Who we are
Controller: Nathan Jacques Petain s.p., Štihova ulica 13, 1000 Ljubljana, Slovenia, tax no. 94472637. Contact for questions about personal data: [email protected], +386 51 226 881.
What data, why, and on what basis
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| You are our client or its contact person | name, role, business email and phone, correspondence | concluding and performing the contract, communication | contract (6(1)(b)) or legitimate interest for company contacts (6(1)(f)) |
| We invoice you | name, address, tax number, amounts, payments | invoicing and tax obligations | legal obligation (6(1)(c)) |
| You sign a document | name, email, signature, time and IP address of signing | electronic signing of contracts | contract (6(1)(b)) |
| We have an online meeting | name, email, recording and minutes of the conversation | recording agreements and tasks | legitimate interest (6(1)(f)); we tell you when recording starts and you can object |
| We contact you as a prospective business partner | name, role, company, business email, LinkedIn profile | first business contact | legitimate interest (6(1)(f)) |
Our website (webfast.si)
Statistics without cookies (everyone). We measure how the site is used with Umami, which runs on our own server in the EU (Google Cloud, Belgium) behind Cloudflare. We don't set cookies for this and don't store your IP address: it is used only to look up the country and city, then discarded. Visits are told apart by an identifier that changes every day, so we can't follow you from one day to the next. We record which pages you view, where you came from (website, campaign link), device type, browser, language and screen size, how far you scroll, which sections you see and which buttons you click, and how fast the pages load. Legal basis: our legitimate interest in understanding which content helps visitors and improving the site (6(1)(f)). You can object at any time by writing to us.
Heatmaps and session recordings (only if you click "Accept"). With your consent we also record where on a page you click and scroll, and a recording of your visit (page changes, mouse movements, clicks). Text you type into form fields is always hidden. Legal basis: your consent (6(1)(a) GDPR, Article 225 ZEKom-2, § 25 TDDDG). If you click "Decline", nothing of this is recorded. You can change your choice at any time under "Privacy settings" at the bottom of every page.
Your choice is saved in your browser's local storage so the banner doesn't come back on every page. The site itself is delivered by Vercel and Cloudflare, which process your IP address to send you the pages. The "Book a call" button leads to Google Calendar, where Google's terms apply.
Retention: session recordings 90 days, raw heatmap clicks 180 days, anonymous visit summaries in our business system 90 days. Aggregated daily and weekly statistics (counts without any identifier) are kept for as long as they are useful.
Where the data comes from
Mostly from you. For a first business contact we take it from public sources (company website, LinkedIn) or from the Apollo.io business contact database.
Who receives it
We don't sell data. Only providers of our infrastructure and tools process it: Google (server in the EU, business email, Google Cloud hosting in Belgium), Cloudflare (secure access, website delivery), Vercel (website hosting) and Fathom (meeting minutes) under a data processing agreement, and Anthropic (the Claude AI assistant, with no use of data for model training) under its own terms. Some of them are in the US; transfers rely on standard contractual clauses or the EU-US Data Privacy Framework. Accounting and tax data goes to the authorities when they ask for it.
How long we keep it
- Client and contact person data: 3 years after the work ends.
- Invoices and contracts: 10 years, as the law requires.
- Meeting recordings: 12 months; minutes until the project ends plus 3 years.
- Prospective partners we never worked with: 2 years from the last contact.
Your rights
You have the right of access, correction, erasure, restriction and portability, and the right to object to processing based on legitimate interest. You can object to direct marketing at any time: a short reply is enough and we won't contact you again. Write to [email protected]; we reply within one month at the latest.
You can complain to the Information Commissioner of Slovenia, Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si.
We don't use automated decision-making or profiling with legal effects.