Privacy Policy
1. Introduction
This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) – EU 2016/679 and applicable national data protection laws.
2. Data Controller
TEA VUCKOVIC
Ljubljana
Slovenia
Email: info@teavuckovic.eu
3. What Data We Collect
3.1 Data collected automatically
- Technical data: IP address, browser type and version, operating system, screen resolution, referring URL, pages visited, time spent on pages, date and time of access
- Cookies and similar technologies: See our Cookie Policy for full details
3.2 Data you provide voluntarily
Our website does not have contact forms, user registration, or any mechanism that collects personal data directly. If you choose to contact us via the email or phone number displayed on our website, standard communication data (your name, email address, message content) is processed through your own email/phone provider, not through our website.
4. How We Use Your Data
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Website functionality and security | Legitimate interest (Art. 6(1)(f)) |
| Analytics and site improvement | Consent (Art. 6(1)(a)) |
| Marketing and advertising | Consent (Art. 6(1)(a)) |
| Responding to inquiries | Legitimate interest / contract performance (Art. 6(1)(b),(f)) |
| Legal obligations | Legal obligation (Art. 6(1)(c)) |
5. Third-Party Services
We use the following third-party services that may process your data:
5.1 Google Analytics (Google LLC)
We use Google Analytics 4 to understand how visitors use our website. Google Analytics collects data such as pages visited, session duration, and approximate location (country/city level). This data is processed by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google is certified under the EU-US Data Privacy Framework. Google Privacy Policy.
5.2 Google Tag Manager (Google LLC)
Google Tag Manager is used to manage tracking scripts on our website. It does not collect personal data itself but facilitates loading of other services. Google Privacy Policy.
5.3 Meta/Facebook Pixel (Meta Platforms, Inc.)
We use Meta Pixel for advertising measurement and audience targeting. Meta processes data such as pages visited, actions taken, and device information. Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Meta Privacy Policy.
5.4 Embedded Content
Our website may embed content from third-party platforms. These embeds are blocked by default until you give consent via our cookie banner. When loaded, these services may collect data according to their own privacy policies:
- YouTube (Google LLC) – Privacy Policy
- Spotify (Spotify AB) – Privacy Policy
- SoundCloud (SoundCloud Global Limited) – Privacy Policy
6. Data Retention
- Analytics data: Automatically deleted after 14 months (Google Analytics default)
- Cookie consent record: Stored for up to 365 days
- Contact/booking inquiries: Retained for as long as necessary to fulfill the request, then deleted within 12 months
- Server logs: Automatically deleted after 30 days
7. Your Rights Under GDPR
We do not store any personal data on our website or servers. We do not have user accounts, contact forms, or databases containing personal information. The only data processing happens through third-party services (Google Analytics, Meta Pixel) when you give consent via cookies.
Nevertheless, under the GDPR you have the following rights, which primarily apply to data collected by third-party services on our behalf:
- Right to withdraw consent (Art. 7(3)) – Withdraw cookie consent at any time via the “Cookie Settings” link in our footer. All non-essential cookies will be immediately deleted
- Right of access (Art. 15) – Request information about what data third-party services have collected through our website
- Right to erasure (Art. 17) – Request deletion of data collected by third-party services through our website
- Right to object (Art. 21) – Object to data processing at any time
To exercise any of these rights, contact us at info@teavuckovic.eu. We will respond within 30 days. You can also contact the third-party services directly via their privacy policies linked in section 5.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for all data in transit
- Regular security updates and patches
- Access controls limiting who can access personal data
- Self-hosted fonts (no external font API requests)
9. International Data Transfers
Some of our third-party service providers (Google, Meta) are based in the United States. These transfers are protected by the EU-US Data Privacy Framework and/or Standard Contractual Clauses (SCCs) as approved by the European Commission.
10. Children’s Privacy
Our website is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
11. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For Slovenia: Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page. We encourage you to review it periodically.
Last updated: April 7, 2026