Privacy policy
Effective 19 May 2026. This policy explains how KERAMKO Gregor Mesarič s.p. processes the personal data of visitors to this website in accordance with Regulation (EU) 2016/679 (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).
1. Controller
The data controller is KERAMKO Gregor Mesarič s.p., Brunšvik 55A, 2327 Rače, Slovenia. Reg. no.: 3204383000. VAT ID: SI21018588. E-mail: [email protected]. Phone: 031 350320. For any data protection questions, contact the e-mail address above.
2. Data we process
Through the contact form (and an equivalent channel for AI agents) we process: full name, phone number, job location, project description and an optional e-mail address, plus a record of your consent. Technically, your IP address and basic server log data (time, request type, browser) are processed automatically on visit and submission; this is necessary for the operation and security of the site.
3. Purposes and legal bases
Answering the enquiry and preparing a quote: pre-contractual steps at the request of the data subject and/or your consent (Art. 6(1)(b) and (a) GDPR). Security and abuse prevention (spam protection): the controller’s legitimate interest (Art. 6(1)(f) GDPR). Compliance with legal obligations, e.g. accounting, if a business relationship arises (Art. 6(1)(c) GDPR).
4. Processors and international transfers
For operation and message delivery we use external processors: Cloudflare, Inc. (hosting, content delivery, security and form protection) and Resend (Plus Five Five, Inc.) for delivering the enquiry e-mail. These providers may process data on servers outside the EU/EEA (USA); transfers rely on appropriate safeguards (Standard Contractual Clauses and/or the EU-US Data Privacy Framework). We do not sell data and do not use it for profiling or advertising.
5. Retention
Enquiry data is kept until the matter is concluded and at most 12 months after the last contact, unless a contractual relationship arises — in which case data contained in accounting records is retained under tax and accounting law (typically up to 10 years). Security logs are kept short term (up to 30 days) and then deleted or anonymised.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent (withdrawal does not affect the lawfulness of processing before it). Submit requests to [email protected]; we may verify your identity to protect your data.
7. Right to complain
You may lodge a complaint with the supervisory authority: Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, e-mail: [email protected], website: www.ip-rs.si.
8. Automated decision-making
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
9. Cookies
The site uses no tracking, analytics or advertising cookies. Details on the Cookies page.
10. Changes
We may update this policy due to changes in our services or the law. The latest published version with the stated effective date applies.