Privacy policy

Last updated: 12 October 2026

We take the protection of your personal data seriously. This policy explains what data we collect when you visit our website or contact us, what we use it for and what rights you have.

1. Data controller

The controller of your personal data is:

For any questions about data protection, please write to info@btinox.si.

2. What data we process

Contact form and e-mail. When you write to us using the contact form, we process the data you enter: your full name, your position in the company (optional), your e-mail address and the content of your message. The same applies when you e-mail or call us directly.

Technical data when you visit. Each time you visit, our hosting provider's server automatically logs the technical data sent by your browser: IP address, date and time of access, the page visited, and your browser and operating system type. This data is needed for the website to work securely.

Google Maps. The map showing our locations only loads after you allow it in the cookie banner. Google then receives your IP address and may set cookies. See our Cookies page for details.

3. Purposes and legal bases

• Answering enquiries and preparing quotes – steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest in replying to messages we receive (Art. 6(1)(f) GDPR).
• Operation and security of the website – our legitimate interest in a reliable and secure website (Art. 6(1)(f) GDPR).
• Displaying Google Maps – your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Legal obligations – e.g. keeping business records if we start working together (Art. 6(1)(c) GDPR).

We do not use your data for automated decision-making or profiling, and we do not sell it.

4. Processors and recipients

We use the following external providers to run this website, which may process your data in doing so:

• FormSubmit (formsubmit.co) – forwards contact form messages to our e-mail address.
• Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) – Google Maps (only with your consent) and Google Fonts.
• Content delivery networks (CDN) – unpkg, cdnjs (Cloudflare) and jsDelivr, which deliver icons and scripts.
• Our website hosting provider – for server log files.

When fonts, icons and scripts load from these providers' servers, your IP address is transmitted to them, because the content cannot be delivered without it. These providers do not set cookies in the process.

5. Transfers to third countries

Some providers (e.g. Google and FormSubmit) may also process data outside the European Economic Area, in particular in the USA. Such transfers are safeguarded by a European Commission adequacy decision (EU-US Data Privacy Framework) or by standard contractual clauses.

6. How long we keep data

• We keep enquiries and correspondence for as long as needed to deal with your request, and for no more than 2 years after our last contact, unless a business relationship results from it.
• If we start working together, we keep business records for the periods required by law (e.g. accounting and tax regulations).
• The hosting provider usually keeps server log files for no more than a few weeks.

7. Your rights

Under the General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2), you have the right to:

• access your personal data,
• have inaccurate data corrected,
• have your data erased ("right to be forgotten"),
• restrict processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise your rights, write to info@btinox.si. We will reply without undue delay and within one month at the latest.

If you believe the processing of your data breaches the law, you can lodge a complaint with the supervisory authority: Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si, gp.ip@ip-rs.si.

8. Data security

We protect your data with appropriate technical and organisational measures. The website is served over an encrypted connection (HTTPS), and only authorised persons in the company have access to the messages we receive.

9. Changes to this policy

We may update this policy from time to time, for example when services on the website change. The current version is always published on this page, with the date of the last change shown at the top.