Privacy Policy

1. Data controller

• CARRUM d.o.o.
• Bravničarjeva ulica 13, 1000 Ljubljana, Slovenia
• Registration number: 8837180000
• VAT ID: SI73494151
• Email: info@carrum.si

2. What data we collect

• Contact data you send us by email (name, email address, company, and the content of your message).
• Business data required for contracts and invoicing (company details, billing address, tax number).
• Technical data automatically processed when you visit this website (IP address, browser type, pages visited), used for security and to keep the site running.

3. Why we process it

• To answer enquiries and prepare offers — legitimate interest / pre-contractual steps.
• To perform contracts and deliver our services — performance of a contract.
• To meet accounting and tax obligations — legal obligation.
• To keep the website secure and functional — legitimate interest.

4. Cookies

This website uses only technically necessary cookies and local storage required for the site to work. We do not use advertising or cross-site tracking cookies. If we introduce analytics in the future, we will ask for your consent first.

5. Sharing your data

We do not sell personal data. We share it only with processors that help us operate — such as hosting, email and accounting providers — under data processing agreements, and with public authorities where required by law. Where data is transferred outside the EU/EEA, we rely on Standard Contractual Clauses or an adequacy decision.

6. Retention

Enquiry correspondence is kept for up to 2 years, contractual documentation for the duration of the relationship plus the statutory limitation period, and invoices and accounting records for 10 years as required by Slovenian law. Server logs are kept for up to 12 months.

7. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time. To exercise your rights, write to info@carrum.si. You may also lodge a complaint with the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec).

8. Security

We apply appropriate technical and organisational measures — encrypted transport, access control, and the principle of least privilege — to protect personal data against unauthorised access, loss or misuse.

9. Changes

We may update this policy from time to time. The current version is always published on this page with its last-updated date. See also our Terms & Conditions.