Introduction
Filab Digital ("we," "us," or "our") is committed to protecting the privacy and security of your personal data. This policy explains how we collect, use, and process your information when you use filabdigital.com.
This policy covers website visits, project enquiries sent through our contact form or by email, and the correspondence that follows. Client websites and applications linked in our portfolio have their own privacy notices.
Data Controller
The Data Controller responsible for your personal data is:
- Company
- FILAB DIGITAL, Blaž Poklar, s.p.
- Website
- filabdigital.com
- [email protected]
- Address
- Gažon 7c, 6274 Šmarje
Data We Collect
When you send a project enquiry, we receive the information below. If you contact us by email, we receive your email address and whatever information you include in that correspondence.
- Required: full name, email address, and project details. You must also acknowledge that you have read this Privacy Policy before submitting the form.
- Optional: company name and phone number. We use these to understand your business and, if provided, contact you about your enquiry by phone.
- Acknowledgement record: the submitted message includes confirmation that you acknowledged this policy and the server-recorded submission date and time.
- Anti-spam: a hidden website field used solely to identify automated submissions.
The required details let us understand and reply to your enquiry; the form cannot be submitted without them. Company and phone details are optional. Please do not include passwords, payment-card details, sensitive personal data, or unnecessary information about other people.
Purpose and Legal Basis
We use enquiry information to:
- Review and respond to project inquiries.
- Take requested steps before potentially entering into a contract.
- Maintain necessary business correspondence and protect the form from spam or misuse.
The legal basis is Article 6(1)(b) GDPR when processing is necessary to take steps at your request before entering into a contract. Where that basis does not apply, processing is based on our legitimate interests under Article 6(1)(f) GDPR in responding to business inquiries, maintaining correspondence, and securing the website.
The checkbox records that you have read this notice. It is not consent to marketing. We keep the acknowledgement with the enquiry under our legitimate interest in documenting how the enquiry was submitted. Where we must retain records to meet a legal obligation, Article 6(1)(c) GDPR applies.
We do not use contact-form data for marketing, automated decision-making, or profiling.
Data Retention
We retain personal data only as long as necessary for the purpose it was collected and to satisfy legal, accounting, or reporting duties.
Submitted enquiries and their acknowledgement records are delivered to our business email inbox and kept as correspondence. The contact form does not write submissions to a separate website database. These retention periods apply to our enquiry correspondence, including the optional details you provide.
- If an inquiry results in a contract, data is retained for the contract term and the period required by applicable law.
- If it does not result in a contract, data is normally deleted within one year of the last communication unless the law requires otherwise.
If sending fails, your entries remain in the open form so you can retry. Closing the form clears its entries. The website does not save form drafts in browser storage; your browser may separately offer its own autofill features. Clearing the form does not delete a message that has already been sent.
Your GDPR Rights
Subject to the conditions in the GDPR, your rights include:
- Access to copies of your personal data.
- Correction of inaccurate or incomplete information.
- Erasure of your data under applicable conditions.
- Restriction of processing and the right to object, on grounds relating to your situation, to processing based on our legitimate interests.
- Portability of data you provide where processing is automated and based on consent or a contract.
- Withdrawal of consent at any time where consent is the legal basis.
To exercise any of these rights, email [email protected].
We respond without undue delay, normally within one month. If a permitted extension is necessary, we will explain why within that month. We may ask for information needed to verify your identity before disclosing personal data.
Security of Your Data
We use appropriate technical and organisational measures to protect personal data from accidental loss, unauthorised access, alteration, or disclosure. Form submissions are transmitted using SSL/TLS encryption.
Processors and International Transfers
Contact-form messages are sent through Resend (Plus Five Five, Inc.), our email delivery processor. Resend receives your name, email address, project details, any company name and phone number provided, and the acknowledgement record with its submission timestamp. The delivered message is received by our business email provider and accessed by Filab Digital to handle your enquiry.
Resend primarily processes data in the United States. Its Data Processing Addendum provides for safeguards for EEA transfers, including the European Commission's Standard Contractual Clauses, and the use of authorised subprocessors.
Our hosting and email providers process data needed to operate the website and handle correspondence. Access is limited to those who need it for these purposes. We may also disclose necessary records to professional advisers or competent authorities where required by law or needed to establish, exercise, or defend legal claims. We do not sell your enquiry data.
You can review Resend's Data Processing Addendum and subprocessor list.
Right to Lodge a Complaint
If you believe your data-protection rights have been infringed, you may lodge a complaint with the Information Commissioner of the Republic of Slovenia or the supervisory authority in your habitual residence, place of work, or place of the alleged infringement.
- Authority
- Information Commissioner of the Republic of Slovenia
- Address
- Dunajska cesta 22, SI-1000 Ljubljana
- [email protected]
- Website
- ip-rs.si
Changes to This Policy
This policy may be updated when our practices or legal obligations change. The current version and its update date will always be published on this page.