Privacy policy and personal data protection

This policy explains which personal data we process when you visit the 4tech-agency.com website or contact us, why we process it and what rights you have in relation to it. It is written in accordance with the General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (Zakon o varstvu osebnih podatkov, ZVOP-2).

Who the controller is

The controller of personal data is:

Spletne storitve, Aljaž Polh s.p. (trademark 4tech)
Slavina 54A, 6258 Prestranek, Slovenia
Company registration no.: 9333118000
Tax no.: 32920121 (not registered for VAT under Article 94(1) of the Value Added Tax Act, ZDDV-1)
Email: info@4tech-agency.com
Phone: +386 41 221 265

We have not appointed a data protection officer, because we do not meet the conditions for doing so under Article 37 of the GDPR. For any privacy questions, write directly to info@4tech-agency.com.

What data we process

Data you give us yourself

You can give us data by email, by phone or through one of the three forms on the website. We process only what you enter yourself:

Contact form (/contact/): name, email address, phone, company name and the content of your inquiry.
Free check sign-up (/free-seo-geo-aeo-check/): domain, email address, optionally a phone number and your question.
Audit order (/seo-geo-aeo-audit/): domain, first and last name, address, postcode and city, email address, optionally company name, tax number, phone and notes. We also record that you accepted the terms of use and whether you requested that performance start before the 14-day withdrawal period expires. We record the latter because the running of that period depends on it and we must be able to prove it.

Every form submission is stored in our system and sent to us by email. On submission we also record the IP address, browser information, the address of the page from which the form was submitted and campaign tags (utm), if you came to the site through an ad or a link in an email. We keep this to prevent abuse and to prove when an order was submitted.

We do not collect payment data. Payment is made on the basis of a pro forma invoice, by bank transfer to our account; you do not enter card details or details of your bank account on the website.

Data generated automatically

On every visit the server records technical data in log files: IP address, date and time of the request, the requested URL, browser and operating system type, and the referring page. These records are generated automatically and are necessary for the operation and security of the website.

Purposes and legal bases of processing

Replying to your inquiry and preparing a quote: the legal basis is the performance of a contract or steps taken at your request prior to entering into a contract (point (b) of Article 6(1) GDPR).
Accepting and fulfilling an order and issuing a pro forma invoice and an invoice: performance of a contract (point (b)) and compliance with legal obligations, in particular tax and accounting obligations (point (c)). The address and tax number are required precisely because the law requires an invoice to contain the buyer’s details.
Proving consents given with an order: we keep the record of your acceptance of the terms of use and of any request to start performance before the withdrawal period expires in order to comply with obligations under the Consumer Protection Act (Zakon o varstvu potrošnikov) (point (c)) and on the basis of our legitimate interest in being able to prove what was agreed in the event of a dispute (point (f)).
Operation and security of the website and prevention of abuse: our legitimate interest in keeping the website running and protected against attacks (point (f)).

We do not use personal data for profiling or for automated decision-making with legal effect.

Cookies

Without your consent, the 4tech-agency.com website sets only strictly necessary cookies. We use Google Analytics only if you consent to analytics cookies in the cookie banner, and Meta Pixel only if you consent to advertising cookies; without consent, neither tool is loaded at all and no cookie is set. You can withdraw or change your consent at any time through the cookie settings icon visible on every page; tracking then stops.

Strictly necessary cookies (consent is not required for them under Article 225 of the Electronic Communications Act, ZEKom-2):

PH_HPXY_CHECK: a technical cookie of the hosting server that ensures requests are routed correctly. It is a session cookie, flagged HttpOnly, Secure and SameSite=Strict, and contains no data that could identify you.
cookieyes-consent: stores your choice in the cookie banner, so the banner does not ask you on every visit. It is valid for one year and contains no data that could identify you.

Analytics cookies (set only with your consent; the legal basis is consent under point (a) of Article 6(1) GDPR and Article 225 of ZEKom-2):

_ga: Google Analytics; a random identifier the tool uses to tell visitors apart. Valid for two years.
_ga_6L2417CSVT: Google Analytics; session state for measuring visits. Valid for two years.

