1. Who we are

uWeb d.o.o. ("we", "us", "our") is the data controller for personal data collected through this website (uweb.si). You can contact us at [email protected].

2. What data we collect

We collect personal data only when you actively provide it:

• Contact form: name, email address, company name (optional) and your message. This data is used solely to respond to your enquiry.
• Email correspondence: any data you include when emailing us directly.

We also use Google Analytics to understand how visitors use our site. This involves the collection of anonymised usage data via cookies set in your browser. See Section 5 for details.

3. Legal basis for processing

We process contact form data on the basis of legitimate interests (Article 6(1)(f) GDPR), specifically responding to business enquiries. You are not required to provide this data; if you prefer, you can contact us by email directly.

You have the right to object to processing carried out on the basis of legitimate interests at any time. See Section 7.

4. How long we keep your data

Contact form submissions are forwarded to our internal email and retained for as long as necessary to respond to your enquiry and for normal business record-keeping. If an ongoing client relationship is established, relevant data is retained for the duration of that relationship and up to 5 years thereafter for legal and accounting purposes. You may request deletion at any time by emailing [email protected] and we will respond within 30 days.

5. Third-party processors

• Cloudflare Turnstile: used on our contact form to prevent automated spam submissions. Cloudflare may process your IP address and browser data to verify your request. Legal basis: legitimate interests (preventing automated spam). See Cloudflare's privacy policy.
• Google Analytics: we use Google Analytics 4 to collect anonymised usage data (pages visited, session duration, device type). Google Analytics sets cookies in your browser (_ga, _gid) to distinguish visitors. Data is processed by Google LLC and may be transferred outside the EEA under standard contractual clauses. You can opt out by installing the Google Analytics Opt-out Add-on. See Google's privacy policy.
• Calendly: our "Book a free audit" feature uses Calendly, a third-party scheduling service operated by Calendly LLC. Calendly is only activated when you explicitly click the booking button; no scripts or cookies are loaded passively. If you proceed with booking, Calendly will collect your name, email address and timezone to schedule the appointment. This data is processed by Calendly LLC and subject to their privacy policy. We receive a confirmation email with your contact details solely for the purpose of conducting the scheduled call. Legal basis: processing necessary at your request prior to entering into a service relationship (Article 6(1)(b) GDPR).

6. Data transfers

Our hosting infrastructure is EU-based and all client data remains within the European Economic Area (EEA). Where third-party services transfer data outside the EEA, they do so under standard contractual clauses or equivalent safeguards.

7. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing (including objecting to processing based on legitimate interests)
• Request data portability
• Withdraw consent (where processing is based on consent) at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, email [email protected]. We will respond within 30 days.

8. Supervisory authority

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Information Commissioner of Slovenia (IP RS), which is the supervisory authority for data protection in Slovenia.

9. Automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Material changes will be communicated via email where we hold your contact details.