Privacy policy
Effective from 30 September 2026
We care about protecting your personal data. This policy explains which data we collect when you use our website or contact us, why we need it and what rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).
1. Data controller
Avtovleka Horvat, avtovleka in druge storitve, d.o.o.
Murska ulica 125, Krog, 9000 Murska Sobota, Slovenia
Registration number: 9836551000, VAT ID: SI38489368
E-mail: info@avtovleka-horvat.com, phone: +386 41 70 50 70
2. What data we process and why
Contact form and e-mail. When you write to us through the form, we process your name, e-mail address, phone number (if you provide it) and the content of your message. We use this data only to reply to your enquiry and, where applicable, to carry out the service you order. The legal basis is taking steps prior to entering into a contract or performing a contract (Article 6(1)(b) GDPR) and our legitimate interest in replying to the messages we receive (point (f)).
Phone calls. When you call us, we use your phone number and the information you give us (for example the location of your vehicle) to carry out the recovery or transport.
Protection against misuse. To prevent unwanted messages (spam), we temporarily store your IP address when you submit the form. The legal basis is our legitimate interest in running the website securely (point (f)).
Technical data. The server hosting the website automatically logs technical data on every visit (IP address, time of visit, page visited, browser type). This data is needed for the website to run securely and reliably and is not used to identify visitors.
3. How long we keep data
We keep messages from the contact form and e-mails for as long as needed to handle your enquiry or to carry out and invoice the service. Data we are required to keep by law (for example accounting records) is kept for as long as the law requires. The IP address stored to protect the form against misuse is deleted automatically after one hour.
4. Who we share data with
We do not sell your data or share it with third parties for advertising. Our contracted processors, the provider hosting our website (NeoServ, Slovenia) and our e-mail provider, may access the data to the extent necessary for their work. Messages sent to info@avtovleka-horvat.com or through the contact form are forwarded to our mailbox at Gmail (Google). This may involve a transfer of data to the United States; Google participates in the EU-U.S. Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection.
When we carry out a service on behalf of an insurer or an assistance service, we share with them the data needed to carry out and invoice the service.
5. Cookies and third-party content
Our website does not use cookies for analytics, tracking or advertising. Your display preferences (such as the light or dark theme) are stored only in your browser. The gallery editing page uses a strictly necessary session cookie intended only for logged-in administrators.
The page shows a map image stored on our own server (data © OpenStreetMap contributors), so visiting the page does not send your data to third parties. The interactive map from Google Maps (Google Ireland Limited) only loads when you click "Show interactive map". Your browser then connects to Google's servers, so Google receives your IP address and may use cookies. The same applies if you open Google Maps with the "Get directions" button. You can read more in Google's privacy policy.
6. Your rights
With regard to your personal data, you have the right to:
- access your data and receive a copy of it,
- have inaccurate data corrected,
- have your data erased (the "right to be forgotten"),
- restrict processing,
- object to processing based on legitimate interest,
- data portability.
To exercise your rights, write to us at info@avtovleka-horvat.com. We will reply within one month at the latest.
If you believe we process your data in breach of the law, you can lodge a complaint with the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si, or with the data protection authority in your own country.
7. Changes to this policy
We may update this policy from time to time, for example when the website or the law changes. The current version is always published on this page, together with its effective date.