Skip to main content
Pixel Aura – domača stran

This policy explains which personal data I collect through the website pixel-aura.si, why I collect it, how long I keep it and what rights you have. I process data in accordance with the General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).

Effective from 4 October 2026.

1. Data controller

PIXEL AURA, web design, Tilen Rojc s.p.
Cesta Ivana Starca 4k, 6000 Koper, Slovenia
Email: tilen@pixel-aura.si
Phone: 070 426 439

For any questions about the protection of personal data, write to me at the email address above.

2. What data I collect and why

Free review form

Data: name, email address, phone number (optional), practice, link to your website, description of the problem and goals of the collaboration.
Purpose: responding to your enquiry, preparing for the discovery call and preparing an offer.
Legal basis: taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).

Discovery call booking

Data: name, email address and the selected time slot. Booking takes place through Google Calendar, and the call itself usually runs on Google Meet.
Purpose: arranging and holding the discovery call.
Legal basis: Article 6(1)(b) GDPR.

Communication by email and phone

Data: contact details and the content of the messages you send me.
Purpose: answering questions and carrying out our collaboration.
Legal basis: Article 6(1)(b) GDPR, or my legitimate interest in replying to your message (Article 6(1)(f) GDPR).

Client data

Data: name, address, tax number and contact details.
Purpose: performing the contract, issuing invoices and meeting accounting obligations.
Legal basis: Article 6(1)(b) and (c) GDPR.

Technical data when you visit the site

Data: IP address, time of visit, browser type and the requested page, which the server records automatically.
Purpose: operation and security of the website.
Legal basis: my legitimate interest in the secure operation of the site (Article 6(1)(f) GDPR).

Fields in the form marked with an asterisk are required. Without them I cannot respond to your enquiry.

3. How long I keep data

  • Enquiries and bookings that do not lead to a collaboration: 12 months after the last contact, then I delete them.
  • Client data: for the duration of the collaboration and afterwards until statutory limitation periods expire.
  • Invoices and accounting records: 10 years, as required by tax law.
  • Server logs: according to the hosting provider’s policy, usually a few weeks.

4. Who I share data with

I do not sell your data and I do not pass it to third parties for marketing. Only processors who help me with my work have access to it, on the basis of a data processing agreement:

  • NEOSERV d.o.o. (Slovenia): website hosting.
  • Google Ireland Limited (Ireland): Google Workspace for email, plus Google Calendar and Google Meet for booking and holding calls.
  • Accounting service: keeping the business books, for client data only.

I may also disclose data to competent state authorities where required by law.

5. Transfers of data outside the EU

Google may also process data in the United States. The transfer is based on the EU-U.S. Data Privacy Framework and on the European Commission’s standard contractual clauses.

6. Cookies and third-party content

The website does not use analytics or advertising cookies.

The discovery call booking page embeds Google Calendar. When this content loads, Google may store its own cookies on your device and record your IP address. Read more in Google’s privacy policy.

7. Your rights

With regard to your personal data you have the right to:

  • access your data and obtain a copy of it,
  • have inaccurate data corrected,
  • have your data erased (the “right to be forgotten”),
  • restrict processing,
  • data portability,
  • object to processing based on legitimate interest.

Send your request to tilen@pixel-aura.si. I will reply within one month at the latest. Before handing over data I may need to verify your identity.

8. Complaint to the supervisory authority

If you believe I am processing your data in breach of the law, you can lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, www.ip-rs.si.

9. Automated decision-making

I do not carry out automated decision-making or profiling.

10. Data security

I protect data with appropriate technical and organizational measures: an encrypted connection (HTTPS), restricted access to data and regular system updates.

11. Changes to this policy

I may update this policy from time to time. The current version is always published on this page, with the effective date at the top.