1. Personal data controller
The personal data controller is SLIMSHAPE d.o.o., Cesta v Lokrovec 33, 3000 Celje, Slovenia, registration number 9095896000, VAT ID SI13576941. For data protection questions, write to partnerji@infraestetica.si or call +386 70 332 352.
2. What data we process
Enquiry form: name, phone number, email address, town where you wish to open a studio, answer to “Where are you today?” and, if provided, your available funds range.
Presentation download form: name and email address.
Email updates (only with your consent): email address and the date and time of consent.
Technical data when visiting the website: IP address, access date and time, browser and device type (server logs).
Analytics (only with your consent): website usage data collected by Google Analytics.
3. Processing purposes and legal bases
Responding to your enquiry, sending the presentation and arranging an introductory conversation: taking steps at your request before entering into a contract (Article 6(1)(b) of the General Data Protection Regulation).
Sending further information about the InfraEstetica franchise system by email: your consent (Article 6(1)(a)). You may withdraw consent at any time using the link in each message or by writing to partnerji@infraestetica.si.
Visit analytics: your consent in cookie settings (Article 6(1)(a)).
Website security and smooth operation: our legitimate interest (Article 6(1)(f)).
Establishing and defending legal claims and meeting legal obligations: legitimate interest or legal obligation (Article 6(1)(f) and 6(1)(c)).
Providing data is not a legal or contractual obligation. Without the form data, we cannot respond or send the presentation. We do not carry out automated decision-making or profiling.
4. Who has access to the data
Employees and contractors of SLIMSHAPE d.o.o. developing the franchise network and communicating with candidates have access. We use contracted processors: website and email hosting provider Neoserv (AVANT.SI d.o.o., Kranj, Slovenia) and, if you consent to analytics, Google Ireland Limited (Google Analytics). We do not sell data or share it for third parties' own purposes. We disclose it to competent authorities only when required by law.
5. Data transfers to third countries
We store form data and server logs on servers in Slovenia. Google Analytics may transfer data to the USA; transfers rely on the European Commission's adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses.
6. How long we retain data
We retain enquiry and presentation request data for 24 months after our last contact with you. If we enter into an agreement, we retain it according to the agreement and regulations.
We retain your email address for updates until you withdraw consent.
We retain server logs for up to 12 months. We retain Google Analytics data for up to 14 months.
7. Cookies
The website uses necessary cookies to operate and store your cookie choices. Analytics cookies load only after your consent. You can change your choices at any time using “Cookie settings” in the footer. The cookie list is in the Cookie Policy.
8. Your rights
You may request access, rectification, erasure or restriction of processing, exercise data portability, object to processing based on legitimate interest and withdraw consent at any time. Withdrawal does not affect the lawfulness of earlier processing.
Send your request to partnerji@infraestetica.si. We respond within one month at the latest.
If you believe processing breaches regulations, you may complain to the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, www.ip-rs.si.
9. Policy changes
We update the policy when data processing or regulations change. The current version is always published on this page with its effective date.