The purpose of this privacy policy is to inform individuals, customers, service users, colleagues, employees and other persons (hereinafter: "individual") who cooperate with TECES (hereinafter: "company") about the purposes, legal bases, security measures and rights of individuals regarding the processing of personal data carried out by the company.
We value your privacy, so we always carefully protect your data.
We process personal data in accordance with applicable personal data protection legislation and other legislation that provides us with a legal basis for such processing. Any changes to this document will be posted on our website. By using the website, you confirm that you are familiar with the full content of this privacy policy.
Personal data controller:
TECES
POBRESKA CESTA 20
2000 MARIBOR
E-mail:
Phone: +386 2 333 13 50
Web site: https://www.teces.si
1. Personal data
Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as: a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
2. Purposes of processing and grounds for data processing
The company collects and processes personal data on the following legal bases:
- the processing is necessary for compliance with a legal obligation to which the controller is subject;
- the processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject before entering into a contract;
- processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party;
- the data subject has consented to the processing of his or her personal data for one or more specific purposes;
- processing is necessary to protect the vital interests of the data subject or another natural person.
2.1 Implementation of the concluded contract
In cases where an individual concludes a contract with the company, this constitutes the legal basis for the processing of personal data. The company may process personal data to conclude and implement the contract, such as providing services, conducting training and events, preparing an offer, or participating in various programs, projects, etc. If the individual does not provide personal data, the company cannot conclude the contract, nor can the company perform the service or deliver goods or other products in accordance with the concluded contract, as it does not have the necessary data for execution. On this basis, the company processes only and exclusively the personal data that are necessary for concluding and properly implementing contractual obligations.
The legal basis for data processing is a contract. The retention period is until the purpose of the contract is fulfilled or up to 6 years after the termination of the contract, except in cases where a dispute arises between the individual and the company in relation to the contract. In such a case, the company stores the data for 10 years after the finality of the court decision, arbitration or court settlement or, if there was no court dispute, for 6 years from the date of a peaceful resolution of the dispute.
Registration on the website
Registered users agree that the company stores their personal data, provided during the registration process to obtain the status of a registered user of the website, in its personal data collection of users registered on the company's websites and uses it exclusively for the purposes and in the manner set out in this privacy policy. Registered users can change their personal and other data provided to the company through the section for changing user data settings, which also allows changing the password. A user who wishes to withdraw their consent to the collection of personal data and thereby unsubscribe as a registered user must send an email to the company at
Registered users agree that the company stores their personal data, provided during the registration process to obtain the status of a registered user of the website, in its personal data collection of users registered on the TECES website, and uses it exclusively for the purposes and in the manner set out in this privacy policy.
2.2 Legitimate interest
The company may also process personal data based on a legitimate interest it pursues. However, this is not permissible if such interests are overridden by the interests or fundamental rights and freedoms of the data subject, which require personal data protection. In the case of using a legitimate interest, the company shall assess in accordance with the law. The processing of individuals' personal data for direct marketing shall be deemed to be carried out on the basis of a legitimate interest.
The company may process personal data of individuals collected from publicly available sources or within the framework of the lawful performance of its activities, including offering goods, services, employment and informing about benefits, events, etc. To achieve these purposes, the company may use regular mail, telephone calls, e-mail and other means of telecommunication. For direct marketing, the company may process the following personal data of individuals: the individual's name and surname, telephone number and e-mail address. The company may also process the aforementioned personal data for direct marketing without the individual's express consent. The individual may at any time request the termination of such communication and processing of personal data and cancel the receipt of messages via the unsubscribe link in the received message, or send a request by e-mail or regular mail to the company's address.
Website visit
Every time you visit a website under the auspices of TECES, web server log files (e.g., IP number—a number that identifies an individual computer or other device on the web) are automatically stored on the web server. The World Wide Web works in such a way that certain data about website visits is recorded on the web server where the website is hosted, such as IP number, browser version, time of visit, and the like.
TECES does not process the data collected this way separately or link it with other data. The purpose of these procedures is to ensure network and information security, i.e., to detect and prevent unauthorised access that may compromise the availability, integrity and confidentiality of stored or transmitted personal data and the security of related services accessible via these networks and systems.
