Introduction
At SWEET HOUSE d.o.o. (registration no. 8242658000, tax no. SI 60349468), we respect your privacy. This policy explains how we handle your data in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and the Slovenian Personal Data Protection Act (ZVOP-2).
What data we collect
- Name and email address (when you contact us via form)
- Phone number (optional)
- The message you send us
- IP address and website usage data
- Anonymous visit statistics (without cookies)
Legal basis for processing
- Consent (Art. 6(1)(a) GDPR) — when you submit the contact form, you explicitly consent to the processing of your data for the purpose of handling your inquiry
- Legitimate interest (Art. 6(1)(f) GDPR) — for anonymous visit analytics (Plausible Analytics), which does not process personal data
Why we collect data
- To respond to your inquiries
- To improve our website
- To fulfill legal obligations
Cookies
Our website does not use tracking cookies. For analytics, we use Plausible Analytics, which is GDPR-compliant and does not require cookie consent.
Data processing and third-country transfers
We use Resend (resend.com) for sending emails, which operates in compliance with GDPR. Your data is processed on servers in the EU. We use Vercel Inc. (vercel.com, headquartered in the USA) for website hosting. Data transfers to the USA are based on Standard Contractual Clauses (SCC) in accordance with Art. 46(2)(c) GDPR. We do not share your data with third parties for marketing purposes.
Your rights
Under GDPR, you have the right to access, rectify, delete, restrict processing, port your personal data, and withdraw consent. To exercise these rights, contact us at [email protected].
Right to lodge a complaint
If you believe the processing of your personal data infringes GDPR, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (www.ip-rs.si).
Data retention
Contact form data is retained for 12 months from the last contact. After this period, it is deleted. Anonymous analytics data is retained for 24 months.
Data security
We use appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or destruction.
Contact
For privacy questions, contact us at [email protected].
Legal framework
Data processing is based on the General Data Protection Regulation (GDPR, EU 2016/679) and the Slovenian Personal Data Protection Act (ZVOP-2).