1Who the controller is
The controller of personal data is Altion, Nik Senekovič s.p., Zrkovci 26, 2000 Maribor, Slovenia, registration number 7414714000, tax number 56869886. For any questions about data protection, write to info@altion.ai.
2Which data we process and why
- Contact form and email
- Name, email address, optionally company and phone, and the content of the message. We use them to reply and to prepare a quote. Legal basis: steps prior to entering into a contract at your request and our legitimate interest in answering business inquiries (Article 6(1)(b) and (f) GDPR).
- Call booking
- Name, email address, the chosen time and any note you add. You book the time through Cal.com, which processes the data on our behalf. Legal basis: steps prior to entering into a contract (Article 6(1)(b) GDPR).
- Clients and partners
- Contact details of representatives, contracts, quotes and invoices. We need them to perform the contract and to meet accounting and tax obligations (Article 6(1)(b) and (c) GDPR).
- Visiting the website
- The website host automatically logs technical data such as IP address, time of visit, requested page and browser type. It is used for the security and operation of the site, not to analyze visitors. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
3Cookies and tracking
The altion.ai website sets no cookies and uses no analytics, advertising pixels or other tracking tools. That is why we do not ask for your consent when you visit.
Fonts are loaded from our own server, so your browser does not send data to font providers when you visit. The links to LinkedIn and Cal.com lead to external sites, which have their own privacy policies.
4Who we entrust data to
Data is processed by providers who help us with our work, and only to the extent their service requires:
- Netlify
- website hosting
- Google Workspace
- email and documents
- Web3Forms
- forwarding contact form messages to our email address
- Cal.com
- booking times for calls
We do not sell data or pass it on for advertising. We disclose it to others only when the law requires it, for example to the tax authorities.
5Transfers outside the EU
Some providers are based or have servers outside the European Economic Area, mainly in the USA. Transfers take place only on the basis of a European Commission adequacy decision, such as the EU-US Data Privacy Framework, or the European Commission’s standard contractual clauses.
6How long we keep data
- Messages and bookings
- If no work together follows, we delete them no later than two years after the last contact.
- Contracts and invoices
- For as long as the law requires. For example, we keep invoices for ten years after the end of the year they relate to.
- Technical logs
- Kept by the website host in line with its own retention rules.
7Data in client projects
When we build or maintain a solution for a client, the client is the controller of the data in that solution and we are the processor. We process the data only on the client’s instructions and on the basis of a data processing agreement.
The list of providers a solution uses, such as AI model and hosting providers, is part of the project documentation. Where a provider allows it, we choose settings under which data is not used to train models. Important decisions of the system are reviewed by a person before they are carried out.
Requests from individuals about data in a project are handled together with the client.
8Security
The website runs over an encrypted connection (HTTPS). Personal data is accessed only by people who need it for their work, and only through password-protected accounts. We adapt the measures to the risk of each project.
9Your rights
At any time you can request access to your data, its correction or deletion, restriction of processing and data portability. You can object to processing based on legitimate interest. Send your request to info@altion.ai. We reply within one month at the latest.
If you believe we process data unlawfully, you can lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si.
10Changes
We update this policy when the way we process data changes, for example when we start using a new tool. The date of the last update is shown at the top of the page.