Privacy policy
Last updated:
1. Controller and contact
The controller is EUDOM, družba za energetsko svetovanje, d.o.o., Koroška cesta 61 A, 2360 Radlje ob Dravi, Slovenia, company number 6558453000, tax number 44901780 and VAT ID SI44901780 (EUDOM). For privacy questions, email pisarna.eudom@gmail.com.
2. Direct contact by email or telephone
The public website has no contact form. When you email or call us, we process the information you provide, such as your name, contact details, organisation and message. We use it to respond, provide requested information, take steps before a possible contract and continue business communication.
The legal basis is taking steps at your request before entering into a contract or performing a contract (Article 6(1)(b) GDPR) where the message concerns a contractual relationship. For other business questions, the basis is EUDOM’s legitimate interest in answering messages and conducting business communication (Article 6(1)(f) GDPR). Where the law requires business records to be retained, the basis is compliance with a legal obligation (Article 6(1)(c) GDPR).
Providing information is voluntary, but without return contact details or sufficient context we may be unable to respond. Do not send passwords, special-category personal data or confidential documents that are unnecessary for the initial contact.
3. Technical logs and security
When you access the website, server, network and security infrastructure may process your IP address, request time, requested address, response status, browser information and referrer. This supports secure and reliable delivery, error diagnosis and abuse prevention. The legal basis is the legitimate interest in protecting the website and information systems (Article 6(1)(f) GDPR).
Operational logs are technically bounded by rotation based on file size and file count. Retention is therefore not a fixed number of days; it depends on traffic volume and the need to investigate a security event. Information is not kept longer than necessary for these purposes or legal claims.
4. Browser settings
The website uses no analytics or advertising cookies and displays no consent banner. Your theme and language may be stored only in your browser’s local storage under eudom:theme and eudom:lang. These preferences are not sent to EUDOM. You can delete them in your browser’s site-data or storage settings.
5. Google Fonts
To display the Mulish typeface, the browser obtains files from Google Fonts when a page opens. It connects to fonts.googleapis.com and fonts.gstatic.com and sends data required for the network request, including the IP address and browser technical information. According to Google’s own information, Google Fonts does not set cookies for these requests.
EUDOM uses the external font for a consistent, readable and efficient presentation. The proposed legal basis is legitimate interest (Article 6(1)(f) GDPR). You may object on grounds relating to your particular situation. See the Google Privacy Policy for more information.
6. Google Maps only after a click
The embedded map does not load when the page opens. A notice appears first, and Google Maps is obtained only after you choose “Load Google Maps”. By clicking, you expressly request the external content; your browser then connects to Google and sends the IP address and other technical request data. The map is not required to use the contact details. The external “Get directions” link also takes you to Google Maps.
7. Machine-readable public interfaces
EUDOM may also provide published content through a read-only content API and MCP and A2A protocols. These interfaces perform deterministic searches of published data and do not generate answers with a generative model. OAuth client registration and use process the client name, permitted redirect addresses, technical identifiers and ordinary security logs. An access token lasts no more than one hour, an authorisation code no more than five minutes, and a signed client registration no more than one year. The interfaces cannot submit enquiries or make automated decisions about individuals.
8. Users and recipients
Information is processed by authorised EUDOM personnel and contracted providers where needed to provide the service: hosting and system-support providers, Cloudflare for network connectivity, security and delivery, the actual business-email provider for messages sent to the published address, and Google for Google Fonts or, after your click, Google Maps. We do not sell personal data.
Providers outside the European Economic Area may involve transfers to third countries. Such transfers must rely on a valid adequacy decision or other appropriate safeguards, such as Standard Contractual Clauses. You may request information about the mechanism used for a particular provider from the controller.
9. Retention periods
we keep contact correspondence until communication ends and afterwards only if it forms part of contractual or legally required records or is needed to establish, exercise or defend legal claims;
contractual, accounting and other mandatory records are kept for periods required by applicable law;
technical logs follow the criteria in section 3;
local theme and language preferences remain in your browser until you delete them;
OAuth data follows the maximum periods in section 7.
10. Your rights
Subject to the GDPR, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. If you believe processing is unlawful, you may complain to the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana. Exercising your rights does not affect the lawfulness of earlier processing and is free unless the GDPR permits a charge.
11. Automated decision-making
EUDOM does not use the information described in this notice for profiling or automated decisions that produce legal or similarly significant effects.