent authorities — or to our accounting and legal advisers, to the extent necessary to perform a contract or to exercise rights.

Our hosting provider, Vercel Inc., is established in the United States and delivers the pages through a global network of servers, so technical request data may also be processed outside the European Economic Area. The transfer is safeguarded by the provider's certification under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision, and by the European Commission's standard contractual clauses, which form part of the data processing agreement.

E-mail and analytics are processed by Google Ireland Limited, established in Ireland; any transfers to sub-processors outside the EEA, including Google LLC in the USA, are governed by Google under its EU-U.S. Data Privacy Framework certification and standard contractual clauses. You may request a copy of the safeguards at info@institut-am.si.

We keep personal data only for as long as the purpose for which we received it requires, and then delete or anonymise it.

Enquiries that do not lead to business

No more than three years after the last contact.

Records of concluded business

Ten years after the end of the financial year in which the business was completed, as required by tax and accounting law.

Technical server logs

A short period set by the hosting provider for security purposes.

Google Analytics data

Cookies for up to two years in the browser, data in the tool for no more than 14 months; on withdrawal we delete the cookies.

Correspondence about the exercise of rights

For as long as needed to demonstrate that a request was handled — no more than five years.

With regard to your personal data you have the right:

• of access — to learn whether and which of your data we process, and to receive a copy;
• to rectification of inaccurate or incomplete data;
• to erasure (the “right to be forgotten”) where the data is no longer needed or the processing no longer has a basis;
• to restriction of processing in the cases set out in Article 18 GDPR;
• to data portability — to receive the data you provided and we process under a contract in a structured, commonly used and machine-readable format;
• to withdraw consent to analytics — at any time, via “Cookie settings” in the footer, without affecting the lawfulness of processing before the withdrawal.

Right to object. You may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests. We will then no longer process the data unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims. We do not carry out direct marketing.

To exercise your rights, write to info@institut-am.si. We respond without undue delay and within one month at the latest; where a request is complex or there are several, we may extend this by up to two further months and will tell you. Exercising your rights is free of charge. If we have reasonable doubts about your identity, we may ask you to confirm it before we respond.

If you believe that the processing of your personal data infringes the law, you have the right to lodge a complaint with a supervisory authority. In Slovenia this is:

Authority

Informacijski pooblaščenec Republike Slovenije (Information Commissioner of the Republic of Slovenia)

Address

Dunajska cesta 22, 1000 Ljubljana, Slovenia

E-mail

gp.ip@ip-rs.si

Telephone

+386 1 230 97 30

Website

www.ip-rs.si

We would be glad if you contacted us first; most questions can be resolved directly.

The website is delivered exclusively over an encrypted connection (HTTPS), with strict transport security enabled and a content security policy that allows resources to load only from our own origin and — after your consent — from Google Analytics. Only the controller has access to the mailbox. The providers we use maintain independently certified information security management systems.

No means of transmission is completely secure. If you wish to send us sensitive information, please agree the method of transfer with us first.

Automated decision-making and profiling. We do not make automated decisions and do not profile visitors or clients.

Children. The website is intended for a business audience. We do not knowingly collect data of children under 15; if we learn that we have received such data, we delete it.

Special categories of data. We do not collect special categories of personal data, such as data about health or beliefs. Please do not send us such data by e-mail unless it is necessary and agreed in advance.

Links to other websites. The website links to antonmajhen.si and to our providers' privacy policies. Their operators are responsible for the content and data protection on those sites; we recommend reading their notices.

We update this policy when the way we process data, our providers or the law change. Each version carries the date of its last update at the top of the page; where possible, we also inform you of material changes directly.

The policy is published in Slovenian, English and Russian. In the event of any discrepancy between the language versions, the Slovenian text prevails.

For any question, request or comment concerning personal data, write to info@institut-am.si or by post to the controller's address given in section 1.