Overview / Privacy notice
Privacy

Privacy notice

This notice explains how personal data is processed in connection with the website compliance-bot.net. Last updated: 29 October 2026.

1. Controller

The controller is Computer Consulting d.o.o. (comp-consulting.eu). For any question about this notice or your personal data, contact us at [email protected].

2. No cookies, trackers or analytics

This website does not use cookies, tracking technologies, analytics tools, advertising tools, external fonts or embedded third-party content. It does not ask you to log in or to fill in forms.

3. What personal data we process

We only process the personal data you choose to send us by e-mail – usually your name, e-mail address, organisation and the content of your message, including anything you attach. Please do not send us customer data, special categories of personal data or confidential documents.

When you visit the website, our hosting provider technically processes connection data (such as your IP address, browser information and time of the request) to deliver the pages and protect the website against attacks. We do not use this data to identify or profile visitors.

4. Purpose and legal basis

PurposeLegal basis (GDPR)
Answering your enquiry and any follow-up correspondenceOur legitimate interest in responding to enquiries (Art. 6(1)(f)); where your enquiry concerns a possible contract with us, steps taken at your request before entering into a contract (Art. 6(1)(b))
Delivering the website securely (connection data processed by the hosting provider)Our legitimate interest in operating a secure and available website (Art. 6(1)(f))

5. Recipients and service providers

Cloudflare hosts this website and handles our e-mail traffic: it forwards messages sent to [email protected] to our mailbox (Cloudflare Email Routing) and sends our replies (Cloudflare Email Sending). Cloudflare acts as our processor under its Data Processing Addendum.

Our mailbox is a Gmail account. Google provides Gmail under its own terms of service and privacy policy; Google is an independent provider of that service, not a processor under a contract with us. Messages you send us, and our replies, are therefore stored in that Gmail account.

We do not sell personal data and do not share it with other third parties unless the law requires it.

Transfers outside the European Economic Area. Cloudflare and Google may process personal data outside the EEA, including in the United States.

  • Cloudflare: transfers rely on Cloudflare’s certification under the EU-U.S. Data Privacy Framework (covered by the European Commission’s adequacy decision) and on the standard contractual clauses included in its Data Processing Addendum.
  • Google: Google handles transfers under its own terms; according to its published information, Google LLC is certified under the EU-U.S. Data Privacy Framework and also uses standard contractual clauses.

6. How long we keep data

We keep e-mail enquiries for one month and then delete them, unless a longer period is required by law or needed to establish, exercise or defend legal claims. Connection data is kept by the hosting provider only for a short period for security and operational purposes.

7. Your rights

Under the GDPR you have the right to:

  • access your personal data and receive a copy
  • have inaccurate data corrected
  • have your data erased
  • restrict processing
  • object to processing based on our legitimate interests
  • data portability, where processing is based on a contract and carried out by automated means

To exercise your rights, write to [email protected]. We will reply without undue delay and in any case within one month.

8. Right to lodge a complaint

If you believe that we process your personal data unlawfully, you can lodge a complaint with the supervisory authority in Slovenia:

Information Commissioner of the Republic of Slovenia
(Informacijski pooblaščenec)
Dunajska cesta 22, 1000 Ljubljana, Slovenia
E-mail: [email protected]
Web: www.ip-rs.si

You may also complain to the supervisory authority in the EU Member State where you live or work.

9. Automated decision-making

We do not make decisions based solely on automated processing, including profiling, about people who contact us.

10. Changes

We may update this notice. The current version is always available on this page.

Contact us

Talk to us about your compliance needs

Get in touch for a conversation about document approval, incident management or employee training in your organisation. Tell us your sector (bank or financial institution, public sector body or SME) and the rules you work with.

Contact

E-mail: [email protected]

Please do not send customer data or confidential documents by e-mail.