Privacy Policy

Last updated: 6 August 2026

This Privacy Policy explains how personal data is processed when you visit this website, submit a contact enquiry or communicate in relation to a potential hospitality collaboration.

1. Data Controller

The primary controller of personal data collected through this website and its contact form is:

TRENUTEK ZA OKUS gostinske storitve d.o.o.
Kuzma 92
9263 Kuzma
Slovenia

Registration number: 8817987000
VAT ID: SI28346483
Registered with: District Court in Murska Sobota
Contact: ales.padovnik@dc-lj.eu

The website presents the professional services of Aleš Padovnik under the public brand Aleš Padovnik — Hospitality Culture & Performance Advisor.

2. Personal Data We Collect

When you submit the contact form, the following information may be collected:

• Name

• Business or organisation

• Email address

• City and country

• Preferred communication language

• Market or country of engagement

• Business or project stage

• Desired outcome

• Message and any information included in it

• Confirmation that you have read this Privacy Policy

If communication continues, we may also process correspondence, meeting notes, proposal information, project requirements and other information that you voluntarily provide.

The website’s hosting and security services may process limited technical information, such as IP address, browser or device information, timestamps and security-related request data, where necessary to deliver and protect the website.

Please do not include sensitive personal data or special-category personal data in the contact form unless it is genuinely necessary and has been specifically requested.

3. Purposes and Legal Bases

Responding to enquiries and evaluating potential collaboration

We use the information you provide to understand your enquiry, communicate with you, assess whether the proposed collaboration is suitable and, where relevant, prepare a proposal or agreement.

The legal basis is taking steps at your request before entering into a contract under Article 6(1)(b) GDPR.

Where you contact us on behalf of a company or organisation and Article 6(1)(b) does not directly apply to you, processing is based on the legitimate interest in responding to business enquiries and developing professional relationships under Article 6(1)(f) GDPR.

Operating and protecting the website

Limited technical information may be processed to deliver the website, maintain security, prevent abuse, diagnose technical problems and protect the website and its users.

The legal basis is the legitimate interest in maintaining a secure and functional website under Article 6(1)(f) GDPR.

Legal, accounting and contractual obligations

Where an enquiry results in a proposal, agreement or collaboration, relevant information may be processed to fulfil contractual, accounting, tax and other legal obligations.

The legal bases are Article 6(1)(b) and Article 6(1)(c) GDPR.

Establishing, exercising or defending legal claims

Relevant information may be retained where reasonably necessary to document communications, resolve disputes or establish, exercise or defend legal claims.

The legal basis is the legitimate interest in protecting legal and commercial interests under Article 6(1)(f) GDPR.

The privacy checkbox in the contact form confirms that you have read this Privacy Policy. It is not consent to receive newsletters, advertising or other promotional communications.

The website does not currently operate a newsletter or use contact-form information for unsolicited marketing.

4. Possible Contracting Entity

Initial enquiries submitted through this website are processed by TRENUTEK ZA OKUS gostinske storitve d.o.o.

Depending on the location and scope of the engagement, the place of performance and the applicable commercial, legal and tax requirements, services may instead be proposed, contracted and invoiced through:

AIA d.o.o. za turističke usluge
Ulica Augusta Harambašića 49
10123 Zagreb
Croatia

OIB: 69388751454
MBS: 080456567
Registered with: Commercial Court in Zagreb

Where AIA d.o.o. is a relevant potential contracting entity, the information reasonably necessary to evaluate the enquiry, communicate with you and prepare a proposal or agreement may be shared with AIA d.o.o.

In that situation, AIA d.o.o. may process the relevant information as an independent controller for its own prospective or concluded contractual relationship.

The legal entity responsible for a proposed or confirmed engagement will be clearly identified during communication and in the applicable proposal, order confirmation or agreement.

5. Recipients and Service Providers

Personal data may be disclosed only where reasonably necessary to:

• Framer B.V., which provides website hosting, form functionality, security, spam protection and privacy-focused website analytics

• Email-hosting, communication and cloud-service providers used to receive and manage enquiries, including Google where Gmail services are used

• AIA d.o.o., where it is relevant to the potential engagement

• Accountants, legal advisers, IT professionals or other professional service providers bound by appropriate confidentiality obligations

• Public authorities, courts or regulators where disclosure is required by law or necessary to protect legal rights

Personal data is not sold to advertisers or data brokers.

6. International Data Transfers

Some website, email, cloud or technical service providers may process data outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, the transfer will be based on an applicable adequacy decision, the European Commission’s Standard Contractual Clauses or another legally recognised safeguard.

Further information about safeguards applicable to a particular transfer may be requested at ales.padovnik@dc-lj.eu.

7. Data Retention

Enquiries that do not result in a collaboration will generally be retained for no longer than 24 months after the last substantive communication.

Clearly irrelevant, duplicate or unsolicited messages may be deleted sooner.

Where an enquiry results in a proposal, agreement or collaboration, relevant personal data and business records may be retained for the duration of the relationship and for any additional period required by applicable contractual, accounting, tax or other legal obligations.

Information required to establish, exercise or defend legal claims may be retained for the duration of the relevant limitation period.

8. Required and Optional Information

Name, Email, Message and acknowledgement of this Privacy Policy are required to submit the contact form.

Other form fields are optional and help provide context for the enquiry.

Without the required information, the form cannot be submitted and the enquiry cannot be answered through the form.

9. Analytics and Cookies

This website currently uses only Framer’s built-in privacy-focused analytics.

Framer Analytics does not use cookies or persistent visitor identifiers and is designed to provide aggregated information such as page views, traffic sources, countries and device categories without identifying individual visitors.

The website does not currently use Google Analytics, Meta Pixel, LinkedIn Insight Tag or other third-party marketing trackers.

For this reason, the website does not currently place a consent banner for non-essential analytics or marketing cookies.

If tracking services that require consent are introduced in the future, this Privacy Policy will be updated and an appropriate consent mechanism will be implemented before those services are activated.

10. Your Rights

Subject to the conditions and limitations of applicable data-protection law, you may have the right to:

• Obtain information about the processing of your personal data

• Request access to your personal data

• Request correction of inaccurate or incomplete data

• Request erasure of personal data

• Request restriction of processing

• Object to processing based on legitimate interests

• Receive personal data in a portable format where the legal requirements apply

• Withdraw consent at any time where processing is based on consent

• Lodge a complaint with a competent supervisory authority

These rights are not absolute and may be limited where continued processing is required or permitted by law.

To exercise a right or ask a privacy-related question, contact:

ales.padovnik@dc-lj.eu

Reasonable information may be requested to verify your identity before responding to a request.

11. Supervisory Authority

You have the right to lodge a complaint with the competent data-protection authority.

For the primary controller in Slovenia:

Information Commissioner of the Republic of Slovenia
Dunajska cesta 22
1000 Ljubljana
Slovenia
Email: gp.ip@ip-rs.si

Where AIA d.o.o. acts as an independent controller, you may also contact:

Croatian Personal Data Protection Agency
Ulica Metela Ožegovića 16
10000 Zagreb
Croatia
Email: azop@azop.hr

12. Automated Decision-Making

Personal data submitted through this website is not used for automated decision-making or profiling that produces legal or similarly significant effects.

Enquiries are reviewed by a person.

13. Security

Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

No internet transmission or storage system can be guaranteed to be completely secure. Please avoid including unnecessary confidential or sensitive information in the initial enquiry.

14. Changes to This Privacy Policy

This Privacy Policy may be updated when website functionality, service providers, legal requirements or data-processing practices change.

The current version and its last-updated date will remain available on this page.