This privacy policy explains which personal data we process when you visit ventus.si or write to us, for what purpose, on what legal basis, to whom we disclose it and how long we keep it. We process data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Slovenian Personal Data Protection Act (ZVOP-2).
Controller
VENTUS, servis in vzdrževanje klimatizacije, d.o.o. (Ventus d.o.o.)
Koprska ulica 94, SI-1000 Ljubljana, Slovenia
Registration number: 6136818000
VAT ID: SI88264459
Legal representatives: Janez Oblak and Boštjan Zalar, directors
E-mail: info@ventus.si
Phone: +386 8 205 71 70, mobile: +386 51 358 100
Data protection at Ventus is the responsibility of Janez Oblak, director, who can be reached at info@ventus.si or at the address above. We have not appointed a data protection officer because we are not required to (Article 37 GDPR and Article 45 ZVOP-2).
Who this website is for
The website is intended for companies, building owners and facility managers. It is not intended for children; we do not knowingly collect personal data of persons under 15. If we find that we have received such data, we delete it.
Overview
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Replying to your message (form, e-mail, phone) and any business cooperation that follows | name, company, e-mail, phone, type of request, message, language and address of the page you wrote from | legitimate interests (Article 6(1)(f) GDPR); where you are yourself the prospective contracting party, also steps prior to entering into a contract (Article 6(1)(b)) | business correspondence in our mailbox, see “Retention” |
| Protecting the form from abuse (Cloudflare Turnstile) | IP address, technical data about your browser and connection | legitimate interests (Article 6(1)(f)) | at Cloudflare, see “Protecting the form from abuse” |
| Secure operation of the form’s server program | IP address, time, requested address, browser details | legitimate interests (Article 6(1)(f)) | technical logs at Cloudflare for 3 days, 7 days from 1 December 2026 |
| Visitor statistics (GoatCounter), only if you allow them | address and title of the page, address of the page you came from, screen width; IP address and browser details only temporarily for counting | consent (Article 6(1)(a) GDPR and Article 225 ZEKom-2) | IP address and browser details in memory for up to 8 hours; only totals without personal data are stored, see “Visitor statistics” |
| Delivering the website (hosting by GitHub) | IP address and technical access data | legitimate interests (Article 6(1)(f)) | we do not keep this data; GitHub processes it as an independent controller, see “Hosting” |
Contact form
The contact form is on the Contact page. You enter your name, company (optional), e-mail address, phone number (optional), type of request and message. The language of the page and the address of the page you wrote from are sent with your message so that we can reply in the right language and on the right topic. We only collect the data we need to reply.
Purpose: replying to your question or enquiry, preparing a quotation and any business cooperation that follows.
Legal basis: our legitimate interest in answering business questions and enquiries and communicating with (prospective) business partners (Article 6(1)(f) GDPR). Where you write to us as a prospective contracting party yourself (for example as a sole trader), the processing is also based on steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).
How your message travels: the website does not store submitted messages in a database. When you submit the form, it is sent to a small server program at Cloudflare, Inc. (Cloudflare Workers), which checks your input and the Turnstile protection and forwards the message; it does not store it. The e-mail sending service Resend (Plus Five Five, Inc.) delivers the message as an e-mail to our address info@ventus.si. Resend keeps data about sent messages (content and sending log) for 30 days on servers in the United States. Our mailbox is hosted on Microsoft 365, with the data stored in the EU.
Messages from the form and e-mails to info@ventus.si are read only by the three members of our team who handle enquiries. We do not copy them into other systems and we do not use your data for marketing (for example to send offers or news you did not ask for).
Contacting us directly by e-mail or phone
If you write to info@ventus.si or call us, we process your data (name, contact details and the content of your message) in order to reply. The purpose, legal basis and retention are the same as for the contact form.
Retention
We keep messages from the form and e-mails in our mailbox as business correspondence for as long as necessary to handle your enquiry, for any business cooperation that follows and to establish, exercise or defend legal claims. We have no fixed period after which they are deleted automatically.
You can request deletion at any time at info@ventus.si. We will comply unless we have to keep the data because of a legal obligation (for example invoices and other accounting records) or to establish, exercise or defend legal claims; in that case we will explain why.
The providers that help us keep data for a shorter time: Resend for 30 days, Cloudflare keeps technical logs of the form’s server program for 3 days, and for 7 days from 1 December 2026.
Protecting the form from abuse
To protect the form against spam and automated messages, we use Cloudflare Turnstile, which checks whether the form is being sent by a person. Turnstile is loaded only when you click into the form; before that, no connection is made to Cloudflare. During the check, Cloudflare processes your IP address and technical data about your connection and browser (for example the TLS fingerprint and browser type) and writes the item cf.turnstile.u to your browser’s local storage (for challenges.cloudflare.com). It does not set cookies and does not read the content of the form. See the Cookies page.
Legal basis: our legitimate interest in protecting the form from abuse (Article 6(1)(f) GDPR).
Cloudflare acts as our processor for this. It also uses the data from the check itself, as an independent controller, to improve its bot detection. See Cloudflare’s Turnstile privacy addendum.
Turnstile automatically assesses whether the form is being sent by a person. If the check fails, you can write to us directly at info@ventus.si.
