Privacy policy

Last update: 22.1.2026

This privacy policy explains how Nimbis d.o.o., Ciril-Metodov drevored 16, Ptuj (hereinafter: the controller) collects, uses and protects personal data of users of the website https://nimbis.si.

1. Personal data controller

The personal data controller is:
Nimbis d.o.o.
Ciril-Metodov drevored 16, Ptuj
info@nimbis.si
+386 40 298 989

2. What personal data do we process?

We process the following personal data via the contact form:

  • name and surname
  • email address
  • phone number (if provided)
  • company name (if provided)
  • message content

The controller does not collect any special types of personal data (e.g. health data).

3. Purpose of processing personal data

We process personal data exclusively for the purpose of:

  • establishing contact with the user,
  • response to a sent inquiry or message.

The data is not used for direct marketing purposes and is not passed on to third parties.

4. Legal basis for processing

The legal basis for the processing of personal data is the individual's consent (Article 6(1)(a) GDPR), which the user provides by submitting the contact form.

5. Retention of personal data

Personal data is only stored for as long as is necessary to carry out the communication or process the inquiry, or until consent is revoked. After this period, the data is deleted or anonymized.

6. Provision of personal data

The controller does not provide personal data to third parties unless this is necessary due to legal obligations.

Security of personal data

The controller implements appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss or destruction. These measures include, in particular, access control, protection of information systems, regular software updates and raising employee awareness of the importance of personal data protection.

The controller undertakes to comply with the principles of the GDPR and recognized standards of information security and good practice when managing data (we are ISO 27001 compliant).

8. Rights of individuals

According to the GDPR, an individual has the right to:

  • access personal data
  • correct incorrect of incomplete data
  • request deletion of data
  • request to restrict processing of data
  • request transfer of data
  • object to processing of data
  • withdraw consent at any time.

An individual can send a request to: info@nimbis.si.

An individual also has the right to file a complaint with the Information Commissioner of the Republic of Slovenia.

9. Changes to the Privacy Policy

The operator reserves the right to change this privacy policy. All changes will be published on this website.