Privacy Policy
1. Data controller
The controller of personal data is:
ETNA TRANSPORT podjetje za transport, trgovino in proizvodnjo, d.o.o.
Short name: ETNA TRANSPORT, d.o.o.
Celjska cesta 7
3250 Rogaška Slatina
Slovenia
E-mail: etna@etna-transport.com
Phone: +386 40 561 566
Bosnia and Herzegovina: +387 65 510 174
For questions regarding privacy or personal-data processing, contact: etna@etna-transport.com.
2. Personal data covered by this policy
This Privacy Policy applies to personal data received through the WEB ETNA website, contact form, e-mail or telephone communication.
Through the contact form we may process:
- name and company name,
- e-mail address or telephone number,
- message content and any information you choose to include,
- date and time of submission,
- technical information required for the security and reliable operation of the form and website, such as IP address, request logs and information relating to errors or attempted misuse.
Please do not submit special-category or other sensitive personal data through the contact form unless this is genuinely necessary for your inquiry.
3. Purposes and legal bases
We process personal data only where an appropriate legal basis applies.
Responding to inquiries and preparing business cooperation
We use information submitted through the contact form, e-mail or telephone to respond to your request, prepare an offer or take steps before a possible contract.
Where applicable, the legal basis is Article 6(1)(b) GDPR — processing necessary to take steps at the request of the data subject before entering into a contract or for the performance of a contract.
Business communication and legitimate interests
Where you contact us on behalf of a company, or Article 6(1)(b) does not directly apply, processing may be based on Article 6(1)(f) GDPR and our legitimate interests in:
- efficient business communication,
- handling and following up business inquiries,
- protecting the website and contact form,
- preventing spam, misuse and security incidents,
- establishing, exercising or defending legal claims.
Legal obligations
Where information or correspondence becomes part of business records that must be retained or disclosed under applicable law, processing may be based on Article 6(1)(c) GDPR.
The contact form is not based on consent, so no separate GDPR consent checkbox is required to submit an inquiry.
4. Information you need to provide
Fields marked with an asterisk in the contact form are necessary for us to receive and process your inquiry. If sufficient contact details are not provided, we may be unable to respond.
5. Retention periods
We apply the principle of storage limitation.
- Inquiries that do not lead to a business or contractual relationship are retained for no longer than 12 months after the last relevant communication, unless a shorter or longer period is required to resolve the matter or protect legal claims.
- If an inquiry leads to a business relationship or contract, relevant correspondence may become part of business records and may be retained for as long as necessary for the relationship and as required by applicable statutory retention and limitation periods.
- Website security and server logs are generally retained for no longer than 30 days, unless longer retention is required to investigate a security incident or protect the systems.
- Technically necessary cookies are retained only for as long as necessary for the function for which they are used; details are provided on the Cookies page.
6. Recipients and processors
Personal data is accessible only to persons who need it for their work.
Where necessary, data may also be processed by contracted service providers supplying:
- website hosting and server infrastructure,
- e-mail services,
- technical maintenance, security and IT support.
Such service providers may process data only for the provision of the contracted service and subject to appropriate data-protection obligations.
Information may be disclosed to competent authorities, courts or professional advisers where required by law or where reasonably necessary to protect legal interests.
We do not sell personal data and do not use it for behavioural advertising or profiling.
7. Transfers outside the European Economic Area
WEB ETNA does not intend transfers of contact-form personal data outside the European Economic Area as a purpose of processing.
Where a technical provider in a particular case involves processing or access outside the EEA, ETNA TRANSPORT will require an appropriate transfer mechanism under Chapter V GDPR, such as an adequacy decision or Standard Contractual Clauses, where applicable.
8. Technically necessary cookies
WEB ETNA uses only technically necessary cookies and similar storage required for basic website functionality, security and the contact form.
We do not use Google Analytics, marketing cookies, advertising pixels, behavioural tracking or profiling.
Accordingly, the current website configuration does not display a cookie-consent banner. Further information is available on the Cookies page.
9. Your rights
Subject to the conditions provided by the GDPR, you may request:
- access to your personal data,
- rectification of inaccurate or incomplete data,
- erasure of personal data,
- restriction of processing,
- data portability where applicable,
- objection to processing based on our legitimate interests.
To exercise your rights, contact etna@etna-transport.com. We may request additional information only where necessary to verify your identity and protect personal data.
You also have the right to lodge a complaint with the competent supervisory authority:
Information Commissioner of the Republic of Slovenia
Dunajska cesta 22
1000 Ljubljana
Slovenia
E-mail: gp.ip@ip-rs.si
10. Automated decision-making and profiling
We do not use automated decision-making or profiling in relation to personal data collected through the WEB ETNA website or contact form.
11. Data security
We use appropriate technical and organisational measures, including access controls, secure communications, contact-form abuse protection and regular technical maintenance.
No method of transmission or storage can be absolutely secure, but safeguards are adapted to the risk and the amount of data processed.
12. Changes to this Privacy Policy
We may update this Privacy Policy to reflect legal, technical or processing changes. The current version will always be published on this page.
Last updated: 13 September 2026.