LEGAL

Privacy Policy

We explain clearly which personal data we process, why we need it, how long we retain it and which rights you have.

Updated 24 September 2026 GDPR · ZVOP-2

We take privacy seriously.

This document describes the processing of personal data relating to visitors of futuro.si, prospective and existing clients and other individuals who communicate with us in a business context.

Data controller

The controller of personal data processed through the FUTURO website and in our business communications is INITIO, spletne storitve d.o.o.

For questions concerning privacy, personal data processing or the exercise of your rights, contact us at [email protected].

INITIO, spletne storitve d.o.o. Brnčičeva ulica 13 SI-1231 Ljubljana – Črnuče Slovenia
Tax number 80515142
Registration number 6156142000

Personal data we process

The scope of personal data depends on how you interact with us and which services you use.

  • contact information such as your name, email address and telephone number when you provide it;
  • company, job title or organisational role information where relevant to business communication;
  • the content of enquiries, project briefs, messages and other communications;
  • information required to prepare a proposal, enter into and perform a contractual relationship;
  • technical information generated when using the website, such as IP address, access time, requested URL, browser type and server log information;
  • information concerning your cookie choices or preferences where optional cookies are used.

Enquiries and business communication

If you contact us through a website form, email or another communication channel, we use the information to process your message, prepare a response or proposal and continue relevant business communication.

Please do not submit special categories of personal data or other sensitive information through our contact channels unless it is genuinely necessary for your request.

Technical data and server logs

During normal use of the website, our servers may automatically record a limited set of technical information required for operation, diagnostics and system security.

This information is primarily used to maintain service stability, identify errors, prevent abuse and protect infrastructure. We do not use it to make automated decisions about individuals.

Cookies and usage measurement

The website may use strictly necessary cookies required for core functionality, security and the storage of privacy preferences.

Where optional analytics or similar technologies are used, they are activated only on an appropriate legal basis and after consent where consent is required.

You can change your preferences at any time through the cookie settings available on the website.

Recipients and processors

Access to personal data is limited to people and service providers who need the information to perform a specific task or provide a service.

For website operation and business activities we may use hosting and infrastructure providers, email providers, security services, business systems and other technical service providers. Where they act as processors, they process personal data on our instructions and subject to appropriate contractual obligations.

We do not sell personal data.

Transfers outside the European Economic Area

The use of certain technology providers may in some cases involve processing or transfer of personal data outside the European Economic Area.

Where this occurs, appropriate safeguards required by European data protection law are used, such as an adequacy decision, Standard Contractual Clauses or another valid transfer mechanism.

Retention periods

We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as required by applicable law.

  • enquiry and business communication data is retained for as long as reasonably necessary to handle the communication and protect legitimate business interests and possible legal claims;
  • contractual and accounting records are retained for the periods required by tax, accounting and other applicable legislation;
  • technical and security logs are retained for a limited period required for system protection, diagnostics and investigation of potential incidents;
  • data processed on the basis of consent is processed until consent is withdrawn or the relevant purpose ends, unless the law requires otherwise.

Data security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

Measures include access restrictions, appropriate infrastructure management, security updates, backups, access controls and other safeguards proportionate to the risks of the relevant processing.

Your rights

Under the GDPR, depending on the circumstances of the relevant processing, you may request information about the processing of your personal data and exercise the rights available to you under applicable law.

  • the right of access to your personal data;
  • the right to rectification of inaccurate or incomplete data;
  • the right to erasure where the legal conditions are met;
  • the right to restriction of processing;
  • the right to data portability where the applicable conditions are met;
  • the right to object to processing based on legitimate interests;
  • the right to withdraw consent where processing is based on consent;
  • the right to lodge a complaint with the competent supervisory authority.

Exercising your rights and complaints

Requests concerning your personal data may be sent to [email protected]. To protect personal data, we may request additional information necessary to verify the identity of the person making the request.

If you believe that the processing of your personal data does not comply with applicable data protection law, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia.

Information Commissioner of the Republic of Slovenia

Changes to this policy

We may update this policy from time to time to reflect changes to our services, technology, processing activities or applicable legislation.

The current version is always published on this page. The date of the latest update is shown at the top of the document.

PRIVACY

A question about your personal data?

For questions about personal data processing or to exercise your rights, contact us directly.

[email protected]