Privacy Policy

Your privacy matters to us. This policy explains what personal data we collect, why we collect it, how we handle it, and what rights you have under the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and the Slovenian Personal Data Protection Act (ZVOP-2).

1. Data Controller

For any questions about the processing of your personal data or to exercise your rights, you may contact us at any time at the email address above.

2. What Personal Data We Collect

a) Contact form data

When you write to us via the contact form or by email, we process the data you provide yourself:

• first and last name,
• email address,
• the content of your message.

The contact form on our site opens your own email client and sends the message to info@knaravi.si. Your message is therefore received directly by email.

b) Technical data (server logs)

For the purpose of operating and securing the site, our web hosting provider may automatically log technical data such as your IP address, browser type, and the date and time of access. This data is processed on the basis of our legitimate interest in ensuring the secure operation of the website.

c) Cookies

The website uses cookies, as described in the Cookies section.

3. Purposes and Legal Bases for Processing

• Responding to your enquiry – processing is based on your consent and/or on steps taken prior to entering into membership (GDPR Art. 6(1)(a) and (b)).
• Operation and security of the website – based on the controller's legitimate interest (GDPR Art. 6(1)(f)).
• Compliance with legal obligations – where required by applicable law (GDPR Art. 6(1)(c)).

4. Data Retention Period

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected:

• messages from the contact form are retained until the communication is concluded, or for a maximum of 2 years, unless the law requires longer retention;
• technical server logs are retained in accordance with the hosting provider's policy (typically up to a few months).

Once the retention period has expired, we delete or anonymise the data.

5. Disclosure to Third Parties

We do not sell your personal data and do not disclose it to third parties for marketing purposes. To operate the website, we work with trusted processors who process data solely on our instructions:

• Web hosting provider – hosting the website and server logs.
• Formspree (Formspree, Inc.) – forwarding messages from the contact form to our email.
• Google reCAPTCHA v3 – protects the form against spam; runs invisibly in the background, with no image puzzles.

Some of these providers (e.g. Formspree and Google) may process personal data in the United States, subject to appropriate safeguards (standard contractual clauses or the EU–US Data Privacy Framework).

6. Your Rights (GDPR)

Under the GDPR and ZVOP-2, you have the following rights regarding your personal data:

• the right of access – to information on which of your data we process;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure ("the right to be forgotten");
• the right to restriction of processing;
• the right to data portability;
• the right to object to processing;
• the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, write to us at info@knaravi.si. We will respond to your request within one month at the latest.

7. Cookies

Cookies are small text files stored in your browser that enable the basic functioning of the site and improve the user experience. On your first visit we ask for your consent and let you choose which types of cookies to allow:

• Strictly necessary – required for the site to function; these cannot be disabled.
• Analytics – help us understand how the site is used (used only with your consent).
• Functional – enable additional features and personalisation (used only with your consent).

You can change your choice at any time in your browser settings, where you can also delete cookies.

8. Data Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. Nevertheless, no transmission of data over the internet is completely secure, so we cannot guarantee absolute security.

9. Changes to This Privacy Policy

We may update this policy from time to time. Any change will be published on this page, stating the date of the last update. We recommend checking this page periodically.

10. Contact

For any questions regarding this privacy policy or the protection of personal data, please write to us at info@knaravi.si.