Privacy Policy
This page explains how Perfectus Institute collects, uses, stores and protects the personal data of website visitors, and what rights individuals have regarding the processing of their data.
Please note: this English version is provided for information only. The Slovenian version of this policy is the legally binding one.
1. General
PERFECTUS Institute respects your privacy and protects personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), the Slovenian Personal Data Protection Act (ZVOP-2) and the Slovenian Electronic Communications Act (ZEKom-2). This policy explains what data we process, why, for how long we keep it, and what rights you have.
2. Data controller
PERFECTUS Institute, private social institute, so. p. Dolga Poljana 57, 5271 Vipava, Slovenia Registration number: 9856552000 Tax number: SI75443317 (VAT payer) Registered in the Slovenian Business Register (AJPES) Email: info@perfectus-institute.si Phone: +386 40 33 11 27 For any questions about personal data protection, please write to the email address above.
3. What data we process
Data you provide yourself: when you write to us by email, call us, or register for a programme, we process your name and surname, contact details and the content of your message. Visit data: when you visit the site, the server automatically processes technical data (IP address, browser type, time of visit) that is necessary for the site to run securely. We collect analytical visit data only if you give consent for this (see section 7).
4. Purpose and legal basis
• Responding to your messages and enquiries – legitimate interest or steps prior to entering into a contract (Article 6(1)(f) and (b) GDPR). • Delivering the programme and cooperating with institutions – performance of a contract (Article 6(1)(b) GDPR). • Secure operation of the website – legitimate interest (Article 6(1)(f) GDPR). • Measuring visits and displaying external content – your consent (Article 6(1)(a) GDPR and Article 225 ZEKom-2). • Fulfilling legal obligations (e.g. reporting to project funders, accounting) – Article 6(1)(c) GDPR. We publish photographs and recordings of workshop participants only with their prior consent, which they may withdraw at any time.
5. Data retention
We keep messages and enquiries for a maximum of 2 years after the last contact, unless a longer period is needed for ongoing cooperation. Documentation relating to projects co-funded by the EU and the Republic of Slovenia is kept for as long as required by the co-funding contract and applicable regulations. Data processed on the basis of consent is kept until consent is withdrawn. Once the retention period expires, we securely delete or anonymise the data.
6. Processors and transfers to third countries
We do not sell personal data. We may share it only with trusted processors who help us run the website (web hosting, email) and, where you have allowed it, with Google (Google Maps). These providers may process data outside the EU, mainly in the USA; the transfer relies on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We also share data with competent authorities and funders where required by law or by a co-funding contract.
7. Cookies
Cookies are small files that a website stores in your browser. In accordance with ZEKom-2, we use non-essential cookies only with your prior consent, given through the banner shown on your first visit. • Essential (always on): a record of your cookie choice (perfectus-consent-v1, local storage, until withdrawn) and a session cookie for access to protected pages (up to 30 days). • Analytical (consent only): our own visit counting on our server, without third-party cookies. We record the page visited, the referring website's domain, device type and country, and a random identifier that changes daily and cannot be used to identify you. We do not store IP addresses. Individual visit data is kept for 14 months, and monthly aggregate summaries (numbers only) are kept indefinitely. We do not share this data with anyone. • External content (consent only): an embedded Google Maps map on the Contact page; when displayed, Google receives your IP address and may set its own cookies. The site's fonts are loaded from our own server, so no data is sent to font providers when you visit. You can change or withdraw your consent at any time via the "Cookie settings" link in the footer; withdrawal does not affect the lawfulness of processing carried out before it. A detailed list of cookies is available in the Cookie Policy (perfectus-institute.si/en/cookie-policy).
8. Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time. Send your request to info@perfectus-institute.si; we will respond within one month at the latest. If you believe the processing of your data breaches the regulations, you may lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, www.ip-rs.si.
9. Security and changes
We use appropriate technical and organisational measures to protect personal data, including an encrypted connection (HTTPS). We may update this policy in response to changes in legislation or in how the site operates; the version in force is always published on this page. Last updated: 29 September 2026.