The legal basis for data processing is legitimate interest. The data is stored for 30 days from the date of your visit to the website.
Photographing and recording events
In accordance with Article 93 of the ZVOP-2, the company may publish photos and videos taken at events it organizes on its websites and social networks unless the individual explicitly objects to such processing. The legal basis for such processing of personal data is the company's legitimate interest. However, when the company deems it appropriate or necessary in light of the circumstances, it will first obtain the individual's express consent.
2.3. Processing based on consent or agreement
If the company does not have a legal basis based on law, contractual obligation, legitimate interest or protection of the individual's life, it may ask the individual for consent or consent. Thus, it may also process certain personal data of the individual for the following purposes, when the individual provides consent for this:
- residential address and email address (for notification and communication purposes);
- first name, last name and name of the organisation (published on the list of event participants for the purpose of easier networking)
- photographs, videos and other content relating to an individual (e.g. publishing images of individuals on a website for the purposes of documenting activities and informing the public about the company's work and events;
- other purposes for which the individual gives consent.
If an individual gives consent to the processing of personal data and at some point no longer wishes to do so, they may request the termination of the processing of personal data by sending a request by e-mail or regular mail to the company's address. The withdrawal of consent does not affect the lawfulness of the processing based on consent before its withdrawal. After receiving the withdrawal or request for deletion, the data will be deleted within 15 days. The company may also delete this data before the withdrawal, when the purpose of processing personal data has been achieved, or if the law provides it.
Exceptionally, the company may refuse a request for deletion for reasons set out in the General Regulation in cases of exercising the right to freedom of expression and information, compliance with a legal obligation to process, reasons of public interest in the field of public health, archiving purposes in the public interest, scientific or historical research purposes, statistical purposes, and the exercise or defence of legal claims.
The legal basis for data processing is consent. The data will be processed until the consent is revoked or withdrawn, or until the purpose of the processing is fulfilled. The withdrawal of consent does not affect the lawfulness of processing based on consent before its revocation.
Informing individuals by email, e-newsletter
When subscribing to the online newsletter, the company processes your email address (e-mail address) and your IP address, which you enter in the online form, and the date and time of registration. The company processes this data exclusively for the purpose of informing you about news in the area you select. Your email information is stored until you unsubscribe from the email notification service. You can unsubscribe from receiving the email newsletter at any time by clicking on the marked link in the email message you receive.
We process personal data (email address) based on the individual's valid consent. When filling out the online newsletter subscription form, you indicate that you agree that the company uses your email address for the purpose of informing you about news for the selected area and that you are aware that you can unsubscribe from the messaging system at any time by clicking on the marked "Unsubscribe" link in the received email. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
If you do not indicate that you agree to the above, the company will not send notifications to your email address, nor will it collect or process it. The company uses an opt-in system for subscribing to the newsletter, meaning it only sends emails to people who explicitly agree to receive electronic notifications.
2.4 Protection of the vital interests of the individual
The company may process the data subject's personal data if this is necessary to protect his vital interests. In urgent cases, the company may search for the individual's personal document, check whether this person exists in its database, examine their medical history, or contact their relatives, for which the company does not need the individual's consent. The above applies if this is necessary to protect the individual's vital interests.
3. Storage and deletion of personal data
The company will store personal data only for as long as necessary to achieve the purpose for which the personal data was collected and processed. If the company processes data based on the law, it will store it for the period prescribed by law. Some data is stored during cooperation with the company, while others must be stored permanently. Personal data that the company processes on the basis of a contractual relationship with an individual is stored by the company for the period necessary to perform the contract and for 6 years after its termination, except in cases where a dispute arises between the individual and the company in relation to the contract. In such a case, the company will store the data for 10 years after the finality of a court decision, arbitration or court settlement or, if there was no court dispute, for 6 years from the date of a peaceful dispute resolution. The company will store personal data that the company processes based on the individual's personal consent or legitimate interest until the consent is revoked or until a request is made to delete the data. Upon receipt of the revocation or request for deletion, the data will be deleted without delay. The company may also delete this data before revocation when the purpose of processing the personal data has been achieved or required by law. In the event of exercising the rights of an individual, the company stores that individual's personal data until a final decision has been made on the matter, and after the final decision has been made in accordance with the final decision in the matter.
