Legal

Privacy Policy

Last updated: 30 September 2026

This policy explains which personal data Carpolab (“we”) collects when you use this website, why we collect it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Slovenian law.

1. Who is responsible

Data controller: LANBOR, trgovina in storitve d.o.o. (trading as Carpolab), Ulica Franca Rozmana-Staneta 4, 4000 Kranj, Slovenia. Registration no.: 7577842000, VAT ID: SI71497897. Contact: info@carpolab.com.

2. What we collect

• Enquiries via the form and the calculator: the name, email, phone number and message you send, plus any project details you share.
• New-project questionnaire: your answers and, on submission, your IP address, browser type and time of submission, kept as evidence that you confirmed the answers and terms yourself. Retained with the project documentation.
• Newsletter sign-up: your email address. The subscription only takes effect once you confirm it via the link we send to that address.
• Technical data: standard server logs at our hosting provider (IP address, browser, time of request) for security and operation.
• Settings in your browser: your chosen language and your cookie decision are stored locally in your browser (local storage), not on our servers. See the Cookie notice.
• Cookieless traffic measurement: aggregated, anonymised visit data (page views, approximate country, device type) via Vercel Web Analytics; your IP address is not stored.
• With your consent: Google Analytics 4 and Google Ads set cookies to measure traffic and the performance of our ads. Without clicking “Accept”, these cookies are never loaded. The Google tag itself loads for every visitor: until you consent, it only sends Google cookieless signals (page address, time of visit, browser type and IP address), which Google uses to estimate traffic and ad statistics.

3. Why we use it and the legal basis

• To answer your enquiry and prepare a quote (Art. 6(1)(b) GDPR, steps prior to a contract).
• To run and secure the site and keep basic cookieless statistics (Art. 6(1)(f), legitimate interest).
• For Google traffic and ad measurement: your consent (Art. 6(1)(a)), which you can withdraw at any time.
• For sending the newsletter: your confirmed consent (Art. 6(1)(a)); you can unsubscribe in every email.

We never sell your data.

4. Who processes the data

• Form submissions are stored in our system (database hosted by Neon). Email notifications and confirmations are sent via Resend, Inc.
• Hosting: Vercel Inc. hosts the site and keeps server logs.
• Draft quotes: your answers to the new-project questionnaire, together with your name and company, are processed by Anthropic PBC (USA) via its API to prepare a draft quote, which we then review ourselves. Under its commercial terms, Anthropic does not use this data to train its models.
• Measurement: Vercel Web Analytics and Speed Insights (cookieless); with consent, Google Ireland Ltd. (Google Analytics 4, Google Ads). Google may transfer data to the US under the EU-U.S. Data Privacy Framework.
• Fonts are hosted locally on our own domain.

5. How long we keep it

• Enquiry data is kept for at most 2 years after our last contact, then deleted.
• Server logs are kept briefly by the provider.
• Google cookies last up to 2 years (_ga) or 90 days (_gcl); your consent choice is stored until you reset it.

6. Your rights

You can request access, correction, deletion, restriction or portability of your data, object to processing, and withdraw consent at any time — write to info@carpolab.com or use the reset button in the Cookie notice. You may also lodge a complaint with the Slovenian Information Commissioner (ip-rs.si).

7. Changes

We may update this policy; the latest version always lives on this page.