Privacy policy

This policy explains what personal data we process, why and on what legal basis, who has access to it, how long we keep it and what rights you have. It is issued under Regulation (EU) 2016/679 (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2, Official Gazette RS no. 163/22).

The data controller is:

• Full name: Dejavnost oglaševalskih agencij, Mirko Tomić, Alra, s.p.
• Short name: Mirko Tomić - ALRA, s.p. ("Alra")
• Registered address: Stolnik 12C, 1242 Stahovica, Slovenia
• Registration number: 7352018000
• Tax number: 31830242
• Contact email: hello@alra.si

This website does not use cookies. We use no tracking, advertising or profiling cookies, which is why there is no consent banner.

When you move a calculator result into the contact form, your browser keeps it in session storage (sessionStorage) so it stays in the form on another page. It is deleted when you send the form or close the tab, and it never leaves your device. We store nothing else in your browser.

We measure traffic with Vercel Web Analytics (Vercel Inc., USA). It works without cookies and without persistent identifiers, counts visits in aggregate and cannot identify an individual or track them across websites. We measure page views and a few on-page events, such as button clicks, calculator use and form submissions.

Legal basis: our legitimate interest in understanding how the site is used and improving it (Art. 6(1)(f) GDPR).

Our hosting provider (Vercel) automatically records technical access data such as IP address, browser type and time of access. These logs are used for security, abuse detection and troubleshooting, on the basis of legitimate interest (Art. 6(1)(f) GDPR), and are deleted automatically after a short period.

When you submit the form on the website, we process:

• your email address,
• your message, if you write one,
• the page and language you sent it from, and the time of submission,
• campaign tags from the link (such as utm_campaign), if you came to the site through one of our emails or posts.

To run the site and handle enquiries we work with the following processors, under data processing agreements:

• Vercel Inc. (USA): website hosting, processing of the submitted form and traffic analytics.
• Brevo (Sendinblue SAS, France): customer management system (CRM) and email delivery. Data is processed in the EU.
• Google Ireland Limited (Google Workspace, Ireland): business email, including enquiry notifications. Data may also be processed outside the EU.

For services such as database reactivation, a client provides us with personal data of their own contacts. In that case:

• the client is the controller of that data and Alra is a processor within the meaning of Art. 28 GDPR,
• before any processing we conclude a data processing agreement with the client,
• we process the data only to deliver the ordered service and on the client's instructions,
• when the cooperation ends we return or delete the data, as the client requires.

We do not sell personal data or share it for advertising. We share it only with the processors listed here, to the extent each purpose requires, and with competent authorities where the law requires it.

We keep data only as long as the purpose requires, or until statutory periods expire.

• Enquiries that did not lead to a cooperation: up to 12 months from the last contact.
• Client data: for the duration of the cooperation and until limitation periods for any claims expire.
• Invoices: 10 years after the end of the year they relate to, as required by tax law.
• Data processed on the basis of consent: until withdrawn, and at most 2 years after the cooperation ends.

You have the right to:

• access your data and information about its processing,
• rectification of inaccurate or completion of incomplete data,
• erasure ("right to be forgotten") where we no longer need the data or have no legal basis for it,
• restriction of processing,
• data portability in a structured, machine-readable format,
• object to processing based on legitimate interest, and to direct marketing at any time,
• withdraw consent, without affecting processing carried out before withdrawal.

If you believe we are processing your personal data unlawfully, please write to us first at hello@alra.si so we can try to resolve it directly.

You can also lodge a complaint at any time with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana (www.ip-rs.si).

We protect data with technical and organisational measures such as encrypted transfer, access limited to authorised people and contracts with our processors. No system on the internet is completely secure, so please don't send us sensitive data through the form, such as health information.

We don't make decisions based solely on automated processing of data from this site that have legal or similarly significant effects on you. We don't build advertising profiles.

This site and our services are meant for businesses. We don't knowingly collect personal data from children. If you believe we have received some, write to us and we will delete it.

We may update this policy, for example when our processors change. The current version and its effective date are always published on this page. Matters not covered by this policy are governed by the law of the Republic of Slovenia and the European Union.