Legal
Privacy policy
Applies from 15 September 2026
This policy explains which personal data we process when you visit the website of TPJ TEAM d.o.o. or call or write to us, why, how long we keep it and what rights you have. This English version is provided for convenience; if in doubt, the Slovenian version prevails.
1. Controller
TPJ TEAM trgovina z gradbenimi stroji d.o.o.Gradenje 3, 8220 Šmarješke Toplice, Slovenia
Registration no.: 8785643000 · VAT ID: SI27729516
Email: info@tpjteam.si · Phone: +386 41 565 086
For any question about personal data, write to the email address above.
2. What we process, why, and on what legal basis
Inquiries by phone, email or through the forms
We process what you send or tell us — your name or company, phone, email address and the content of your message (for example the machine, rental dates and job location). The forms on this site send your details to the Web3Forms service, which forwards them to us by email; according to Web3Forms, it does not store form submissions.
- Purpose: answering your inquiry, preparing a quote, and concluding and performing a sale or rental contract.
- Legal basis: steps taken at your request before entering into a contract, and performance of the contract (GDPR Art. 6(1)(b)); when a company writes to us, also our legitimate interest in answering a business inquiry (Art. 6(1)(f)).
- Transfer through the forms: Web3Forms is a service of Web3Creative, based in Kerala, India; its servers are in the United States. The transfer is not based on a European Commission adequacy decision or other safeguards, so your data may not be protected there as it is in the EU — for example regarding access by local authorities and legal remedies. The forms therefore send your details only if you explicitly consent to this transfer before sending (GDPR Art. 49(1)(a)). To avoid the transfer, call us or write to the email address above.
Visit statistics — Google Analytics 4
Only if you consent in the cookie banner. Using cookies, Google Analytics records which pages you visit, when and for how long, your device and browser type, where you came from and your approximate location (country, city). It tells visitors apart by a random identifier stored in a cookie, not by name.
- Purpose: counting visits and improving the site.
- Legal basis: your consent (GDPR Art. 6(1)(a) and Article 225 ZEKom-2), which you can withdraw at any time.
- According to Google, Google Analytics does not log or store the IP addresses of users in the EU — it uses them only to derive an approximate location and then discards them. We have switched off Google signals and the use of data for advertising.
Map — Google Maps
The location map loads only when you click “Show the map” or allow it in the cookie settings. Your browser then sends a request to Google, including your IP address, and Google may set its own cookies. The legal basis is your consent (GDPR Art. 6(1)(a)).
Running and protecting the site
On every visit the web server that hosts the site automatically processes technical data about the request: IP address, time, the page requested and browser type. The purpose is to deliver the site and protect it against attacks and abuse; the legal basis is legitimate interest (GDPR Art. 6(1)(f)).
3. Who receives the data
We do not sell data and do not use it for advertising. It is received only by providers that perform services for us:
- Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) — Google Analytics as processor, and Google Maps;
- Web3Forms (Web3Creative, Kerala, India) — forwards the form details to our email;
- the website hosting provider — a server in Germany (Frankfurt), as processor;
- the email service provider through which we receive your messages;
- public authorities, where the law requires it.
4. Transfers outside the EU
Google may also process data in the United States. For recipients certified under the EU–US Data Privacy Framework, transfers rely on the European Commission’s adequacy decision of 10 July 2023; otherwise on the European Commission’s standard contractual clauses.
Details sent through the forms go via Web3Forms to the United States (servers) and India (where the provider is based). This transfer is not based on an adequacy decision or standard contractual clauses but on your explicit consent when you send the form (GDPR Art. 49(1)(a)). The consent covers that one submission; without it the form sends nothing.
5. How long we keep data
- Inquiries and correspondence: as long as needed to answer and to conclude and perform a contract, then as long as the law requires (for example keeping invoices under tax rules) or as needed to establish or defend legal claims.
- Web3Forms: according to Web3Forms, form submissions are not stored; server logs that may contain personal data are deleted every two months.
- Analytics: visitor-level data is kept in Google Analytics for at most 14 months; the Google Analytics cookies last 2 years from your last visit unless you withdraw consent earlier.
- Your cookie choice: 6 months.
- Server logs: 14 days.
6. Your rights
You can request at any time:
- access to your personal data and a copy of it (GDPR Art. 15),
- rectification of inaccurate data (Art. 16),
- erasure (Art. 17) and restriction of processing (Art. 18),
- portability of data you provided to us (Art. 20),
- objection to processing based on legitimate interest (Art. 21).
You can withdraw consent for analytics or the map at any time with the “Cookie settings” button in the footer; withdrawal does not affect processing before it. Send requests to info@tpjteam.si — we reply within one month at the latest.
If you believe we process data unlawfully, you can lodge a complaint with the supervisory authority: Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, phone +386 1 230 97 30, www.ip-rs.si.
7. Do you have to provide data?
No. Without contact details, however, we cannot answer an inquiry. We do not carry out automated decision-making or profiling with legal or similarly significant effects on you. Consent for analytics can be given by persons aged 15 or over (Article 8 ZVOP-2).
8. Changes
We update this policy when our processing changes. The current version is always published on this page, with the date it applies from.