Privacy policy

The controller of personal data, as defined by the EU General Data Protection Regulation (GDPR) and the applicable law governing personal data protection, is:

The controller undertakes to store and process all personal data obtained in accordance with the GDPR and applicable Slovenian legislation (the Personal Data Protection Act).

We obtain personal data in the following ways:

• through the online enquiry form,
• in telephone communication with the client,
• in personal communication with the client,
• in email communication with the client.

Enquiry form: we use the data you enter (full name, company, email address, phone, project type and description) to reply to your enquiry and prepare a quote. The legal basis is your consent when submitting the form and taking steps at your request prior to entering into a contract (Article 6(1)(a) and (b) GDPR). Without your explicit consent, we do not use the data you entered for any other purposes in the future.

Protection against misuse of the form: to prevent mass submissions, we temporarily store a hashed, irreversible form of your IP address when you submit the form. This record is deleted automatically within one hour at the latest.

Language suggestion: when you visit a Slovenian page, our server determines your country from your IP address using a local database (DB-IP), so that we can offer you the page in your language. We do not store your IP address for this purpose or pass it on to third parties. The legal basis is our legitimate interest in making the website easy to use (Article 6(1)(f) GDPR).

Operation of the website: the hosting provider records technical data about visits in server logs (e.g. IP address, time and requested page), which is needed for the secure operation of the website.

The website does not use cookies and does not load analytics or advertising scripts from third parties. Details are on the Cookie policy page.

We disclose personal data to law enforcement and other state authorities where required by law or where necessary to prevent, detect or prosecute criminal offences and fraud.

Data is stored with our hosting and email provider, which processes it only on our behalf. We undertake never to pass your data on to unauthorised persons or to other persons for advertising purposes.

• If we have your explicit consent for a specific purpose, we keep the data until consent is withdrawn.
• If processing is necessary for the performance of a contract (Article 6(1)(b) GDPR), we keep the data for 10 years.
• If processing is necessary for taking steps at your request prior to entering into a contract, we keep the data for 5 years.

Under the EU General Data Protection Regulation (GDPR), you have the right:

• to access your personal data and obtain a copy,
• to have incomplete or inaccurate personal data completed or rectified,
• to erasure of your personal data, in particular if it is no longer needed for the purposes for which it was collected, if it was processed unlawfully, or if you have withdrawn your consent and there is no other legal basis for processing,
• to transfer your personal data to another controller where technically feasible,
• to restriction of processing, in particular if you contest the accuracy of the data (for a period enabling us to verify it), if processing is unlawful but you oppose erasure, or if the retention period has expired but you need the data to establish legal claims,
• to withdraw your consent at any time.

To exercise your rights or obtain further information, write to us at info@isaac.si. We will handle your request and reply in accordance with the GDPR.

If you believe that your rights or the rules on personal data protection have been violated, you may lodge a complaint with the Information Commissioner of the Republic of Slovenia (www.ip-rs.si, phone +386 1 230 97 30, email gp.ip@ip-rs.si).

This is a translation of the Slovenian original. In the event of any discrepancy, the Slovenian version shall prevail.