Privacy Policy
Last updated:
1. Who we are
uWeb d.o.o. ("we", "us", "our") is the data controller for personal data collected through this website (uweb.si). You can contact us at [email protected].
2. What data we collect
We collect personal data only when you actively provide it:
- Contact form: name, email address, phone number (optional, only for urgent issues), company name (optional), website address (optional), the type of enquiry, services, budget and timeline you select, your answers and your message. We also record which page you sent it from and, if you arrived from one of our ads, the campaign details in the link (e.g.
utm_source,gclid). If you send us site check results, they are included too. This data is used solely to respond to your enquiry and to know which of our pages and ads bring enquiries. - Email correspondence: any data you include when emailing us directly.
Free tools: the calculators run entirely in your browser and send nothing to us. The site check sends the website address you enter to our server, which fetches that site, looks up its public DNS and domain registration records, and asks Google PageSpeed Insights to test it. The latest results for each checked address (data about that website only) are kept for 30 days so shared links keep working, then deleted. We may review these saved results, which contain no personal data, to see how the tool is used and improve it. To prevent abuse we count checks per network using a one-way hash of your IP address, deleted within an hour. We do not link checks to you unless you choose to send us the results.
Cookies and similar tech: when you first visit, we ask which categories you allow: analytics (Google Analytics) and marketing (measuring our ads on Google and, when we advertise there, Meta, LinkedIn and Microsoft). Both are pre-selected; you can untick either under "Choose" before confirming, and change your choice at any time via "Cookie settings" in the footer. Until you confirm, no analytics or advertising cookies are set. Google's tags still load in a restricted, cookieless mode (Google Consent Mode) and send basic signals, such as that a page was viewed or a form was sent, without identifiers stored on your device. Google uses these to estimate totals. Meta, LinkedIn and Microsoft tags only load after you accept marketing. See Section 5 for details.
Stored in your browser: your theme choice, cookie choice and your recent site checks (local storage, never sent to us), and for the length of your visit the ad campaign details from the link you arrived on (session storage), so they can be attached if you send an enquiry.
3. Legal basis for processing
Analytics and marketing cookies are used only with your consent (Article 6(1)(a) GDPR), which you can withdraw at any time via "Cookie settings". We process contact form data on the basis of legitimate interests (Article 6(1)(f) GDPR), specifically responding to business enquiries. You are not required to provide this data; if you prefer, you can contact us by email directly.
You have the right to object to processing carried out on the basis of legitimate interests at any time. See Section 7.
4. How long we keep your data
Contact form submissions are forwarded to our internal email and retained for as long as necessary to respond to your enquiry and for normal business record-keeping. If an ongoing client relationship is established, relevant data is retained for the duration of that relationship and up to 5 years thereafter for legal and accounting purposes. You may request deletion at any time by emailing [email protected] and we will respond within 30 days.
5. Third-party processors
- Cloudflare (network and security): all traffic to this site passes through Cloudflare, which protects it from attacks and speeds up delivery. Cloudflare processes your IP address and technical request data for this purpose. Legal basis: legitimate interests (security and availability of the site).
- Cloudflare Turnstile: used on our contact form and site check tool to prevent automated abuse. Cloudflare may process your IP address and browser data to verify your request. Legal basis: legitimate interests (preventing automated spam). See Cloudflare's privacy policy.
- Google Analytics and Google Ads: we use Google Analytics 4 to understand how the site is used (pages visited, session duration, device type, form steps) and Google Ads to measure whether our ads lead to enquiries. With your consent they set cookies (e.g.
_ga,_gcl_au); without it they run in Google Consent Mode and send cookieless signals only. Data is processed by Google and may be transferred outside the EEA under the EU-US Data Privacy Framework and standard contractual clauses. See Google's privacy policy. - Meta, LinkedIn and Microsoft advertising tags: only if you accept marketing cookies and only while we run campaigns on those platforms. They measure visits and enquiries that come from our ads. If you send an enquiry with marketing accepted, we also send Meta a Lead event from our server with your email, name and phone number in hashed (irreversibly scrambled) form, plus your IP address and browser type, so Meta can match it to an ad you saw. See the privacy policies of Meta, LinkedIn and Microsoft.
- Google PageSpeed Insights: when you run the site check, the website address you entered (not your IP address or any personal data) is sent to Google's PageSpeed Insights API to measure speed and quality. See Google's privacy policy.
- Calendly: our "Book a free call" button uses Calendly, a third-party scheduling service operated by Calendly LLC. Calendly is only activated when you explicitly click the booking button; no scripts or cookies are loaded passively. If you proceed with booking, Calendly will collect your name, email address and timezone to schedule the appointment. This data is processed by Calendly LLC and subject to their privacy policy. We receive a confirmation email with your contact details solely for the purpose of conducting the scheduled call. Legal basis: processing necessary at your request prior to entering into a service relationship (Article 6(1)(b) GDPR).
6. Data transfers
This website is hosted in the EU. Some of the processors listed in Section 5 (Cloudflare, Google, Calendly, and Meta, LinkedIn and Microsoft where used) may process data outside the European Economic Area. They do so under the EU-US Data Privacy Framework, standard contractual clauses or equivalent safeguards.
7. Your rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing (including objecting to processing based on legitimate interests)
- Request data portability
- Withdraw consent (where processing is based on consent) at any time, without affecting the lawfulness of prior processing
To exercise any of these rights, email [email protected]. We will respond within 30 days.
8. Supervisory authority
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Information Commissioner of Slovenia (IP RS), which is the supervisory authority for data protection in Slovenia.
9. Automated decision-making
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.
10. Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Material changes will be communicated via email where we hold your contact details.