Privacy policy

1. Data controller

The controller is [LEGAL COMPANY NAME — COMPLETE], trading under the RAZVI-TO brand. The registered address, registration and tax numbers, privacy contact and legal representative must be inserted before publication.

Questions about personal data will be received through the verified privacy contact rendered from the website’s business settings.

2. Information we collect

We collect information you provide through the contact form, configurator, secure draft or quote response, together with limited technical data needed for security and operation.

• name, company, email address, optional phone number and preferred contact method
• the structured project brief, budget context, timing, references, notes and selected preferences
• private files you choose to upload
• consent records, language, visit source and campaign parameters where available
• security records such as request time, limited device and network data, and events involving secure links

3. Purpose and lawful basis

Contact and project information is used to answer questions, prepare a quote and take steps at your request before a possible contract. Data needed to secure the service, prevent abuse and retain appropriate business records may be processed on the basis of legitimate interests, subject to legal confirmation before launch.

If marketing messages are introduced, they will rely on a separate, optional and unchecked consent. Refusing that consent will not affect an enquiry.

4. Processors and recipients

Contracted providers may process limited data for hosting, private file storage, email delivery, security monitoring or technical support. The actual providers, processing locations and safeguards must be listed once production infrastructure is selected.

We do not sell personal data. Transfers outside the European Economic Area may occur only with an appropriate legal basis and safeguards.

5. Retention

A draft stored through a secure email link expires by default. Submitted enquiries, quotes, communications and accounting records are kept only as long as required for the stated purpose and applicable legal obligations.

Before launch, specific retention periods must be documented for each category, including unsuccessful enquiries, uploaded files, logs and email records.

6. Private assets and secure links

Uploaded files are not published. They are stored under generated private keys and made available only to authorised people through temporary controlled access.

Resume and quote links contain strong, unpredictable tokens. Treat those links as confidential and contact us if you believe one has reached the wrong person.

7. Your rights

Depending on applicable law, you may request access, correction, erasure, restriction or portability, and object to certain processing. Consent can be withdrawn at any time without affecting earlier lawful processing.

Send requests to the verified privacy contact. Reasonable identity checks may be required. You may also complain to the Slovenian Information Commissioner or another competent supervisory authority.

8. Cookies and local storage

Essential technologies support secure sessions, form protection, language choices and the local configurator draft. The cookie policy contains further detail. Non-essential analytics or marketing technologies must not run without an appropriate legal basis and choice mechanism.

9. Security and policy changes

Organisational and technical controls include restricted access, private storage, secure sessions, input validation and expiring links. No system can promise absolute security.

This policy will be updated when actual processing or legal requirements change. The published version must show an effective date and retain an appropriate record of significant changes.