Privacy Policy
This Privacy Policy explains how Adriaing d.o.o. collects, uses and protects the personal data of people who contact us or apply for a job through our website www.adriaing.si. We handle your data in accordance with the EU General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).
Who we are
The controller of your personal data is Adriaing d.o.o., Ankaranska cesta 7, 6000 Koper, Slovenia.
Registration number: 5520401000 · VAT ID: SI48474410.
For any questions about this policy or your personal data, contact us at info@adriaing.si or by phone at +386 5 630 08 20.
What data we collect
We only collect the data you choose to provide, plus limited technical data needed to run the website securely. We do not require you to create an account, and we do not track you across other websites.
- Contact form — your name, email address, phone number, chosen subject and the message you write.
- Job applications — your name, email address, phone number, cover letter (optional) and the CV file you upload.
- Technical data — standard server logs (IP address, browser type, pages visited) generated automatically by our hosting provider for security and to keep the site running.
Why we use it and legal basis
| Data | Purpose | Legal basis |
|---|---|---|
| Contact form data | To answer your enquiry and communicate with you | Consent / steps prior to a contract (Art. 6(1)(a), (b) GDPR) |
| Job application data | To assess your application and run the recruitment process | Steps prior to a contract / consent (Art. 6(1)(b), (a) GDPR) |
| Technical / log data | To keep the website secure, stable and available | Legitimate interest (Art. 6(1)(f) GDPR) |
Third-party data processors
We share your data only with service providers who help us operate the website and communicate with you. Each acts as our processor under a data processing agreement and may only use your data on our instructions.
| Processor | Purpose | Location | Transfer |
|---|---|---|---|
| Vercel Inc. | Website hosting and delivery | USA / EU | Standard Contractual Clauses |
| Resend, Inc. | Delivering contact and job-application emails to us | USA | Standard Contractual Clauses |
| Sanity AS | Content management (project and job listings) | EU / USA | Standard Contractual Clauses |
| Google Ireland Ltd. | Embedded map on the Contact page (Google Maps) | EU / USA | Standard Contractual Clauses |
We never sell your personal data and we do not share it for advertising purposes.
International data transfers
Some of our processors are based outside the European Economic Area (EEA). Where that is the case, the transfer is protected by the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR), which contractually oblige the recipient to protect your data to EU standards.
Legal obligations and disclosures
We may retain, process or disclose your personal data where this is necessary to comply with a legal obligation, to respond to lawful requests from public authorities or courts, or to establish, exercise or defend legal claims. In such cases we disclose only the data strictly required and inform you where we are legally permitted to do so.
How long we keep your data
| Data | Retention period |
|---|---|
| Contact enquiries | For as long as needed to handle your enquiry, then up to 1 year |
| Job applications | For the duration of the selection process, then deleted — or kept up to 6 months with your consent for future openings |
| Server logs | Typically up to 30 days, unless needed longer to investigate a security incident |
Cookies and local storage
Our website uses only one small piece of storage, and it is strictly necessary:
| Name | Type | Purpose | Expiry |
|---|---|---|---|
| cookie-consent (localStorage) | Strictly necessary | Remembers whether you accepted or rejected optional cookies, so we don't ask again | Until you clear it |
We do not currently use analytics, advertising or tracking cookies. The embedded Google Map on our Contact page may set its own cookies when loaded; you can avoid these by not opening that page. If we add analytics in the future, it will only run after you give consent through the cookie banner.
You can withdraw or change your cookie choice at any time by clearing your browser's site data. Withdrawing consent does not affect the lawfulness of processing carried out beforehand.
Minimum age
Our website and forms are intended for business communication and job applications by adults. Under the Slovenian Personal Data Protection Act (ZVOP-2), the age of digital consent is 15. If you are younger, please do not submit personal data through the website without the involvement of a parent or guardian.
Your rights
Under the GDPR you have the following rights regarding your personal data:
- Access — obtain confirmation of, and a copy of, the data we hold about you.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — ask us to delete your data (the 'right to be forgotten').
- Restriction — ask us to limit how we use your data.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on our legitimate interests.
- Withdraw consent — where processing is based on consent, withdraw it at any time.
To exercise any of these rights, email us at info@adriaing.si. We will respond within one month.
Security
We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS), restricted access to submitted data, and reputable processors that maintain their own security standards. No method of transmission over the internet is completely secure, but we work to protect your data using industry-standard practices.
Data breaches
If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner within 72 hours and, where required, inform you without undue delay (Arts. 33–34 GDPR).
Supervisory authority
If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the Slovenian supervisory authority:
Informacijski pooblaščenec (Information Commissioner of the Republic of Slovenia), Dunajska cesta 22, 1000 Ljubljana · gp.ip@ip-rs.si · www.ip-rs.si
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated date at the top of this page and, where appropriate, communicated to you directly. Please review it periodically.