ENDESL
Let's talk

Privacy policy

This policy explains what personal data is processed when you visit this website or contact me, why, on which legal basis, and what rights you have. It is based on the EU General Data Protection Regulation (GDPR), the Slovenian Personal Data Protection Act (ZVOP-2) and the Slovenian Electronic Communications Act (ZEKom-2).

In short: this website uses no tracking, no analytics, no advertising and no third-party fonts. Personal data is only processed to deliver the website securely and to answer you when you get in touch.

1. Who is responsible

Žan Bezjak s.p.
Borovci 5c, 2281 Markovci, Slovenia
Email: zan@bezjak.ai

I am not required to appoint a data protection officer. For any privacy question, write to the address above.

2. Visiting this website

What is processed: when you open a page, your browser automatically sends technical data to the server: IP address, date and time of the request, the page requested, the referring page, browser type and operating system.

Why: to deliver the website to you and to keep it secure and stable, for example to detect and block attacks.

Legal basis: legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).

Hosting provider: the website is hosted on the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, which processes this data on my behalf under a data processing agreement (Art. 28 GDPR). Cloudflare keeps this data only for a limited period for delivery and security purposes. I do not use it to identify visitors and do not keep my own access logs.

3. Cookies, tracking and fonts

This website does not set cookies for analytics, marketing or tracking, and does not use any tracking tools, social media plugins or embedded third-party content. That is why there is no cookie banner.

If Cloudflare’s security features detect suspicious, possibly automated traffic, Cloudflare may place a short-lived, strictly necessary security cookie (for example __cf_bm). Such cookies are only used to protect the website and do not require consent (Art. 225 ZEKom-2; Art. 6(1)(f) GDPR).

All fonts are served from this website itself; no connection to Google Fonts or other font services is made.

4. Contacting me

What is processed: when you write to me by email, the data you provide: your name, email address, company (if given), the content of your message and any attachments, plus technical email metadata such as time of sending.

The contact form does not send anything to a server. It simply opens your own email program with your message pre-filled, so the message is sent by your own email provider like any normal email.

Why: to answer your enquiry and, if you wish, to prepare and carry out a project with you.

Legal basis: steps prior to entering into a contract and performance of a contract (Art. 6(1)(b) GDPR); for other enquiries, my legitimate interest in answering messages addressed to me (Art. 6(1)(f) GDPR).

How the email reaches me:

  • Incoming emails to zan@bezjak.ai are received by Cloudflare Email Routing (Cloudflare, Inc., address above) and forwarded to my mailbox. Cloudflare does not store or read the content of these emails.
  • My mailbox is provided by Google (Gmail). For users in the EU, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Emails are stored there and replies are sent from there.

Is it required? Providing your data is voluntary. Without an email address and a description of your request, I cannot reply.

5. Clients and business relationships

If we work together, I process the contact and contract data needed to carry out the project and to invoice it (Art. 6(1)(b) GDPR), and keep invoices and accounting records as required by Slovenian tax and accounting law (Art. 6(1)(c) GDPR).

6. How long data is kept

  • Enquiries that do not lead to a project are deleted at the latest 12 months after our last contact, unless you ask me to delete them earlier.
  • Project and contract correspondence is kept for as long as the business relationship lasts and for as long as statutory retention periods (tax and accounting law) or the assertion or defence of legal claims require.
  • Technical website data is kept by Cloudflare only for a limited period, as described in section 2.

7. Recipients

Personal data is only shared where this is necessary for the purposes above:

  • Cloudflare, Inc. (hosting and email forwarding), as processor;
  • Google (email provider);
  • tax advisers or accountants, if engaged, and public authorities where required by law.

I do not sell personal data or use it for advertising.

8. Transfers outside the EU

Cloudflare and Google may process data in the United States. Both companies are certified under the EU-U.S. Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023 (Art. 45 GDPR). In addition, the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR) serve as a safeguard.

9. No automated decisions

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

10. Your rights

You have the right to:

  • access the personal data I hold about you (Art. 15 GDPR);
  • have inaccurate data corrected (Art. 16);
  • have your data erased (Art. 17);
  • restrict processing (Art. 18);
  • receive your data in a portable format (data portability, Art. 20);
  • object to processing based on legitimate interests, on grounds relating to your particular situation (Art. 21).

To exercise these rights, simply email zan@bezjak.ai. I will respond without undue delay and at the latest within one month.

11. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work. For this website, the competent authority is:

Informacijski pooblaščenec (Information Commissioner of the Republic of Slovenia)
Dunajska cesta 22, 1000 Ljubljana, Slovenia
gp.ip@ip-rs.si · www.ip-rs.si

12. Security

The website is only delivered over an encrypted connection (HTTPS/TLS). Access to my mailbox is protected by two-step verification.

13. Changes

I update this policy when the website, the services used or the legal requirements change. The current version is always available on this page.

Last updated: 6 November 2026