Privacy Policy

Last updated: 3 October 2026

This policy explains what personal data Mostec AI d.o.o. processes when you visit mostec.ai or contact us, why, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The controller is Mostec AI d.o.o., Mlinska pot 14, 1231 Ljubljana - Črnuče, Slovenia, registration number 7476396000, VAT ID SI43910548. For any question about your data, write to [email protected] or call +386 51 275 990.

2. What we process and why

Visiting the website. The site is hosted and protected by Cloudflare. When you load a page, technical data such as your IP address, browser type, the page requested and the time of the request is processed to deliver the site and keep it secure. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

Website analytics (only with your consent). If you click “Accept” in the cookie banner, we use Google Analytics (Google Ireland Limited) to understand how the site is used: pages viewed, time on site, device and browser, approximate location derived from your IP address and a pseudonymous identifier. If you click “Reject”, Google Analytics is not loaded. Legal basis: your consent (Art. 6(1)(a) GDPR). You can change your choice at any time via “Cookie settings” at the bottom of every page.

Booking a call or sending an inquiry. Our booking form is provided by Tally and appointment scheduling by Calendly. We receive the information you enter, such as your name, email address, company, your message and the time you choose, and use it to answer you and prepare the conversation. Legal basis: steps taken at your request before a possible contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR).

Email and phone. When you contact us directly, we process your contact details and the content of your message to reply. Legal basis: Art. 6(1)(b) and (f) GDPR.

Fonts. The site loads the Inter typeface from Google Fonts. Your browser connects to Google’s servers, which receive your IP address. Legal basis: our legitimate interest in a consistent presentation of the site (Art. 6(1)(f) GDPR).

3. Who receives your data

We share personal data only with service providers that process it on our behalf and under our instructions:

Cloudflare, Inc. (website hosting and security)
Google Ireland Limited / Google LLC (Google Analytics, only with consent; Google Fonts)
Tally (booking form)
Calendly LLC (appointment scheduling)
our email hosting provider (email correspondence)

We do not sell personal data.

4. Transfers outside the EU

Some of these providers are based in the United States or use servers there. Such transfers take place on the basis of the EU–U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

5. How long we keep data

Technical and security data: only as long as needed to deliver and protect the website, in line with the hosting provider’s retention periods.
Analytics data: for the retention period set in Google Analytics, at most 14 months.
Inquiries and correspondence: as long as needed to handle your inquiry and any business relationship that follows, then deleted unless the law requires us to keep it longer (for example, accounting records).

6. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting processing carried out before the withdrawal. To exercise these rights, email [email protected].

You can also lodge a complaint with the Slovenian supervisory authority, the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), www.ip-rs.si.

7. Changes

We may update this policy when our website or services change. The date at the top shows when it was last updated.