Privacy Policy

Last updated: 2025-10-22

1) Who we are (Controller)

This website is operated by AGENCIJA AG64 d.o.o., registered at the address: Jalnova ulica 70, 1000 Ljubljana, Slovenia.

Contact (privacy): sales@ag64.eu, +386 40 238 204.

2) What personal data we process
  • Contact & enquiry data: name, email, phone, message text, vessel of interest, preferred time to contact, attachments.
  • Sales & service data: purchase/ownership details, service requests, preferred options, billing/shipping details.
  • Marketing preferences: newsletter opt‑in, communication channels, consent logs.
  • Website & device data: pages viewed, events, session IDs, cookie IDs, truncated IP, browser/device info, approximate location (city/region).
  • Job applications (if used): CV, cover letter, references.

Sources: directly from you (forms, email, phone), automatically via cookies/SDKs, and (rarely) from public sources or partners when lawful.

3) Purposes & legal bases (GDPR Art. 6)
  • Responding to enquiries / pre‑contract steps — Art. 6(1)(b) and our legitimate interests to provide support — Art. 6(1)(f).
  • Sales, delivery, warranty & service — Art. 6(1)(b).
  • Accounting & compliance — legal obligations — Art. 6(1)(c).
  • Website analytics/measurement (GA4), A/B tests, conversion tracking (Ads) — consent via cookie banner — Art. 6(1)(a).
  • Direct marketing to customers — legitimate interests — Art. 6(1)(f) (you can object at any time).
  • Newsletter to non‑customers — consent — Art. 6(1)(a).
  • Security & fraud prevention — legitimate interests — Art. 6(1)(f).
  • Defense of legal claims — legitimate interests — Art. 6(1)(f).
4) Cookies, analytics & online identifiers

We use strictly necessary cookies (for site operation) and, with your consent, analytics/measurement and marketing cookies.

When enabled, we use Google Analytics 4 and may use Google Tag Manager and Google Ads conversion/remarketing tags. The EU contracting entity is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We configure analytics to store event data only for the selected retention period (typically 2–14 months) and to avoid collecting data categories not needed for measurement. You can withdraw consent at any time via [Cookie settings] on our site.

5) Recipients & processors

We share data only as needed:

  • Hosting & IT providers (website hosting, backup, CDN, security).
  • Email/communications providers (transactional email, anti‑spam).
  • Analytics/ads providers (if consented): Google Analytics/Ads (Google Ireland Limited), potentially others you configure later.
  • Professional advisers (legal, accounting) where necessary.

All vendors act on our instructions under data‑processing agreements.

6) International transfers

Some providers may process data outside the EEA. Where this occurs, we rely on applicable safeguards (e.g., EU Standard Contractual Clauses and/or the provider’s participation in an adequacy framework) plus additional technical and organizational measures.

7) Retention

We keep data only as long as necessary:

  • Enquiries: up to 24 months after closing the thread (or earlier upon your request, unless needed to defend claims).
  • Customer/contract & invoicing data: for the period required by accounting/tax law (e.g., up to 10 years).
  • Analytics identifiers: per tool configuration (e.g., 2–14 months).
  • Consent logs: for the limitation period of potential claims.
8) Your rights (GDPR)

You have the right to access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interests, as well as to withdraw consent at any time (without affecting prior lawful processing).

9) How to exercise your rights

Email us at sales@ag64.eu. We may verify your identity before responding.

10) Supervisory authority (Slovenia)

You can lodge a complaint with the Information Commissioner of the Republic of Slovenia:

  • Informacijski pooblaščenec, Dunajska cesta 22, 1000 Ljubljana, Slovenia.
  • Tel: +386 1 230 97 30, Email: gp.ip@ip-rs.si, Website: https://www.ip-rs.si.
11) Children

Our services are not directed to children. We do not knowingly collect data from children. If you believe a child has provided data, contact us to delete it.

12) Changes to this Policy

We may update this Policy. Material changes will be indicated on this page with a new “Last updated” date.