Visitor statistics
With your consent, we count visits to the website to see how many visitors we have per month and per year, which pages are visited most and where visitors come from. On your first visit we ask you with a slim bar at the bottom of the page. Until you choose “Sure”, the counting script is not loaded and nothing about your visit is sent.
Legal basis: your consent (Article 6(1)(a) GDPR; for access to information on your device, Article 225 ZEKom-2). Consent is voluntary; if you do not give it, you can use the website in the same way. You can withdraw your consent at any time with the “Cookie settings” button in the footer; withdrawal takes effect immediately and does not affect the lawfulness of processing before it.
What data: each time you view a page, your browser sends the address and title of the page, the address of the page you came from and your screen width. The service also receives your IP address and browser details (the User-Agent header), from which it determines the browser and system type, language and country. It keeps the IP address and browser details only in memory, for up to 8 hours, so that the same visit is not counted more than once; it does not write them to its database. Only hourly and daily totals are stored (for example “10 visits to the Services page from Slovenia”), which cannot be linked to each other or to you. The service sets no cookies and stores nothing in your browser; your choice is remembered by our website (see Cookies).
Who processes it: the GoatCounter service (goatcounter.com), operated by Martin Tournoij in Ireland, as our processor. The data is on servers of Hetzner Online GmbH in Finland and Germany and is not transferred outside the EU. We host the counting script on our own website, so no connection is made to GoatCounter before you give consent.
Retention: we keep the totals for as long as we use the service. Because they do not show who visited the website, we cannot link them to you and therefore cannot delete them for an individual (Article 11 GDPR).
Hosting
The website is hosted by GitHub, Inc. (GitHub Pages). Each visit involves processing technical access data (IP address, time of access, requested page and browser details) that is needed to deliver the website. The legal basis is our legitimate interest in delivering the website reliably and securely (Article 6(1)(f) GDPR). GitHub logs and stores visitors’ IP addresses for its own security purposes. GitHub processes this data as an independent controller under its privacy statement and does not publish a specific retention period. We have no access to this data.
When you submit the contact form, the same technical data is processed by the form’s server program at Cloudflare (see above).
What we do not use
The website does not use social media plugins, embedded YouTube videos or maps, and there is no advertising. We measure visits only with your consent (see “Visitor statistics”); we do not use tools such as Google Analytics. Fonts, all images and the visit counting script are stored on our own website, so no requests are made to other providers’ servers when you visit. We do not carry out automated decision-making within the meaning of Article 22 GDPR, including profiling.
Recipients and transfers outside the EU
The following processors help us process your data:
- Cloudflare, Inc. (USA) – the contact form’s server program and Turnstile protection,
- Plus Five Five, Inc. (Resend, USA) – delivering contact form messages to info@ventus.si,
- Microsoft Ireland Operations Ltd. (Microsoft 365) – the info@ventus.si mailbox,
- GoatCounter (Martin Tournoij, Ireland) – visitor statistics, only with your consent; the data stays in the EU.
With Cloudflare, Resend and Microsoft, a data processing agreement is part of their terms of service. GitHub, Inc. (hosting, see above) and Cloudflare (to improve its bot detection) also receive data as independent controllers. The website does not use a database, so there is no database provider.
Cloudflare, Resend and GitHub are based in the United States; Resend stores data in the United States. Transfers are based on the European Commission’s adequacy decision for the EU-US Data Privacy Framework (Implementing Decision (EU) 2023/1795), under which all three companies are certified, and for Cloudflare and Resend also on the standard contractual clauses (Implementing Decision (EU) 2021/914) included in the data processing agreements. We will send you a copy of these safeguards on request at info@ventus.si. Data in the Microsoft 365 mailbox is stored in the EU.
Your rights
Under the GDPR you have the right to:
- access your personal data and obtain a copy,
- have inaccurate data corrected,
- have your data erased,
- restrict processing,
- data portability, where the processing is based on consent, a contract or steps prior to entering into one,
- object (see below),
- withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal (for visitor statistics, with the “Cookie settings” button in the footer).
Right to object: where we process your data on the basis of legitimate interests (Article 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Article 21 GDPR). Send your objection to info@ventus.si. We will then stop processing your data unless we demonstrate compelling legitimate grounds that override your interests or need the data to establish, exercise or defend legal claims.
How to exercise your rights
Send your request to info@ventus.si or by post to Ventus d.o.o., Koprska ulica 94, SI-1000 Ljubljana, Slovenia. Tell us what you would like (for example a copy of your data or erasure) and the e-mail address or phone number you used to contact us, so that we can find your data. If we cannot reliably confirm that the request comes from you, we will ask for additional confirmation.
We respond without undue delay and at the latest within one month of receiving the request. For complex or numerous requests, this period may be extended by up to two further months; we will inform you of this within the first month and give the reasons (Article 12 GDPR). Exercising your rights is free of charge.
Complaints
If you believe that we process your data unlawfully, you can lodge a complaint with the supervisory authority:
Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, Slovenia
Phone: +386 1 230 97 30, e-mail: gp.ip@ip-rs.si, www.ip-rs.si
Do you have to provide your data?
Providing data is not a statutory or contractual requirement. However, without your name, e-mail address and message we cannot reply to your enquiry. Company and phone number are optional.
Changes to this policy
We may update this privacy policy, for example when our services or providers change. The current version is always published on this page; the date of the last update is shown above.