Contact

Privacy Policy

This privacy policy explains how VPL, proizvodnja, trgovina in storitve, d.o.o. (hereinafter: the company or we) processes personal data when you visit our website, use contact forms and other communication channels available online. We are committed to lawful, fair and transparent processing and to protecting your privacy in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Slovenian data protection legislation.

Who is the data controller?
The data controller is:

VPL, proizvodnja, trgovina in storitve, d.o.o.
Dunajska cesta 281
1000 Ljubljana
Slovenia

Email for data protection enquiries: info@vpl.si

What types of data do we process?
The scope of processing depends on how you use the website:

  • Technical and communication data when visiting the website: e.g. date and time of visit, IP address (possibly in shortened or anonymised form), browser type and version, operating system, browser language, referrer URL, page load time and data on loading errors. This data is usually necessary to ensure the security, stability and proper functioning of the website.
  • Data you voluntarily provide via forms: e.g. first and last name, company name, email address, phone number and the content of your message or enquiry.
  • Data arising from communication with us: e.g. the content of correspondence you send by email or other channels, where necessary to respond to your enquiry.

We do not collect special categories of personal data (e.g. health data) unless you voluntarily provide them and this is necessary to handle your enquiry.

Legal bases for processing
We process personal data on one or more of the following legal bases:

  • Performance of a contract or steps prior to entering into a contract (Article 6(1)(b) GDPR), where processing is necessary to prepare an offer or fulfil an order.
  • Legitimate interest (Article 6(1)(f) GDPR), e.g. to ensure IT system security, prevent misuse, improve website performance and analyse visits, where our interests do not override your interests and rights.
  • Consent (Article 6(1)(a) GDPR), where required by law, e.g. for certain cookies or marketing communication where consent is required.
  • Legal obligation (Article 6(1)(c) GDPR), where the law requires retention or disclosure of data to competent authorities.

Purpose of processing
We process your data in particular to:

  • ensure the operation, security and availability of the website;
  • respond to enquiries, questions and requests sent via forms or email;
  • prepare offers and communicate regarding our services;
  • improve user experience and website content (in anonymised or aggregated form where possible);
  • fulfil legal obligations and handle any legal claims.

Cookies and similar technologies
We may use cookies and similar technologies on the website. A more detailed description of cookie types, purposes and management options is available on the Cookies page. Options for setting consent preferences are also described there.

Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as permitted by law. Technical logs are usually kept for a shorter period (e.g. a few days to a few months), depending on security needs and system configuration. Data from contact forms is retained for as long as necessary to handle the enquiry and any subsequent correspondence, unless the law requires longer retention.

Disclosure of data to third parties
We do not sell data. We may disclose data to external service providers who perform services for us, such as website hosting, IT system maintenance or communication support, and only to the extent necessary to carry out those tasks, and on the basis of appropriate data processing agreements where required by law. We may also be obliged to disclose data to competent state authorities where required by law.

Transfers to third countries
If the use of certain tools involves transfer of data outside the European Economic Area, we ensure appropriate safeguards in accordance with the GDPR (e.g. standard contractual clauses), unless exceptions apply under the law.

Your rights
In relation to the processing of your personal data, you have among others the right to:

  • access your data and information about processing;
  • rectification of inaccurate data or completion of incomplete data;
  • erasure ("right to be forgotten"), where the legal conditions are met;
  • restriction of processing, where the legal conditions are met;
  • data portability, where processing was based on consent or a contract and is carried out by automated means;
  • object to processing based on legitimate interest;
  • withdraw consent, where processing was based on consent, without affecting the lawfulness of processing before withdrawal.

You also have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia if you believe that processing violates data protection regulations.

How to exercise your rights
To exercise your rights or for questions regarding this policy, contact us at info@vpl.si. Please provide sufficient information for identification to facilitate handling (do not send sensitive data that is not necessary).

Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction. However, no electronic communication is completely secure; please exercise appropriate caution when submitting sensitive information.

Changes to this policy
We may update this privacy policy from time to time to reflect changes in our procedures or legislation. The updated version is always published on this page. For significant changes, we may also notify you in another appropriate manner where reasonable. The date of the last update is stated below.

Last updated: August 12, 2026