Privacy policy
1. Controller
The controller of your personal data is APRO Pixels d.o.o., Mušenik 19, 2393 Črna na Koroškem, Slovenia, e-mail info@apropixels.com, phone +386 70 554 155. We process personal data in accordance with the General Data Protection Regulation (GDPR) and Slovenian data protection law (ZVOP-2).
2. What we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Replying to an enquiry sent via the form | company name, e-mail, phone, existing website, message | steps prior to entering into a contract (Art. 6(1)(b) GDPR) | 12 months after last contact |
| Registration and use of the platform | name, e-mail, password (hashed), company details, history of requests and messages | contract (Art. 6(1)(b)) | for the duration of use and 5 years after termination (tax rules for invoices) |
| Billing and invoicing | company details, address, payment details | legal obligation (Art. 6(1)(c)) | 10 years (Slovenian VAT Act) |
| Visit statistics and ad performance | pseudonymous identifiers, pages viewed, device, approximate location | consent (Art. 6(1)(a)) via the cookie banner | up to 14 months or until withdrawal |
| Security and server operation | IP address, time of access, requested URL | legitimate interest (Art. 6(1)(f)) – protection against abuse | 30 days |
3. Who has access to the data
Data is processed by the controller's staff who need it to deliver the service and by the following processors under data processing agreements:
- hosting and content delivery – servers in the EU (netcup GmbH, Germany; BunnyWay d.o.o., Slovenia),
- card payments – Stripe Payments Europe Ltd. (Ireland); we do not store card details ourselves,
- e-mail delivery – transactional messages (confirmations, notifications) via our mail server in the EU,
- statistics – Google Ireland Ltd. (Google Analytics 4) and Meta Platforms Ireland Ltd. (Meta Pixel), only with your consent. These providers may transfer data to the USA under the EU-U.S. Data Privacy Framework.
We do not sell data and do not pass it on to third parties for their own purposes.
4. Processing on behalf of our customers
Where a customer's website hosted on the Pixie Pilot platform collects data from its visitors (forms, orders, bookings, newsletter sign-ups), the customer is the controller of that data and we act as a processor under their instructions. For questions about such data please contact the owner of the website in question.
5. Your rights
You may at any time request access to your data, its correction, erasure, restriction of processing or portability, object to processing based on legitimate interest, or withdraw consent (withdrawal does not affect the lawfulness of processing before it). Send your request to info@apropixels.com; we reply within 30 days. If you believe we process your data unlawfully, you may lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska 22, 1000 Ljubljana, www.ip-rs.si.
6. Security
We use encrypted connections (HTTPS), hashed password storage, restricted system access, daily backups and monitoring. Platform access is password-protected; we recommend a strong, unique password.
7. Cookies
The use of cookies and similar technologies is described in the Cookie policy.
8. Changes
We may update this policy. The current version is always published on this page with the effective date shown above.