AP.SI / PRIVACY

Privacy and your data

Controller and contact

Igor Močnik
For privacy questions and rights requests: igormocnik16@gmail.com.

Inquiry form

We process your email address and message, plus your name or company if provided. We also record the selected topic, language, submission date and time, message identifier, and internal handling labels and notes. Do not include sensitive information or unnecessary data about other people.

The purpose is to consider your inquiry, reply and evaluate your proposal. The legal basis is our legitimate interest in communicating with people who contact us themselves (GDPR Article 6(1)(f)). Where specific pre-contractual steps are taken at your request, Article 6(1)(b) applies. A name is optional; email and message are needed to submit the form.

Retention

Messages and internal notes are automatically removed from this application 90 days after submission, when the application next runs after expiry. They may also be deleted earlier. Any subsequent business correspondence is handled separately according to its purpose and applicable obligations. Copies in hosting backups expire on the provider’s backup schedule, not simultaneously with deletion from the application.

Visit statistics

There are no external advertising or analytics services. The application stores daily aggregate counts of page views, clicks on the contact button, page-view languages and submitted messages. Views and clicks are sent by a browser script. This uses no cookies, local storage or browser fingerprinting and does not identify returning visitors.

Views and clicks are not recorded when your browser signals Do Not Track or Global Privacy Control. The analytics do not retain IP addresses, full referrer URLs or user-agent strings. Aggregate counts are kept for up to 400 days.

Abuse prevention and server logs

The server technically receives an IP address when you connect. To rate-limit requests, the application briefly uses a cryptographically derived IP label. It is not used for analytics or to link visits across days. Rate-limit entries and security tokens generally expire within a few hours and are removed on the next request. Raw IP addresses are not stored in the application data. The legal basis is the legitimate interest in security and abuse prevention (Article 6(1)(f)).

The hosting provider may separately keep standard access and security logs containing IP addresses. These are not part of the aggregate analytics described above. Provider, processing and retention information:
Ponudnik gostovanja in e-pošte: Humanfrog d.o.o. (Zabec.net), Dunajska 5, 1000 Ljubljana, Slovenija. Spletna stran in e-pošta gostujeta na strežniški infrastrukturi v Sloveniji; ponudnik navaja, da podatki ostajajo v EU. Pri deljenem gostovanju se varnostne kopije hranijo še do 60 dni. Rok hrambe strežniških dnevnikov ni javno naveden. Prenosi osebnih podatkov zunaj EGP pri uporabljenem gostovanju niso predvideni.

Access and recipients

The controller can access inquiries, as can the hosting provider as necessary to provide and secure the service. Messages are not published or sold. If email notifications are enabled, they contain only a notification and message identifier, not the message, sender’s name or contact email. Any reply to your inquiry is sent by email. Provider and international-transfer information is given above.

Cookies

The public website and contact form set no cookies. The separate administration area uses the essential APADMIN session cookie for authentication and form security, not advertising.

Your rights

Subject to the GDPR’s conditions, you may request access, correction, erasure or restriction, and object to processing based on legitimate interests. Data portability applies where its conditions are met. Contact the controller above. We do not make automated decisions with legal or similarly significant effects and do not profile visitors.

You may lodge a complaint with the Information Commissioner of the Republic of Slovenia: www.ip-rs.si.

ap.si · 28. 09. 2026