Skip to main content

Privacy Policy

Effective: July 14, 2026

This site is intentionally light on data. No analytics, no tracking pixels, no advertising cookies — just what's needed to run the site and answer you when you reach out. Here's the full picture.

1. Who is responsible (controller)

Tomi Šeregi
Ljubljana, Slovenia
Email: info@tomiseregi.si

2. What I process, and why

Contact form. When you send a message, I receive your name, email address, company (if provided), and your message. I use these solely to respond to your inquiry and, where relevant, to prepare a proposal. Legal basis: Art. 6(1)(b) GDPR (taking steps at your request prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest in handling business correspondence).

Booking a call. Scheduling runs through Cal.com. When you book, Cal.com collects your name, email address and selected time to create the meeting, and I receive those details as the meeting host. Legal basis: Art. 6(1)(b) GDPR. Cal.com's own privacy policy applies to their pages: https://cal.com/privacy

Email. If you email me directly, I process your address and the contents of your message to handle our correspondence. Legal basis: Art. 6(1)(b) and 6(1)(f) GDPR.

Hosting and technical data. This site is delivered through Cloudflare. To serve and protect it, Cloudflare processes technical data such as your IP address, browser information and request logs. Legal basis: Art. 6(1)(f) GDPR — operating a secure, reliable website.

Cookies. A functional first-party session cookie stores your theme and language preference for up to seven days. There are no analytics, tracking or advertising cookies — which is also why you don't see a cookie banner.

3. Who receives data

Cloudflare, Inc. (hosting, CDN, security), Cloudflare Email Routing (delivery of contact-form messages), and Cal.com, Inc. (scheduling — only if you book a call). I don't sell your data, and there is no advertising on this site.

4. Transfers outside the EU/EEA

Some of the providers above are US companies. Where data leaves the EU/EEA, transfers rely on the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses.

5. How long I keep data

Inquiry data is kept as long as needed to handle your request; if no business relationship follows, I delete it within 12 months. If we do work together, contract-related data is kept for the retention periods required by Slovenian tax and accounting law. Technical logs are retained short-term under the providers' standard settings.

6. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability, and to object to processing based on legitimate interest. Write to info@tomiseregi.si. You can also lodge a complaint with the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec, www.ip-rs.si) or your local EU supervisory authority.

7. No profiling

No automated decision-making or profiling takes place on this site.

8. Changes

I'll update this policy when the site or its tooling changes; the current version is always available on this page.