Who controls your data
Optimiraj d.o.o.Cankarjeva ulica 5, 5000 Nova Gorica, Slovenia
info@optimiraj.com
The controller of personal data on this website is Optimiraj d.o.o., company registration number 9259724000. This policy covers visits to optimiraj.com and enquiries submitted through our form or by email.
The data we collect
First name, last name and email address are required in our contact form so that we can identify whom to contact and respond to your enquiry. The form cannot be submitted without them. Other details are optional; please provide only the information needed for your question or project.
- Contact details: first name, last name, email address and phone number if you provide one.
- Enquiry details: your selected service, any VR walkthrough package, your message and subsequent correspondence.
- Technical data: IP address, request time and access or error information needed to operate and protect the website. We also use the IP address to limit excessive form submissions.
Purposes and legal bases
We use your details to respond to your enquiry, prepare a quotation, discuss cooperation and communicate while delivering our services. We also send an acknowledgement through Resend. We do not use contact details from the form to send promotional messages.
- Preparing a quotation and performing a contract with you: taking steps at your request before entering into a contract, or performing that contract, under Article 6(1)(b) GDPR.
- General enquiries and communication with business representatives: our legitimate interest in handling business communication and maintaining business relationships, under Article 6(1)(f) GDPR.
- Security and preventing abuse: our legitimate interest in protecting the website, contact form and communications, under Article 6(1)(f) GDPR.
- Compliance with legal obligations: Article 6(1)(c) GDPR where particular business records must be retained by law.
Who processes your data
Authorised people at Optimiraj involved in handling your enquiry have access to it. We use the following providers to operate our services. We may also disclose information to competent authorities where required by law.
- Cloudflare: website hosting, content delivery and protection of website traffic.
- Resend: sending your enquiry to our business email address and an acknowledgement to your address.
- Microsoft email infrastructure: receiving and storing business email and handling subsequent correspondence.
Processing outside the EEA
Using these providers may involve processing outside the European Economic Area (EEA), particularly in the United States. According to its published information, Resend stores email content and logs in the United States even when a European sending region is selected.
Resend's terms provide for European Commission Standard Contractual Clauses for relevant transfers. Cloudflare and Microsoft also set out safeguards for international transfers in their terms, including Standard Contractual Clauses or valid adequacy decisions where applicable. You can read the providers' documents below. To request information about the safeguards applicable to your data or a copy of them, email info@optimiraj.com.
How long we keep data
We retain received enquiries and subsequent business correspondence, including personal data contained in these messages, in our business email inbox indefinitely. We have no predetermined deletion period and do not routinely delete these messages.
Retention by service providers is separate from retention in our business inbox. Resend states that it retains its copies of emails and logs for 30 days on its Free, Pro and Scale plans. This does not mean that messages delivered to our inbox are deleted after 30 days. Other plans, technical logs and backups may have different retention periods depending on the provider and service settings.
- Form submission limits: the IP address is used in temporary memory for a ten-minute limiting window. Expired entries are removed on the next check or when the service restarts. This is separate from any hosting security logs.
Cookies and tracking
We do not use analytics or advertising trackers on this website. The contact form and language selection do not require cookies; the page address determines the language.
Our hosting provider may use strictly necessary security cookies to protect against abuse. These protect the service. If we introduce additional technologies requiring consent, we will explain them and give you a choice before they are used.
Links to other websites, including provider websites and the OAsset application, lead to services with their own privacy information.
Your rights
To exercise your rights, email info@optimiraj.com. We respond without undue delay and within one month of receiving your request. Where the complexity or number of requests requires it, this period may be extended by up to two additional months; we will notify you and explain why within the first month. If we have reasonable doubts about the requester's identity, we may ask for additional information necessary to confirm it.
We do not use this data to make decisions based solely on automated processing that produce legal or similarly significant effects for you.
- You can request access to your data and correction of inaccurate information.
- Subject to GDPR conditions, you can request erasure or restriction of processing. Erasure is not available for information we still need to retain for legal obligations or necessary legal claims.
- You can object to processing based on legitimate interests on grounds relating to your particular situation.
- Data portability applies where processing is based on a contract or consent and carried out by automated means.
- If you believe processing infringes data protection law, you can complain to the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, or to the competent supervisory authority in your country of habitual residence or work.
Policy updates
We update this policy when our services, processing or applicable requirements change. The current version and update date appear on this page. We will provide appropriate notice of material changes affecting the processing of your data.