Your data. No fine print.
A clear explanation of which data ČrtaIT processes, why it is needed and how you can exercise your rights.
Data controller
The controller is ČrtaIT, management of computer devices and systems, Črt Kranjc s.p., Ulica 11. novembra 57, 8273 Leskovec pri Krškem, Slovenia. Company registration number: 7524471. Tax number: 55918581 (not liable for VAT). Contact: info@crtait.si and +386 30 649 200.
Which data I process
When you submit an enquiry through the form, I process your name, email address, message, preferred reply channel and, if you enter them, your company, phone number and team size. When delivering services I may also process contractual and accounting data, business communication, support tickets and data about systems and access that is necessary for the agreed work. To protect the form, the IP address is hashed one way and used for rate limiting; that record is removed automatically within one day at the latest.
Why I use the data
I use the data to answer your enquiry, prepare an offer, deliver contracted services, provide client support, issue invoices, protect systems and meet legal obligations. I do not sell data and do not use it for advertising profiling or automated decision making.
Legal bases
Processing is based on performance of a contract or pre contractual steps taken at your request, legal obligations, legitimate interest in security, abuse prevention and defence of legal claims, and on consent where you explicitly give it. You may withdraw consent at any time without affecting the lawfulness of processing carried out beforehand.
Processors and recipients
Data may be processed, to the extent necessary, by providers of hosting, site protection and delivery, backend and transactional email services, business email, an accounting service and software providers required to deliver a specific service. The current web infrastructure includes Cloudflare, Lovable and Lovable Cloud and Supabase, while business email runs on Zoho. Fonts are loaded from Google Fonts on visit, so your browser sends Google technical request data such as IP address and browser type. Data is disclosed to public authorities only where required by law or a binding decision.
Transfers outside the EEA
Some providers or their sub processors may process data outside the European Economic Area. In such cases valid safeguards apply, such as an adequacy decision or the EU standard contractual clauses. You can request information about the safeguards used at info@crtait.si.
How long I keep data
Enquiries that do not lead to cooperation are kept for a maximum of 12 months from the last contact. Client data is kept for the duration of the cooperation and for as long afterwards as required by contractual obligations and possible claims. Invoices and accounting records are kept for the legally prescribed periods. Security logs are kept for a shorter period, except where needed to handle a specific incident.
Your rights
Under the GDPR you may request access, rectification, erasure or restriction of processing, data portability, and you may object to processing based on legitimate interest. Send your request to info@crtait.si. You will receive a reply without undue delay and normally within one month. You may lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si.
Security
I use reasonably necessary technical and organisational measures, including encrypted transfer, restricted access, multi factor sign in, secure credential management, system updates and security review of public forms. Access to personal data is limited to people and providers who need it for the agreed purpose.
Cookies, local storage and external links
crtait.si has no advertising or marketing trackers. You choose the language yourself; the site stores that choice locally in your browser. Technical providers may use strictly necessary security or session data required to run and protect the service. Calendly is not embedded in the site: it loads only when you click the external booking link, after which Calendly's privacy and cookie terms apply.
Changes and contact
I update this policy whenever services, providers or legal requirements change. The current version is always published on this page. For questions about processing, to exercise your rights or for information about processors, write to info@crtait.si or call +386 30 649 200.