The data controller and provider of Digitala services is HVD d.o.o., Pohorska ulica 21a, 2000 Maribor, Slovenia. I, Asja Štampar Goričnik, manage this website and handle inquiries on behalf of the company. For questions about your data, email asja@digitala.si.
When you send an inquiry
I process your name, email address, selected services and message. If you provide them, I also process your company name, phone number, profile or website link and approximate budget. I use these details to reply, prepare a quote and discuss working together. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). Replies to general questions are based on the legitimate interest in business communication (Article 6(1)(f)).
The form forwards your message to asja@digitala.si over an encrypted SMTP connection. Your email address is used as the reply address. Your name, email address, phone number and message are not sent to analytics or advertising tools. Sending an inquiry does not subscribe you to a newsletter.
Form security and abuse prevention
The form validates input, submission timing and a security token, and limits repeated attempts. Temporary security records contain hashed identifiers and timestamps; the application does not store raw IP addresses or message content in these records. A necessary session identifier supports secure submission. The legal basis is the legitimate interest in website security and availability.
The hosting provider keeps technical logs for operation, troubleshooting and server security. These may include IP addresses and requested paths. They are retained as needed for these purposes and any security incident, under the hosting provider’s rules. Form security records are cleaned automatically and do not contain inquiry text.
Hosting and recipients
Hitrost.com provides web and email hosting. The contact form uses mail.digitala.si with that provider. I access inquiries on behalf of HVD d.o.o. The hosting and email provider may access data as necessary to provide those services. Inquiry data is not sold.
Analytics and advertising
With your analytics consent, Google Analytics 4 measures page visits and actions such as viewing a service, clicking a contact button, starting the form and successfully submitting an inquiry. With separate marketing consent, Google Ads measures whether an ad click led to an accepted inquiry. Google Tag Manager manages these tags. Measurement tags and requests remain blocked until you give the relevant consent.
When measurement is permitted, Google may receive technical browser and device details, an IP address as part of the network connection, a cleaned page path, events and cookie or ad-click identifiers. Your name, email address, phone number and form message are not sent to these services. Google Signals, enhanced conversions using user-provided data and automatic form tracking are disabled. Meta Pixel loads only with marketing consent. It measures page visits (PageView) and successfully accepted inquiries (Lead) to assess Facebook and Instagram ads. Meta Platforms Ireland Limited receives technical connection details, visit data and browser or ad-click identifiers. Automatic advanced matching, automatic event detection and the Conversions API are disabled. Names, email addresses, phone numbers and form contents are not sent to Meta. Fonts remain hosted on this server.
Optional measurement relies on your consent (Article 6(1)(a) GDPR). You can change your choice using . Rejecting optional measurement does not affect access to content or the inquiry form. See the cookie policy for more about purposes and storage.
How long data is kept
If an inquiry does not lead to a working relationship, I delete it no later than six months after the last contact. If we work together, data needed to perform the contract, comply with legal obligations or establish, exercise or defend legal claims is kept for as long as those purposes require. Backups are not used routinely; data is removed through the normal backup overwrite cycle, and previous deletion requests are respected if a backup is restored.
Your rights
You may request access, correction, deletion, restriction of processing and, where the conditions apply, data portability. You may object to processing based on legitimate interests. You may withdraw consent at any time; this does not affect the lawfulness of processing before withdrawal.
Send requests to asja@digitala.si. You also have the right to complain to the Information Commissioner of the Republic of Slovenia.
Transfers and policy changes
For permitted measurement, the provider is Google Ireland Limited, Ireland. Processing may also involve Google LLC and other Google group companies, including outside the European Economic Area. Google uses applicable transfer safeguards, including the EU–US Data Privacy Framework where applicable and standard contractual clauses. See Google’s privacy policy and data transfer frameworks.
Updated on 8 October 2026. This policy will be updated when the processing changes.
For consented marketing measurement, Meta Platforms Ireland Limited is also a recipient. Data may be processed outside the EEA. See Meta’s privacy policy for transfer safeguards and your rights.