Privacy notice
This notice explains how personal data is processed when you visit atena-advisory.com, book a session or contact me. It is provided in line with the EU General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).
1. Who is responsible for your data
Anamarija Škof s.p.
Sole proprietor, Republic of Slovenia
Trading as ATENA Advisory
Email: anamarija.sabler@gmail.com
I am the data controller. I have not appointed a data protection officer, as this is not required for a business of this size and type. For any privacy question or request, write to the email above.
2. What data I process, why, and on what legal basis
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Visiting the website | IP address, browser and device type, pages requested, date and time | Delivering the site, keeping it secure, preventing abuse | Legitimate interest, Art. 6(1)(f) GDPR |
| Loading the site's fonts | IP address and browser information sent to Google when fonts load | Displaying the page as designed | Legitimate interest, Art. 6(1)(f) GDPR |
| Booking a diagnosis session | Name, email, chosen time, any answers you give in the booking form, video call details | Scheduling and holding the session you requested | Steps at your request before a contract, Art. 6(1)(b) GDPR |
| Contacting me by email | Email address, name, message content, any information you share | Answering your enquiry and any follow up | Steps before a contract, Art. 6(1)(b), or legitimate interest, Art. 6(1)(f) GDPR |
| Becoming a client | Contact and company details, project information, invoicing data | Delivering the agreed services, invoicing, bookkeeping | Contract, Art. 6(1)(b), and legal obligation, Art. 6(1)(c) GDPR |
Please do not send special categories of personal data (such as health information) or confidential third party data unless we have agreed how it will be handled.
3. Cookies and tracking
This website does not set its own cookies and does not use analytics, advertising or tracking tools. When you click a booking link you move to Calendly's website, which may set cookies under its own cookie policy.
4. Who receives your data
I use a small number of service providers who process data on my behalf, under data processing terms:
- Vercel Inc. (USA): website hosting and delivery, including short lived server logs.
- Google LLC / Google Ireland Ltd.: email (Gmail), video calls (Google Meet) and web fonts (Google Fonts).
- Calendly LLC (USA): appointment scheduling.
- An accountant or bookkeeping service, for client invoicing records only.
I do not sell your data or share it for marketing. Data may be disclosed to authorities only where the law requires it.
5. Transfers outside the EU
Some of the providers above are based in, or may access data from, the United States. These transfers rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses, Art. 46 GDPR.
6. How long data is kept
- Server logs: for the short period set by the hosting provider, typically days to a few weeks.
- Enquiries and booking data that do not lead to an engagement: up to 12 months after the last contact, then deleted.
- Client and project correspondence: for the duration of the engagement and up to 3 years after, for follow up and legal claims.
- Invoices and accounting records: as long as Slovenian tax and accounting law requires, currently 10 years.
7. Your rights
You have the right to:
- access the personal data I hold about you;
- have inaccurate data corrected;
- have data erased where there is no longer a legal reason to keep it;
- restrict processing in certain cases;
- receive your data in a portable format, where processing is based on contract or consent;
- object to processing based on legitimate interest;
- withdraw consent at any time, where processing is based on consent.
Send your request to anamarija.sabler@gmail.com. I will reply within one month. I may ask you to confirm your identity first.
8. Right to complain
If you believe your data is being processed unlawfully, you can lodge a complaint with the Slovenian supervisory authority:
Informacijski pooblaščenec Republike Slovenije
Dunajska cesta 22, 1000 Ljubljana, Slovenia
www.ip-rs.si
You may also complain to the authority in your own EU country of residence or work.
9. Automated decisions
I do not make decisions about you based solely on automated processing, including profiling.
10. Changes to this notice
I may update this notice when my services or tools change. The current version is always on this page, with its effective date at the top.