Privacy Policy of Sevate d.o.o.

Data Controller:
Sevate d.o.o.
Ob gozdu 18, 2314 Zgornja Polskava
Email: info@sevate.si

At Sevate d.o.o. (hereinafter: “Sevate”, “we” or “controller”), we are aware of the importance of personal data protection. As a provider of process automation solutions, we collect only the minimum amount of personal data necessary for the operation of our website and communication with you.

This privacy policy is compliant with Regulation (EU) 2016/679 (GDPR) and the applicable Personal Data Protection Act (ZVOP-2).

1. What personal data do we collect and where?

We collect personal data at the following points:

a) Web analytics and cookies

When you visit our website, we use a web analytics tool (e.g. Google Analytics). The following web identifiers and technical data are collected:

IP address (anonymized)
Browser and device type
Time of visit and pages viewed

Note: This data is processed exclusively in aggregated and anonymized form for statistical purposes of website improvement.

b) Contact form

Location: https://sevate.si/en/contact
Data collected: First and last name, email address, message content (entered voluntarily).

c) Career opportunities form

Location: https://sevate.si/career-opportunities
Data collected: First and last name, email address, phone number, message content (cover letter) and attachments (CV).

2. Purpose of collection and legal basis

ANALYTICS

Purpose of processing: Ensuring proper functioning of the website and analyzing traffic to improve user experience.

Legal basis (GDPR article): Legitimate interest (Article 6(1)(f)) for strictly necessary cookies.

CONTACT FORM

Purpose of processing: Responding to your inquiry or business question.

Legal basis (GDPR article): Performance of pre-contractual measures at your request (Article 6(1)(b)).

CAREER OPPORTUNITIES

Purpose of processing: Processing your job application and conducting the selection process.

Legal basis (GDPR article): Performance of pre-contractual employment measures (Article 6(1)(b)).

3. Data retention period

We retain personal data only for as long as necessary to achieve the purpose for which it was collected:

Analytics data: Retained for a maximum of 14 months (or a shorter period as set in Google Analytics settings).
Contact messages: Retained for 6 months after the end of communication, unless a business relationship arises from the communication (in which case accounting legislation retention periods apply).
Job applications (Careers): In case of non-selection, data is deleted 1 month after the conclusion of the selection process. If we wish to retain your application for possible future openings, we will obtain your explicit consent.

4. Data security

We use appropriate technical and organizational measures to protect against loss, misuse or unauthorized access. These measures include:

Transfer encryption: All communication with our website takes place over a secure SSL/TLS connection.
Backup: Data on the server is regularly backed up and protected with security plugins (firewall).
Access restriction: Your data is accessible exclusively to authorized persons within Sevate (employees in HR or management), who are bound by confidentiality.

5. Your rights

Under GDPR you have the following rights:

Right of access: You can request information about what personal data we hold about you at any time.
Right to rectification: Request correction of inaccurate or incomplete data.
Right to erasure (“Right to be forgotten”): Request permanent deletion of data if there is no legal obligation to retain it.
Right to restriction of processing: Temporary prohibition of the use of your data.
Right to data portability: Obtaining data in a structured, machine-readable format.
Right to object: Object to processing based on legitimate interest (including profiling).
Right to withdraw consent: If you have given consent for processing, you can withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

6. How to exercise your rights?

To exercise any of the above rights (access, rectification, erasure), please send a written request to: info@sevate.si

We will respond to your request within one month at the latest (in complex cases the deadline may be extended by an additional two months, of which we will notify you). To confirm your identity, we may request additional proof (e.g. a reply from the same email address that is the subject of the request).

Deletion and modification option: WordPress, on which our site is hosted, allows administrative deletion of your personal data from the database (e.g. submitted forms). If you have submitted a job application and wish to withdraw your data, please notify us at the above contact.

Complaint to supervisory authority: If you believe that the processing of your personal data violates GDPR, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si).

7. Policy updates

This privacy policy may be updated from time to time. We will notify you of any significant changes with a notice on the website. Date of last update: 14.4.2026.