Last updated: July 1, 2026

At HACCPal, we respect your privacy and protect your personal data in accordance with Regulation (EU) 2016/679 (GDPR), the Personal Data Protection Act (ZVOP-2), and other applicable legislation.

This Privacy Policy explains what personal data we collect, why we process it, how we protect it, and what rights you have as an individual.

1. Personal data controller

The personal data controller is:

Smartis d.o.o.

Address: Ameriška ulica 8, 1000 Ljubljana

Email: info@haccpal.com

2. What personal data do we collect?

When you visit the website, we may collect the following data:

• first and last name (if you provide them in the contact form),

• email address,

• phone number (if you provide it),

• company name (if you provide it),

• the content of your message,

• IP address,

• device and browser data,

• website usage data,

• data collected via cookies, if you consent to their use.

You provide us with personal data voluntarily.

3. Purpose of processing personal data

We process your personal data for the following purposes:

• responding to enquiries and questions,

• preparing offers at your request,

• communicating with you,

• improving the operation of the website,

• ensuring website security,

• fulfilling legal obligations.

If you provide specific consent, we may also use your data to inform you about news, services, or other content from HACCPal.

4. Legal bases for processing

We process personal data on the basis of one or more of the following legal bases:

• your consent,

• carrying out activities prior to entering into a contract at your request,

• fulfilling legal obligations,

• the controller’s legitimate interest in ensuring security and improving the website.

5. Retention of personal data

We retain personal data only for as long as necessary to achieve the purpose for which it was collected.

Data from contact forms is generally retained until the communication is concluded, or at most for as long as required by applicable regulations or legitimate business interests.

If you have consented to receive news, we retain your data until you withdraw your consent.

6. Disclosure of personal data

We do not sell your personal data and do not disclose it to third parties, except where this is necessary to provide our services or where required by law.

Personal data may be disclosed to contractual processors who provide the following for us:

• website hosting,

• maintenance of information systems,

• analytics tools,

• sending email,

• other services necessary for the operation of the website.

All contractual processors are required to ensure appropriate protection of personal data.

7. Cookies

The website uses cookies to ensure proper operation, analyse visits, and improve the user experience.

More detailed information about the use of cookies is available in the Cookie Policy.

8. Security of personal data

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure.

Only authorised persons who need personal data to perform their work have access to it.

9. Your rights

In accordance with the GDPR, you have the following rights:

• the right to access your personal data,

• the right to rectify inaccurate data,

• the right to erasure of personal data where the legal conditions are met,

• the right to restriction of processing,

• the right to data portability,

• the right to object to processing,

• the right to withdraw consent where processing is based on consent.

You may exercise your rights by writing to us at the email address provided above.

10. Right to lodge a complaint

If you believe that we process your personal data in violation of applicable legislation, you have the right to lodge a complaint with:

Information Commissioner of the Republic of Slovenia

Dunajska cesta 22

1000 Ljubljana

Email: gp.ip@ip-rs.si

Website: https://www.ip-rs.si

11. Changes to the Privacy Policy

We may update this Privacy Policy from time to time due to changes in legislation, our services, or the way we process personal data.

The current version is always published on this website.

12. Contact

If you have questions about personal data protection or wish to exercise your rights, please contact us:

Smartis d.o.o.

Email: info@haccpal.com

Address: Ameriška ulica 8, 1000 Ljubljana