Menu

Privacy policy

This Privacy Policy explains how CBT svetovanje d.o.o. processes personal data of visitors to the website www.cbt.si and individuals who submit an inquiry or contact us through the website.


Data controller

The data controller is:

CBT svetovanje d.o.o.
Spodnja Slivnica 152
1290 Grosuplje
Slovenia

Phone: +386 (0)31 736 649
E-mail: info@cbt.si
Website: www.cbt.si

For any questions regarding personal data protection, you can contact us at: info@cbt.si.


Personal data we process

When you use the website, we may process the following categories of personal data:

Data you provide through the contact form or inquiry form:

  • first name,

  • last name,

  • e-mail address,

  • telephone number,

  • inquiry topic,

  • message content,

  • any other information you voluntarily include in your message.

Technical and analytics data:

  • data about the use of the website,

  • IP address or a shortened or otherwise processed form of the IP address, where supported by the tool settings,

  • device, browser and operating system data,

  • traffic source data,

  • data related to cookies and similar technologies,

  • data about interactions with advertisements, where the user has given the relevant consent.


Purposes of processing

We process personal data for the following purposes:

  1. Handling inquiries and communication with users
    We use the data submitted through the form to prepare a response, communicate with you and handle your specific inquiry.

  2. Preparing an offer or carrying out pre-contractual activities
    If your inquiry relates to potential cooperation, we use your data to prepare a response, an offer or other pre-contractual activities.

  3. Website operation and security
    Certain technical data may be processed to ensure the operation, security and stability of the website and to prevent misuse.

  4. Website analytics
    We may use Google Analytics to analyse visits to and use of the website, understand which content is useful to visitors and improve the user experience.

  5. Advertising and measuring advertising performance
    The website may be advertised through Google Ads. For this purpose, and where the user has given the relevant consent, data about visits and interactions may be shared with Google to measure advertising performance and support related advertising functions.


Legal bases for processing

We process personal data on the following legal bases:

  • performance of pre-contractual measures or a contract, where you submit an inquiry with the purpose of receiving an offer or entering into cooperation;

  • legitimate interest, where we process data for communication, website security, evidence of communication and basic business organisation;

  • consent, where we use optional analytics or marketing cookies and technologies, such as Google Analytics and Google Ads;

  • compliance with legal obligations, where certain data must be retained for accounting, tax or other statutory purposes.


Contact form and storage of inquiries

When you submit an inquiry through the form, your personal data is stored in the website system and/or database and used to handle your specific inquiry.

We retain the data for as long as necessary to handle the inquiry and related communication. If the inquiry does not lead to business cooperation, the data is generally retained for no longer than 36 months after the communication has ended, unless another legal basis exists for a longer retention period.

If business cooperation is established, the data may be retained in accordance with applicable contractual, tax, accounting and other legal requirements.


Cookies

Cookies are small text files that a website stores on your device. They may be used for the basic operation of the website, improving the user experience, analytics and advertising.

On this website, we use CookieYes, which enables the display of a cookie notice and the management of user consents. Through CookieYes, users can accept, reject or customise the use of optional cookies.

Necessary cookies required for the operation of the website may be used without separate consent. Analytics and marketing cookies are used only where the user has given the relevant consent through CookieYes.


Google Analytics and Google Ads

We may use Google Analytics to analyse website traffic and Google Ads for advertising and measuring the effectiveness of advertising campaigns.

When these services are used, data may be shared with Google Ireland Limited and/or affiliated Google companies. Processing for analytics and advertising purposes is carried out on the basis of your consent, which you can manage through CookieYes.

More information on how Google uses data is available in Google’s privacy policies and terms of use.


Recipients and processors of personal data

We do not sell your personal data.

We may disclose or provide access to personal data only where necessary for the operation of the website, handling inquiries, using digital tools or complying with legal obligations. This may include:

  • the website hosting provider,

  • the website maintenance or development provider,

  • the provider of the form and database system,

  • CookieYes,

  • analytics and advertising service providers, such as Google Analytics and Google Ads,

  • accounting, legal or other professional advisers, where necessary,

  • competent authorities, where required by law.

Where required, we regulate our relationships with personal data processors through appropriate data processing agreements.


Transfers of data to third countries

Some digital service providers, in particular Google, may process personal data outside the European Economic Area. In such cases, appropriate safeguards are used in accordance with applicable law, such as standard contractual clauses or other valid mechanisms for lawful international transfers of personal data.


Security of personal data

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, complete security of data transmission over the internet cannot be guaranteed. We therefore recommend that users do not submit sensitive personal data or confidential information through the forms unless it is necessary for handling the inquiry.


Your rights

In accordance with applicable data protection law, you have the following rights regarding your personal data:

  • the right of access,

  • the right to rectification of inaccurate or incomplete data,

  • the right to erasure,

  • the right to restriction of processing,

  • the right to object to processing,

  • the right to data portability,

  • the right to withdraw consent where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

You can exercise your rights by contacting us at info@cbt.si. Where necessary to verify your identity, we may ask you to provide additional information.


Complaint to the supervisory authority

If you believe that we process your personal data contrary to applicable law, you have the right to lodge a complaint with the competent supervisory authority:

Information Commissioner of the Republic of Slovenia
Dunajska cesta 22
1000 Ljubljana
Slovenia
E-mail: gp.ip@ip-rs.si
Website: www.ip-rs.si


Changes to this Privacy Policy

We may update this Privacy Policy from time to time due to changes to the website, technologies used, business processes or legal requirements. The current version will always be published on this page.

Last updated: 01.06.2026