Privacy and cookies
What personal data we collect, why, how long we keep it and what your rights are.
This is a translation. If the language versions differ, the Slovene version applies.
Who is responsible for your data
The data controller is Nikola Spasić s.p., Trg komandanta Staneta 8, 1000 Ljubljana, Slovenia (hereinafter PreveriAvto). For any question about your data, write to info@preveriavto.si or call +386 69 348 883.
What we collect and why
Enquiries and bookings
When you send us an enquiry (using the form, by phone, by email, on WhatsApp or on Viber), we process the details you give us: your name, phone number, email address, the car's details (VIN or make, model, year, engine, fuel, gearbox and mileage), the link to the listing, where the car is, the time that suits you and your message.
We use them to reply to you, arrange the appointment and carry out the inspection. The legal basis is entering into and performing a contract (Article 6(1)(b) of the General Data Protection Regulation, GDPR).
The inspection and the report
During the inspection we collect data about the car: the VIN, the number plate, the mileage, data from the control units, measurements and photos of the car. We photograph the car, not people. Together with your name, this data makes up the report we email to you. The legal basis is performing the contract.
The seller's details
To arrange the appointment we need the seller's name and phone number and where the car is. We get them from the buyer who ordered the inspection or from the listing, and use them only to arrange the inspection. The legal basis is our legitimate interest in providing the service ordered (Article 6(1)(f) GDPR). If you are a seller, you have the same rights as our customers.
Invoices and payments
For the invoice we use your name, where needed your address or company details, the service, the amount and the payment method. Invoices for cash and card payments are fiscally verified with the Financial Administration of Slovenia. The legal basis is tax and accounting law (Article 6(1)(c) GDPR).
Visiting the website
The site uses no analytics, advertising or tracking tools. Our hosting provider Cloudflare processes technical data about each visit (IP address, time of the visit, the page requested and the browser type) to deliver the site and protect it from attacks. The legal basis is our legitimate interest in running the site securely.
The photos on the site load from Unsplash's servers, so Unsplash receives your IP address and browser details when you view the page.
The calculators on the site run entirely in your browser. Nothing you enter in them is sent to us.
Who we share data with
We don't sell your data or use it for advertising. Only service providers who help us with our work have access to it, and only as far as they need:
- Cloudflare, Inc. (USA): website hosting and security,
- Web3Forms (Web3Creative, India): forwarding messages from the booking form to our email address,
- the email provider for info@preveriavto.si,
- our accountant, bank and card payment provider, where needed for an invoice or payment,
- WhatsApp (Meta) or Viber (Rakuten), if you contact us through those apps; their own privacy rules apply.
We also pass on data to public authorities where the law requires it.
Transfers outside the EU
Cloudflare and Unsplash also process data in the USA, and Web3Forms in India, the USA and the EU. Cloudflare is certified under the EU-U.S. Data Privacy Framework. Transfers to Web3Forms are covered by the European Commission's standard contractual clauses.
How long we keep data
- Enquiries that didn't lead to a booking: 12 months, then deleted.
- Reports, photos and data from inspections, including sellers' details: 5 years from the inspection, so that we can answer any questions or claims, then deleted.
- Invoices: 10 years after the end of the year in which they were issued, as tax law requires.
Your rights
You can ask at any time for access to your data, for it to be corrected or deleted, for processing to be restricted and for your data to be transferred. You can object to processing based on legitimate interest. Write to info@preveriavto.si; we reply within one month. Data we must keep by law (such as invoices) can't be deleted before the period ends.
If you think we process your data unlawfully, you can complain to the Slovenian Information Commissioner (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, ip-rs.si.
We don't use automated decision-making or profiling.
Cookies
The site uses no cookies or similar technologies (such as the browser's local storage) for analytics, advertising or tracking, so we don't ask for your consent and there is no cookie banner.
Occasionally Cloudflare may set a technical cookie (for example __cf_bm or cf_clearance) when it checks that traffic comes from a person and protects the site from attacks. Such a cookie is strictly necessary for the site to run securely, so under Article 225 of the Slovenian Electronic Communications Act (ZEKom-2) it doesn't require consent. You can delete it in your browser at any time.
If we ever start using other cookies, we will update this page and ask for your consent first.
Security and changes
The site runs over an encrypted connection (HTTPS). Only we and the providers listed above have access to your data. We may change this policy; the current version is always published on this page with the date it applies from. The policy is published in Slovene, English and Serbian; if the versions differ, the Slovene version applies.