The website bortolato.si is operated by Jernej Bortolato s.p. We process personal data only for the purposes described below, in accordance with the General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).
1. Controller
Jernej Bortolato s.p., Pliskovica 18, 6221 Dutovlje, Slovenia · registration number 1236300000 · e-mail info@bortolato.si · phone +386 41 524 069.
We have not appointed a data protection officer, as this is not mandatory for the scope of our activity. For any question about personal data use the contacts above.
2. What data we process
- Enquiries and workshop bookings: full name, e-mail or phone, the content of your message, number of people, preferred date and, optionally, an attached photo or sketch.
- Live community: on visitor sign-in, your e-mail and display name (initials), your comments, likes, follows and read notifications.
- Bortolato AI assistant: the questions you type into the conversation and the answers to them. We do not ask for personal data; if you enter it yourself, we process it only to answer.
- Technical data: data your browser sends to the server automatically (IP address, browser type, time of visit), for the operation and security of the website.
3. Purposes and legal bases
- Replying to an enquiry and preparing a quote — steps prior to entering into a contract (Article 6(1)(b) GDPR).
- Booking and running a workshop — performance of a contract (Article 6(1)(b) GDPR).
- User account in the Live community — your consent given at sign-in (Article 6(1)(a) GDPR), which you can withdraw at any time by signing out or deleting the account.
- Newsletter — sent only with your explicit consent (Article 6(1)(a) GDPR); you can unsubscribe in every message.
- Operation and security of the website — our legitimate interest (Article 6(1)(f) GDPR).
We do not use data for automated decision-making or profiling.
4. Retention
Enquiries are kept until the communication is concluded and for at most 2 years afterwards; data on completed orders and workshops for as long as tax and accounting regulations require (as a rule 10 years). Live community account data is kept until the account is deleted. Assistant conversations are kept for at most 12 months. Technical logs are kept for up to 6 months.
5. Recipients and transfers
We do not sell data or pass it to third parties for marketing. Access is limited to the controller and contracted processors that provide website hosting, e-mail services and — for the Bortolato AI assistant — text processing with a language model. We have data processing agreements with them. Where processing takes place outside the EU/EEA, we ensure appropriate safeguards (standard contractual clauses).
6. Cookies and third-party content
The website uses only necessary cookies and browser local storage for the site to work: language, Live community sign-in state, follows, read notifications and display settings. This data stays in your browser and you can delete it at any time in its settings.
We do not use analytics or advertising cookies. The home page embeds a video from YouTube (youtube-nocookie.com) and links to a Google Maps map; when you use them, those providers’ rules apply.
7. Your rights
You may at any time request access to your data, its rectification, erasure or restriction of processing, object to processing based on legitimate interest, request data portability and withdraw consent (withdrawal does not affect the lawfulness of processing before it). Send your request to info@bortolato.si; we reply within one month at the latest.
If you believe the processing breaches the rules, you may lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si.
8. Changes
We update this policy as needed. The version published on this page applies; the date of the last update is shown above.