Privacy Policy.

1. Data controller

The controller of your personal data is:

For any questions about the processing of personal data or the exercise of your rights, you may contact us at any time using the details above.

2. What data we collect

Depending on your interaction with us, we process the following categories of data:

• Contact details that you provide yourself — first and last name, email address, telephone number, company name and the content of your message.
• Business engagement data — information generated while preparing a quote or delivering a service.
• Technical data about your use of the site — IP address, device and browser type, and data collected through cookies (see our cookie policy).

We do not deliberately collect special categories of personal data (for example data concerning health or beliefs), and we ask that you do not provide them to us.

3. Purposes and legal bases for processing

We process personal data only for clearly defined purposes and on an appropriate legal basis:

• Responding to enquiries and communication — on the basis of your consent or steps taken prior to entering into a contract.
• Delivering services and performing the contract — on the basis of the contract or the carrying out of pre-contractual measures.
• Record-keeping, accounting and compliance with statutory obligations — on the basis of a legal obligation.
• Analytics and improvement of the website — on the basis of your consent or our legitimate interest in the secure and effective operation of the site.

4. Cookies and web analytics

The website uses cookies for its proper functioning and — with your consent — to analyse usage. Details about the types of cookies and how to manage your consent are described in our cookie policy.

5. Data sharing and processors

We do not sell personal data. To operate the site and deliver our services we work with carefully selected external providers (contracted processors), who process the data solely on our instructions and on the basis of a data processing agreement. These include, in particular, providers of:

• website hosting and delivery,
• email and communication tools,
• web analytics,
• accounting and legal services.

We may also disclose data to the competent authorities where required of us by law. An up-to-date list of processors is available on request at info@m-point.si.

6. Transfers to third countries

Where a given processor processes data outside the European Economic Area, we ensure appropriate safeguards in accordance with the GDPR — as a rule, the standard contractual clauses approved by the European Commission.

7. Data retention

We retain personal data only for as long as is necessary for the purpose for which it was collected, or for as long as required by applicable regulations (for example accounting legislation). Once the purpose ceases and there is no other legal basis for retention, we erase or anonymise the data.

8. Your rights

Under the GDPR you have the following rights in relation to your personal data:

• the right to access the data and to obtain a copy of it,
• the right to rectification of inaccurate or incomplete data,
• the right to erasure (the “right to be forgotten”),
• the right to restriction of processing,
• the right to data portability,
• the right to object to processing based on legitimate interest,
• the right to withdraw consent where processing is based on consent (withdrawal does not affect the lawfulness of processing carried out before the withdrawal).

You may exercise these rights by sending a request to info@m-point.si. We will respond without undue delay, and within one month at the latest.

9. Data security

We implement appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. Even so, no transmission of data over the internet can be fully secured, and we therefore cannot guarantee absolute security.

10. Changes to this policy

We may update this privacy policy from time to time owing to changes in legislation or in our procedures. The version in force at any given time is published on this page together with the stated date of the last update.

11. Contact and complaints

For all privacy-related questions, write to us at info@m-point.si. If you believe that we are infringing the regulations in processing your personal data, you have the right to lodge a complaint with the supervisory authority — the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec Republike Slovenije) (www.ip-rs.si).