Privacy Policy

What data we collect

• Contact form data: name, email, chosen area and message content.
• Technical server data: IP address, browser type and access time (server logs).
• Payment data (course deposit, donation) is processed directly by external payment providers and the bank; we do not store card details.

Purposes and legal basis

Form data is processed to answer your inquiry (consent / legitimate interest in communication). Technical logs are kept for security and operation (legitimate interest). Payment data is processed to complete the payment and meet legal obligations.

Data sharing

We do not sell your data. We share it only with providers needed to operate (hosting, email, payment providers and the bank), and where required by law.

Retention

We keep data only as long as necessary for the purpose or as required by law (e.g. accounting). After that it is deleted or anonymised.

Your rights

• Access, rectification, erasure and restriction of processing.
• Data portability and objection to processing.
• Withdraw consent at any time (without affecting prior processing).
• Lodge a complaint with the Slovenian Information Commissioner (ip-rs.si).

International transfers

If a provider processes data outside the EU/EEA, we ensure appropriate safeguards in line with the GDPR.