We use Google Analytics with Google’s Consent Mode v2 enabled, without advertising features and without linking the data to other Google services. The provider is Google Ireland Limited (see the section on external services).

Advertising cookies (set only with your consent; the legal basis is consent under point (a) of Article 6(1) GDPR and Article 225 of ZEKom-2):

_fbp: Meta Pixel; a random browser identifier for measuring the effectiveness of our ads on Facebook and Instagram. Valid for three months.
_fbc: Meta Pixel; a record of a click on our ad (fbclid), so we can attribute a form submission to the ad. Valid for three months.

We use Meta Pixel to measure which of our ads lead to a free check sign-up or an audit order. When you submit a form with your consent, we also send Meta a server-side record of the event (Conversions API), in which the email address is hashed (SHA-256) and not readable; without consent we do not send it. The provider is Meta Platforms Ireland Limited (see the section on external services).

If you are logged in to the WordPress editor interface, login cookies are also set; these are strictly necessary for the login to work.

External services and transfers of data outside the EU

We host fonts, animations and all other libraries ourselves, so during a normal visit your data is not transferred to any external provider. The external services are Google Analytics, which loads only with your consent to analytics cookies, and Meta Pixel, which loads only with your consent to advertising cookies:

Google Analytics (googletagmanager.com, google-analytics.com): measuring visits. Provider: Google Ireland Limited or Google LLC.
Meta Pixel and Conversions API (connect.facebook.net, facebook.com): measuring the effectiveness of ads on Facebook and Instagram. Provider: Meta Platforms Ireland Limited or Meta Platforms, Inc.

Both providers have parent companies in the United States of America. The transfer is based on the European Commission’s adequacy decision on the EU–U.S. Data Privacy Framework of July 10, 2023, or on standard contractual clauses. If you do not give consent or withdraw it, this transfer does not take place.

Who we share data with

We do not sell personal data and do not share it with third parties for their own purposes. The following may have access to it, to the extent necessary:

the hosting provider that hosts the website and the database with submitted forms;
Google Ireland Limited, because we run our business email info@4tech-agency.com on Google Workspace; your message and our reply are stored in that mailbox;
an accounting service, to the extent necessary for issuing and booking invoices;
public authorities, where we are required by law to provide data to them.

How long we keep data

Inquiries that do not lead to a collaboration: no longer than 2 years from the last message, after which we delete them.
Documentation of concluded transactions: 5 years after the project ends, because of possible claims.
Issued invoices and pro forma invoices and accounting documents: 10 years from the end of the year to which they relate, as required by tax legislation. We cannot shorten this period at your request.
Record of acceptance of the terms and of a request for an immediate start: together with the transaction documentation, because it is proof of when the withdrawal period began to run.
Server logs: as a rule up to 6 months, after which they are automatically overwritten.

Your rights

In relation to your personal data, you have the right to:

access the data and obtain a copy of the data we process;
have inaccurate data corrected or incomplete data completed;
have the data erased when there is no longer a basis for processing;
restriction of processing;
data portability in a machine-readable format;
object to processing based on legitimate interest;
withdraw consent where processing is based on it; withdrawal does not affect the lawfulness of processing before the withdrawal.

Send your request to info@4tech-agency.com. We will reply no later than one month after receiving it. The request is free of charge, unless it is manifestly unfounded or excessive.

Complaint to the supervisory authority

If you believe we process your data unlawfully, you can lodge a complaint with the supervisory authority:

Informacijski pooblaščenec Republike Slovenije (Information Commissioner of the Republic of Slovenia)
Dunajska cesta 22, 1000 Ljubljana, Slovenia
Email: gp.ip@ip-rs.si, phone: +386 1 230 97 30
www.ip-rs.si

Data security

The entire website runs over an encrypted HTTPS connection. Access to the mailbox and to the editor interface is password-protected, and the software is updated regularly. Complete security of data transmission over the internet still cannot be guaranteed, so please do not send us special categories of personal data (for example health data) or passwords by email.

Changes to this policy

We update this policy when the way we process data or the legislation changes. The version published on this page always applies.

Last updated: August 23, 2026.