Last updated: [ 1. 4. 2026 ]
1. Controller
This website is operated by SIPRA d.o.o., Cesta k Tamu 70, SI-2000 Maribor, Slovenia, registration number 3779165000, VAT ID SI59928573 ("we", "us", "our", or the "Controller").
Contact:
E-mail: info@gekonn.com
Phone: +386 (0)2 618 56 20
If you have any questions about this Privacy Policy or the processing of your personal data, please contact us using the details above.
2. What this Privacy Policy covers
This Privacy Policy explains how we process personal data when you:
• visit our website;
• contact us through a contact form or by e-mail;
• request a quote, technical call, demo, technical PDF, brochure, or other materials;
• subscribe to newsletters or updates, if available; and
• interact with our website through cookies and similar technologies.
3. What personal data we may collect
Depending on how you interact with our website, we may collect the following categories of personal data:
A. Data you provide directly
• first name and last name;
• company name;
• job title or role;
• e-mail address;
• telephone number;
• country and company address, where relevant;
• details of your inquiry, request, project, or technical interest;
• any other information you choose to send us.
B. Data collected automatically
• IP address or approximate location derived from IP;
• browser type, operating system, device information, and language settings;
• pages visited, date and time of access, referrer URL, and interactions on the website;
• cookie identifiers, advertising identifiers, and similar online identifiers, where consent is given.
4. Purposes of processing and legal bases
We process personal data for the following purposes and on the following legal bases:
A. Responding to inquiries, requests, and technical or commercial communication
Purpose: to respond to your contact request, provide information, arrange a technical call, send a brochure or PDF, or prepare an offer.
Legal basis: Article 6(1)(b) GDPR where processing is necessary to take steps at your request before entering into a contract; or Article 6(1)(f) GDPR where communication takes place in a B2B context and our legitimate interest is to handle business inquiries efficiently.
B. Managing customer and prospect communication
Purpose: to keep internal records of business communication, follow up on open requests, and manage the sales process.
Legal basis: Article 6(1)(f) GDPR – our legitimate interest in managing business relationships and inquiries.
C. Website security, maintenance, and abuse prevention
Purpose: to protect the website, prevent misuse, troubleshoot technical issues, and maintain the integrity and security of our systems.
Legal basis: Article 6(1)(f) GDPR – our legitimate interest in website security and reliable operation.
D. Analytics
Purpose: to understand how users interact with the website and improve performance, content, usability, and design.
Legal basis: Article 6(1)(a) GDPR – your consent for non-essential analytics cookies.
E. Marketing and retargeting
Purpose: to measure campaign performance and, where you consent, show more relevant ads on services such as Google, Meta, and LinkedIn.
Legal basis: Article 6(1)(a) GDPR – your consent for marketing cookies and similar tracking technologies.
F. E-mail marketing
Purpose: to send newsletters, company updates, product news, and similar marketing communication, where this option is available.
Legal basis: Article 6(1)(a) GDPR – your consent.
G. Compliance with legal obligations and protection of legal claims
Purpose: to comply with legal obligations, accounting and tax rules where applicable, and to establish, exercise, or defend legal claims.
Legal basis: Article 6(1)(c) GDPR and/or Article 6(1)(f) GDPR.
5. Cookies and similar technologies
We use cookies and similar technologies on our website. Strictly necessary cookies are used to make the website function correctly. Analytics and marketing cookies are used only where you have given valid consent.
For more detailed information, including categories of cookies, purposes, and typical retention periods, please see our Cookie Policy.
6. Sources of personal data
We collect personal data:
• directly from you when you fill in a form, contact us, or otherwise communicate with us;
• automatically from your device and browser when you use the website; and
• from marketing or analytics providers only where you have consented to the relevant technologies.
7. Recipients and processors
We may share personal data with selected service providers acting on our behalf and under appropriate contractual safeguards. Depending on the tools actively used on the website, these may include providers in the following categories:
• website hosting and technical maintenance providers;
• website development and digital marketing support providers;
• analytics providers;
• advertising and retargeting platforms;
• e-mail marketing providers; and
• IT, security, backup, and communication providers.
Where relevant to the current website setup, service providers may include:
• AGENCIJA DAMN d.o.o. – website / digital marketing support, where engaged;
• Google – analytics, advertising, and consent-related services;
• Meta Platforms – campaign measurement and retargeting;
• LinkedIn – campaign measurement and B2B retargeting;
• Intuit Mailchimp – newsletter and e-mail marketing, if used.
We do not sell your personal data.
8. Transfers outside the EEA
Some of our service providers may process personal data outside the European Economic Area. Where this happens, we use an appropriate transfer mechanism recognised by the GDPR, such as:
• an adequacy decision of the European Commission; or
• the European Commission’s Standard Contractual Clauses, together with supplementary measures where required.
Where a provider is certified under an applicable adequacy framework, such transfer may also rely on that framework to the extent applicable.
9. How long we keep personal data
We keep personal data only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.
As a default retention schedule, we recommend the following:
• contact and inquiry data: up to 24 months from the last meaningful communication;
• quote / demo / technical call requests: up to 24 months from the last meaningful communication, unless the inquiry becomes part of a contract or formal business file;
• newsletter data: until you unsubscribe or withdraw consent, and in any case no longer than necessary for the mailing purpose;
• cookie consent records: for as long as necessary to demonstrate consent and preference choices;
• server logs and security logs: normally up to 90 days, unless a longer period is necessary for security, troubleshooting, or legal claims;
• accounting or contractual records: for the period required by applicable law.
10. Is providing personal data mandatory?
You are not required by law to provide personal data simply to browse the website.
However, fields marked as mandatory in contact, quote, or download forms are necessary for us to process your request. If you do not provide the required information, we may not be able to respond, provide the requested materials, or prepare an offer.
11. Your rights
Subject to the conditions and limitations set out in the GDPR, you have the right to:
• request access to your personal data;
• request rectification of inaccurate or incomplete data;
• request erasure of your personal data;
• request restriction of processing;
• object to processing based on our legitimate interests;
• receive your personal data in a structured, commonly used, machine-readable format where the right to data portability applies;
• withdraw consent at any time, where processing is based on consent; and
• lodge a complaint with the competent supervisory authority.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
12. Right to lodge a complaint
If you believe that your personal data has been processed in breach of applicable data protection law, you may contact us first so that we can try to resolve the issue. You also have the right to lodge a complaint with the competent supervisory authority.
In Slovenia, the competent authority is:
Information Commissioner of the Republic of Slovenia
Dunajska cesta 22
SI-1000 Ljubljana
E-mail: gp.ip@ip-rs.si
Phone: +386 1 230 97 30
13. Links to third-party websites
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We recommend that you read their privacy notices before providing personal data to them.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. The latest version will always be available on this website, together with the date of the last update.
