Legal

Privacy Policy

Last updated: 29 August 2026

This policy explains which personal data Carpolab (“we”) collects when you use this website, why we collect it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Slovenian law.

1. Who is responsible

Data controller: OFIS42 d.o.o. (trading as Carpolab), Gogalova ulica 8, 4000 Kranj, Slovenia. Registration no.: 6703402000, VAT ID: SI32643063. Contact: info@carpolab.com.

2. What we collect

• Enquiries via the form and the calculator: the name, email, phone number and message you send, plus any project details you share.
• Technical data: standard server logs at our hosting provider (IP address, browser, time of request) for security and operation.
• Settings in your browser: your chosen language and your cookie decision are stored locally in your browser (local storage), not on our servers. See the Cookie notice.
• Cookieless traffic measurement: aggregated, anonymised visit data (page views, approximate country, device type) via Vercel Web Analytics; your IP address is not stored.
• With your consent: Google Analytics 4 and Google Ads set cookies to measure traffic and the performance of our ads. Without clicking “Accept”, these cookies are never loaded.

3. Why we use it and the legal basis

• To answer your enquiry and prepare a quote (Art. 6(1)(b) GDPR, steps prior to a contract).
• To run and secure the site and keep basic cookieless statistics (Art. 6(1)(f), legitimate interest).
• For Google traffic and ad measurement: your consent (Art. 6(1)(a)), which you can withdraw at any time.

We never sell your data.

4. Who processes the data

• Form submissions are stored in our system (database hosted by Neon). Email notifications and confirmations are sent via Resend, Inc.
• Hosting: Vercel Inc. hosts the site and keeps server logs.
• Measurement: Vercel Web Analytics and Speed Insights (cookieless); with consent, Google Ireland Ltd. (Google Analytics 4, Google Ads). Google may transfer data to the US under the EU-U.S. Data Privacy Framework.
• Fonts are hosted locally on our own domain.

5. How long we keep it

• Enquiry data is kept for at most 2 years after our last contact, then deleted.
• Server logs are kept briefly by the provider.
• Google cookies last up to 2 years (_ga) or 90 days (_gcl); your consent choice is stored until you reset it.

6. Your rights

You can request access, correction, deletion, restriction or portability of your data, object to processing, and withdraw consent at any time — write to info@carpolab.com or use the reset button in the Cookie notice. You may also lodge a complaint with the Slovenian Information Commissioner (ip-rs.si).

7. Changes

We may update this policy; the latest version always lives on this page.