Exceptionally, the company may refuse a request for erasure for reasons such as: exercising the right to freedom of expression and information, compliance with a legal obligation to process, reasons of public interest in the field of public health, archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, and the exercise or defence of legal claims. After the retention period has expired, the company must effectively and permanently delete or anonymise the personal data so that it can no longer be associated with a specific individual.
4. Contractual processing of personal data and data export
The company may entrust an individual with the processing of personal data to a contractual processor on the basis of a contractual processing agreement. Contractual processors may process the entrusted data exclusively on behalf of the controller, within the limits of its authorisation, which is stated in a written contract or other legal act, and in accordance with the purposes defined in this privacy policy.
The contract processors with which the company cooperates are mainly:
- accounting services and other providers of legal and business advice;
- email service providers and software and cloud service providers (e.g. Mailchimp, Microsoft, Google);
- social media and online advertising providers (Google, Facebook, Instagram, etc.).
For the purposes of better oversight and control of contractual processors and the regulation of the mutual contractual relationship, the company also maintains a list of contractual processors, which lists all specific contractual processors with whom the company cooperates.
The company will not, under any circumstances, provide an individual's personal data to unauthorized third parties. Contractual processors may only process personal data within the framework of the company's instructions and may not use personal data for any other purposes.
The company as the controller and its employees do not transfer personal data to third countries (outside the member states of the European Economic Area - EU members and Iceland, Norway and Liechtenstein) and to international organizations, except for the USA, where relationships with contractual processors from the USA are regulated on the basis of standard contractual clauses (model contracts adopted by the European Commission) and/or binding corporate rules (adopted by the company and approved by supervisory authorities in the EU).
5. Cookies
The company's website operates using so-called cookies, which are essential for providing online services and are used to store data about the status of an individual website, to help collect statistics about users and website visits, etc. When entering the website, only cookies absolutely necessary for the website to function (e.g., for the shopping cart) are downloaded to the device. Other cookies will only be downloaded with the individual's consent. The individual can change the settings and delete cookies at any time (instructions can be found on the websites of individual browsers).
The website operated by the company uses the cookies listed in the cookie notice.
6. Data protection and data accuracy
The company handles information and infrastructure security (premises and application system software). Our information systems are protected, among other things, by antivirus programs and a firewall. We have implemented appropriate organisational and technical security measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, and against other unauthorised and illegal forms of processing. In the case of transmitting special types of personal data, we transmit them in an encrypted form and protected by a password. The individual is responsible for securely transmitting their personal data and for its accuracy and authenticity.
7. Individual rights regarding data processing
The data subject has the right to request access to personal data, rectification or erasure of personal data or restriction of processing concerning him or her, and object to processing and data portability. The individual's request will be handled in accordance with the provisions of the General Regulation and applicable personal data protection legislation.
All of the above rights and all questions can be exercised by an individual by sending a request to the company's address. The company will respond to the individual's request without undue delay, no later than one month after receiving the request. This deadline may be extended by a maximum of two additional months, considering the complexity and number of requests the individual will be informed of, together with the reasons for the delay. Exercising rights is free of charge for the individual, but the company may charge a reasonable fee if the request is clearly unfounded or excessive, particularly if repeated. In such a case, the company may also reject the request. In case of doubt about the identity of the individual, additional information that the company needs to establish the identity may be requested.
In the decision on the individual's request, the company will also inform the individual of the reasons for the decision and information about the right to file a complaint with the supervisory authority within 15 days of being notified of the decision. The individual may exercise the right to file a complaint with the supervisory authority at: The Information Commissioner of the Republic of Slovenia at the address: Dunajska 22, 1000 Ljubljana (e-mail address:
All registered users of websites under the company's umbrella are deemed to be aware of the contents of this privacy policy and to have accepted it. More about access levels and registered users in "Access Levels".
The Privacy Policy is effective from August 28, 2025.
Pobreška cesta 20
+386 2 333 13 60