Privacy Policy

1. Who is responsible

The controller is NUMODEV d.o.o., Barjanska cesta 70, 1000 Ljubljana, Slovenia, registration number 7368879000. For any privacy question, write to info@numodev.com.

Data protection officer: not appointed. The company does not carry out large-scale monitoring or process special categories of data, so Art. 37 GDPR does not require one; write to info@numodev.com with any privacy question.

2. What we collect

• Data you give us in a form: name, email address, and whatever you write about your project, including any budget and timing you mention. Optionally a phone number or company name if you provide one.
• Data from email or calls: the content of your correspondence with us and the contact details it carries.
• Technical data: IP address, browser and device type, referring page, and the pages you view. Where analytics are enabled with your consent, this includes a pseudonymous identifier.
• Preferences stored in your browser: language, colour theme and your cookie decision.

3. Why we use it, and on what legal basis

We use personal data only for the purposes below.

• To answer your enquiry and prepare a proposal — necessary to take steps at your request before entering a contract (Art. 6(1)(b) GDPR).
• To perform an agreed project and to administer it — performance of a contract (Art. 6(1)(b)).
• To keep the site secure, prevent abuse and maintain records of our business — our legitimate interest (Art. 6(1)(f)).
• To measure how the site is used through analytics cookies — your consent (Art. 6(1)(a)), which you may withdraw at any time.
• To meet accounting, tax and statutory retention duties — legal obligation (Art. 6(1)(c)).

4. Cookies

The site sets essential cookies and local storage entries that are required for it to work: your language, your theme and your cookie decision. Analytics and marketing cookies are only set after you consent through the cookie banner. See the Cookie Policy for details and for how to change your choice.

5. Who we share data with

We do not sell personal data. We share it only with:

• service providers acting on our instructions as processors — hosting, email, form delivery, analytics and project tools (Amazon Web Services (hosting in the EU and delivery of contact-form email), Namecheap Private Email (mailboxes), Google Ireland Limited (Google Analytics, only where you consented to analytics cookies)) — each bound by a data processing agreement;
• professional advisers (accountants, lawyers, auditors) where necessary;
• public authorities where we are legally required to disclose.

6. Transfers outside the EEA

Some providers may process data outside the European Economic Area. Where that happens we rely on an adequacy decision of the European Commission or on Standard Contractual Clauses together with any additional safeguards required. You may request a copy of the safeguards used by writing to us.

7. How long we keep it

• Enquiries that do not lead to a project: up to 12 months from our last exchange, then deleted.
• Client project records and correspondence: for the duration of the engagement and 5 years afterwards, to defend legal claims.
• Accounting documents: 10 years, as required by Slovenian tax law.
• Analytics data: 14 months, or until you withdraw consent.
• Server logs: 30 days.

8. Your rights

Under the GDPR you may ask us to:

• confirm whether we process your data and give you a copy (access);
• correct data that is wrong or incomplete (rectification);
• delete your data where there is no overriding reason to keep it (erasure);
• restrict processing, or object to processing based on our legitimate interest;
• transfer data you gave us to another controller in a machine-readable format (portability);
• withdraw consent at any time, without affecting processing that already took place.

Write to info@numodev.com and we will respond within one month. If you are not satisfied you may complain to the Slovenian Information Commissioner (Informacijski pooblaščenec, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si) or to the supervisory authority where you live.

9. Security

We use encryption in transit, access control on a need-to-know basis, logging, and vetted providers. No system is perfectly secure, but we keep measures under review and will notify you and the supervisory authority of a breach where the law requires it.

10. Children

The site is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe we have, write to us and we will delete it.

11. Changes

We may update this policy. The date at the top shows the current version; material changes will be flagged on this page.