LAST UPDATED 11 SEPTEMBER 2026
Privacy notice
Controller
PROGRAMER, ALEŠ KOVAČIČ, s.p., Žibernik 33, 3250 Rogaška Slatina, Slovenia; VAT ID SI18565441; ales@aleskovacic.com.
Data and purposes
When you email or order, I process the contact and business details you provide, the brief, correspondence, billing and VAT details, payment status and the delivered files. The purposes are answering enquiries and taking pre-contract steps, performing and administering the contract, invoicing and tax compliance, preventing abuse, securing the service and handling legal claims.
Legal bases
The bases are GDPR Article 6(1)(b) for pre-contract steps and the contract, Article 6(1)(c) for accounting and tax duties, and Article 6(1)(f) for proportionate security, abuse prevention and legal claims. I do not use enquiry or order data for unsolicited marketing and do not make solely automated decisions about customers.
Website and payment providers
This page adds no analytics or marketing cookies and has no contact form. Bunny.net provides hosting and may process technical request data such as IP address, time, URL and browser information for delivery and security. Clicking the Stripe button opens Stripe, which processes checkout, tax and payment data under its own notices. Proton provides email service. I do not receive or store full card numbers.
Recipients and transfers
Data is available only where needed to the service providers above, professional accounting or legal advisers, and public authorities when legally required. Some providers may process data outside the EEA using an adequacy decision or other safeguards recognised by GDPR. See Stripe privacy, Proton privacy and Bunny privacy.
Retention
Enquiries that do not become an order are normally deleted 12 months after the last contact. Contract, invoice and tax records are retained for the statutory period, normally 10 years where Slovenian tax rules require it. Project files are deleted or returned when no longer needed for delivery, support or legal claims. Provider security logs follow the provider’s documented retention and legal duties.
Your rights
Subject to the conditions in GDPR, you may request access, correction, erasure, restriction, portability or object to processing based on legitimate interests. Write to the controller email above. You may complain to the Information Commissioner of the Republic of Slovenia. The EDPB rights overview explains these rights.
Required data
Contact details and the task brief are needed to answer or perform the request. Business, billing and tax data are needed to take payment and issue a correct invoice. Without them, I may be unable to accept the order.