Privacy policy

This privacy policy applies to the eko-resitve.si website and describes which personal data we process, on what legal basis, for what purpose and what your rights are. The processing is carried out in accordance with the General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).

Last updated: June 2026.

1. Data controller

The controller of personal data is:

JOHANSON – SOLUTIONS, gradnja objektov oskrbne infrastrukture d.o.o.
(brand Eko Rešitve)
Ravne 103D, 3325 Šoštanj, Slovenia
VAT number: SI29109728 · Registration number: 8666032000
E-mail: info@eko-resitve.si · Phone: +386 41 861 265

2. What data we collect

• Data from the inquiry form: full name, phone, e-mail address, location of the building and the content of the message, which you provide voluntarily.
• Technical data: when you visit the site, anonymised statistical usage data (e.g. pages viewed, device type) may be recorded, subject to your consent.

3. Purposes and legal basis of processing

• Replying to an inquiry and preparing a quote – the legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and, where necessary, your consent (Art. 6(1)(a) GDPR).
• Communication and customer support – our legitimate interest in responding to your message (Art. 6(1)(f) GDPR).
• Analytics and website improvements – solely on the basis of your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

Providing data in the form is voluntary; without basic contact details we cannot reply to your inquiry. We do not use the data for unsolicited advertising and we do not sell it to third parties.

4. Cookies

On your first visit the website does not set any analytics or tracking cookies. We only load them after your explicit consent via the cookie banner. You may withdraw your consent at any time using the cookie management button (the icon in the bottom-left corner).

• Essential (local storage): we store your consent choice (e.g. eko-resitve.cookie.consent). These are required for operation and do not require consent.
• Analytics (Google Analytics): loaded only with consent, with IP anonymisation. When consent is withdrawn we remove these cookies.

5. Google Analytics

To understand how the site is used we may use Google Analytics (Google Ireland Ltd.). The script loads only after your consent, and IP addresses are anonymised. More: Google's privacy policy.

6. Google Maps

An embedded Google Maps map is available on the Contact page. It loads only if you explicitly confirm it (by accepting cookies or clicking "Show map"). When it loads, a connection to Google's servers is established.

7. Processors and transfers to third countries

We do not pass on personal data to third parties, except to contractual processors who help us operate (e.g. the website hosting provider and – subject to your consent – Google for analytics and maps). They process the data solely on our instructions.

When using Google services, data may also be transferred to third countries (e.g. the USA). In that case the transfer is protected by appropriate safeguards in accordance with the GDPR (e.g. standard contractual clauses or the EU–US Data Privacy Framework).

8. Retention of personal data

We keep data from inquiries for as long as necessary to handle your inquiry and any resulting business, or in accordance with applicable statutory periods (e.g. tax and accounting regulations). Once the purpose ends, we delete or anonymise it.

9. Data security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse (including an encrypted HTTPS connection and restricted access to the data).

10. Automated decision-making and profiling

We do not use your personal data for automated decision-making or profiling that would have legal or similarly significant effects on you.

11. Your rights

In accordance with the GDPR and ZVOP-2 you have the right, regarding your personal data, to:

• access the data,
• rectification of inaccurate or incomplete data,
• erasure (the "right to be forgotten"),
• restriction of processing,
• object to processing,
• data portability,
• withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).

To exercise your rights, write to us at info@eko-resitve.si. If you believe the processing infringes the regulations, you may lodge a complaint with the supervisory authority – the Information Commissioner of the Republic of Slovenia (Dunajska cesta 22, 1000 Ljubljana; ip-rs.si).

12. Changes to the policy

We may update this privacy policy from time to time. The latest version published on this page always applies; the date of the last update is stated at the top.