Privacy policy

1. Controller

The data controller is Tomaž Juvan s.p. (trading as Bexend), e-mail info@bexend.com.

2. What we process and why

Contact form

When you send an inquiry we process your name, e-mail address, phone number (if given), the selected topic and the message. The data is used solely to reply to your inquiry and prepare a quote. Legal basis: your consent (Art. 6(1)(a) GDPR) and pre-contractual steps (Art. 6(1)(b) GDPR).

On submission we also record your IP address and time to prevent abuse (rate limiting), based on our legitimate interest in running the site securely (Art. 6(1)(f) GDPR).

Configurator

If you use the configurator we store your selections and the contact details entered in the last step to prepare a quote and a demo portal.

Server logs

Our hosting provider keeps standard server logs (IP address, time, requested page, browser) for security and troubleshooting.

3. Cookies

The site uses only strictly necessary cookies: the session cookie bexend_sid that protects the form against abuse (CSRF), and your theme preference (light/dark) stored in your browser. We use no analytics, advertising or tracking cookies and load no third-party resources, so no cookie consent is required.

4. Retention

• Form inquiries: in e-mail until the cooperation ends, at most 2 years after the last contact; in the site's technical log at most 90 days.
• Rate-limit data (IP): 1 hour.
• Configurator submissions: 12 months.
• If a contract is concluded, data is kept as required by tax and accounting law (10 years).

5. Recipients

We do not sell or share data with third parties for their own purposes. Our hosting provider (servers in the EU) has access as part of hosting and e-mail services. Data is not transferred outside the EU/EEA.

6. Your rights

You may at any time request access, rectification, erasure, restriction, portability, object to processing or withdraw consent. Send requests to info@bexend.com; we reply within 30 days. You may lodge a complaint with the Slovenian Information Commissioner (www.ip-rs.si).

7. Security

The site runs over HTTPS, forms are protected against abuse and only authorised persons access the data, which is stored with an EU hosting provider.

8. Changes

We may update this policy; the current version is always published on this page with the date of the last update.