Privacy Policy

[Last updated: 3. 9. 2026]

Data Controller

This website is operated by:

Reakcija d.o.o., Cesta 27. aprila 45, 1000 Ljubljana, Slovenia.
Contact form for e-mail

Reakcija d.o.o. (“we,” “us,” or “our”) is the data controller responsible for your personal data in connection with this website, in accordance with the EU General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).

 

What Personal Data We Collect

We collect only the personal data necessary to respond to your inquiries and provide our services:

  • Contact form submissions: name, email address, and any information you choose to include in your message
  • Course bookings: name, email address, and any details relevant to organizing your course (e.g., location, preferred course topic)
  • Email correspondence: any information you provide when communicating with us directly by email

We do not use cookies, tracking pixels, or third-party advertising or analytics tools that store identifiers on your device. Any website usage statistics we collect (if applicable) are gathered through privacy-first, cookieless analytics tools that do not identify individual visitors.

We do not knowingly collect personal data from children. Our services are intended for adults.

 

Why We Process Your Data (Legal Basis)

We process your personal data on the following legal grounds under Article 6 GDPR:

  • Contract performance: to respond to your booking request and organize and deliver the photography course you’ve requested
  • Legitimate interest: to respond to general inquiries sent through our contact form
  • Legal obligation: where required, to retain certain records (e.g., invoices) in accordance with Slovenian accounting and tax law

We do not use your data for automated decision-making or profiling.

 

How Long We Keep Your Data

  • Contact form and booking inquiries are retained for as long as necessary to respond to you and, if a course is booked, to deliver the service and fulfill any related legal (e.g., accounting/tax) obligations.
  • Invoicing and financial records are retained for the period required by Slovenian law (generally 10 years for accounting documents).
  • If no course is booked, general inquiry data is deleted or anonymized within a reasonable period, typically within 12 months.

 

Who We Share Your Data With

We do not sell or rent your personal data. We may share limited data with:

  • Service providers who help us operate this website or deliver our services (e.g., web hosting provider, email service provider), acting under data processing agreements in line with GDPR
  • Video call providers for the purpose of conducting follow-up review sessions, subject to that provider’s own privacy policy
  • Legal or tax authorities, where required by Slovenian or EU law

We do not transfer your data outside the EU/EEA except where a service provider we use (e.g., a video call platform) operates under an approved GDPR transfer mechanism (such as Standard Contractual Clauses).

This website may load web fonts from a privacy-focused, EU-based font provider (Bunny Fonts) to display text correctly. This provider does not use cookies and does not log or store visitor IP addresses, so no additional consent is required for this functionality.

 

Your Rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data (“right to be forgotten”), where applicable
  • Restrict or object to certain processing
  • Data portability — receive your data in a structured, commonly used format
  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at [insert contact email]. We will respond within one month, as required by law.

You also have the right to lodge a complaint with the Slovenian supervisory authority:

Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec) Dunajska cesta 22, 1000 Ljubljana, Slovenia Website: www.ip-rs.si

 

Data Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse, including secure website hosting and restricted access to stored data.

 

Cookies

This website does not use cookies for tracking, advertising, or analytics purposes. It may use strictly necessary technical functions required for the website to operate correctly, which do not require consent under the ePrivacy Directive. If this changes in the future, this policy will be updated accordingly and, where legally required, a consent mechanism will be introduced.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically.

 

Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us.
Reakcija d.o.o.
Cesta 27. aprila 45
1000 Ljubljana,
Slovenia
E-mail contact form.
VAT ID: SI18468837
Registration number: 3544028000