Data Privacy Policy

Last updated: 15th January 2026

Data Controller Information

This privacy policy explains how infrahubluxum d.o.o. ("we", "us", "our") collects, uses, and protects your personal information when you visit our website or use our services. We are the data controller for the purposes of the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Data Collection

We collect various types of personal data when you interact with our website and services. The data we collect includes information you provide directly to us and information collected automatically through your use of our website.

When you contact us through our website forms, subscribe to our newsletter, or engage our services, we may collect your name, email address, phone number, company name, project details, and any other information you choose to provide. We also collect technical information automatically, including your IP address, browser type, operating system, referring website, pages visited, and time spent on our website.

How We Use Your Information

We use the personal data we collect for various legitimate business purposes. How we use your information depends on the specific services you use and how you interact with our website.

We use your data to provide and improve our construction software comparison services, respond to your enquiries and requests, send you information about our services that may be of interest to you, analyse website usage to improve user experience, comply with legal obligations, and protect our rights and interests. We may also use aggregated and anonymised data for research and analytical purposes.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please see our Cookie Policy.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities, such as marketing communications
• Contract: When processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract
• Legitimate Interests: When we have a legitimate business interest that is not overridden by your privacy rights
• Legal Obligation: When we need to process your data to comply with legal requirements

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

• With trusted service providers who assist us in operating our website and conducting our business, provided they agree to keep your information confidential
• When required by law, court order, or government regulation
• To protect our rights, property, or safety, or that of our users or the public
• In connection with a business transfer, merger, or acquisition

International Data Transfers

As we are based in Slovenia (EU), your data is primarily processed within the European Economic Area (EEA). If we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention period depends on the type of data and the purpose for which it was collected.

Generally, we retain contact information and correspondence for up to 7 years after our last interaction, website analytics data for up to 26 months, and marketing consent records until you withdraw consent or for up to 3 years if there is no engagement.

Your Rights

Under GDPR and other applicable privacy laws, you have several rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can ask us to correct inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can ask us to limit how we use your data
• Right to Data Portability: You can request your data in a portable format
• Right to Object: You can object to certain types of processing, including direct marketing
• Right to Withdraw Consent: You can withdraw consent at any time where we rely on consent for processing

Security Measures

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments.

Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will take steps to delete it promptly.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions about this privacy policy, want to exercise your rights, or have concerns about how we handle your personal data, please contact us:

You also have the right to lodge a complaint with the relevant supervisory authority if you believe we have not handled your personal data in accordance with applicable law. In Slovenia, this is the Information Commissioner (Informacijski pooblaščenec).