Privacy Policy

This page is our information notice under Articles 13 and 14 of the General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).

In short

• Nomnio d.o.o. in Maribor decides how this data is used and is responsible for it.
• We process what you send us and the technical data that any website visit produces.
• Marketing cookies run only if you switch them on in the cookie banner.
• We do not sell personal data, and we do not make automated decisions about you.
• You can ask what we hold about you, have it corrected or deleted, and complain to the Information Commissioner.

Who is responsible for your data

The controller is:

Nomnio, razvoj informacijskih rešitev in svetovanje, d.o.o.
Tržaška cesta 85a, 2000 Maribor, Slovenia
Registration number 6324282000 · VAT ID SI57252084
Email info@nomnio.com · Phone +386 2 671 96 89

What we process, why, and for how long

What we process depends on what you do on the site. Each case below lists the data, the purpose, the legal ground and the retention period.

You browse the website

• Data. IP address, browser and operating system, the page requested, the time of the request and the address of the page that linked to us.
• Purpose. To deliver the pages to you and to detect and stop misuse, such as attacks on the site.
• Legal ground. Our legitimate interest in a website that works and is secure, Art. 6(1)(f) GDPR.
• Who processes it. Our hosting provider, which records this data in server logs.
• How long. As long as our hosting provider keeps its server logs.

You accept marketing cookies

This applies only if you choose Accept all in the cookie banner or switch on Marketing under Preferences.

• Data. IP address, an identifier stored in your browser, the pages viewed and when, the referring page, and browser and device information.
• Purpose. To measure interest in our services and, in limited cases, to recognise organisations that have shown clear commercial interest, so that we can follow up with relevant business communication. The tool works at the level of organisations, not to profile you as an individual. We do not use it for advertising aimed at consumers.
• Legal ground. Your consent, Art. 6(1)(a) GDPR. Storing and reading the cookie is based on consent under Art. 225 of the Electronic Communications Act (ZEKom-2).
• Who processes it. The provider of our marketing tool, listed in the Cookie Policy. It acts on our instructions under a data processing agreement and may not use the data for its own purposes.
• How long. Until you withdraw consent or we no longer need the data for this purpose. Cookie lifetimes are listed in the Cookie Policy.
• Your choice. Without your consent, the marketing tool is not loaded. You can withdraw consent at any time under Cookie preferences in the footer. Processing before the withdrawal remains lawful.

You fill in the contact form or email us

• Data. Your name, email address, phone number, the content of your message and anything else you choose to tell us.
• Purpose. To answer you and, if you ask for it, to prepare an offer.
• Legal ground.
  • Steps taken at your request before entering into a contract, Art. 6(1)(b) GDPR.
  • Where no contract is in view, our legitimate interest in answering business enquiries, Art. 6(1)(f).
• Is it required? No, writing to us is voluntary. Without a way to reach you, we cannot reply.
• How long.
  • Copies of form submissions are kept in the website platform for 90 days.
  • Correspondence that does not lead to a contract is kept for 24 months after the last exchange.

You apply for a job

• Data. Your CV, cover letter, contact details and any other information you send to jobs@nomnio.com.
• Purpose. To assess your application and contact you about it.
• Legal ground.
  • Steps taken at your request before an employment contract, Art. 6(1)(b) GDPR.
  • If you agree that we keep your application for future openings, your consent, Art. 6(1)(a).
• Is it required? It is voluntary, but we cannot assess an application without it.
• How long.
  • Until the selection process ends, plus 6 months.
  • With your consent, 2 years.

You work with us as a client, partner or supplier

• Data. Names, roles and business contact details of the people we deal with, together with correspondence, meeting notes and contract and invoice data.
• Purpose. To prepare, perform and manage the business relationship, and to meet accounting and tax duties.
• Legal ground.
  • The contract, Art. 6(1)(b) GDPR, where you are personally a party to it.
  • Otherwise, our legitimate interest in working with your organisation, Art. 6(1)(f).
  • For accounting records, our legal obligations, Art. 6(1)(c).
• How long.
  • For the duration of the relationship and the limitation periods that follow it.
  • Invoices are kept for 10 years, as Slovenian VAT law requires.

Who else receives your data

We share personal data only where it is needed for the purposes above. Service providers act on our instructions under data processing agreements and must keep the data confidential and secure.

We never sell personal data or pass it on for others to use in their own marketing.

Data processed outside the EU

Webflow and our marketing tool provider are based in the United States, and Microsoft and other providers may use sub-processors outside the European Economic Area. When data leaves the EEA, the transfer relies on either:

• an adequacy decision of the European Commission, including the EU–US Data Privacy Framework for certified US companies; or
• Standard Contractual Clauses approved by the European Commission.

You can ask us for a copy of the safeguards that apply to a transfer.

How we protect your data

The protection we apply depends on how sensitive the data is. It includes:

• encrypted connections;
• access limited to the people who need the data;
• two-factor authentication on the accounts that hold personal data;
• providers chosen for their security practices.

Your rights

Under the GDPR you can ask us to:

• tell you whether we process your data and give you a copy (access);
• correct data that is wrong or incomplete (rectification);
• delete data, for example when we no longer need it or you withdraw consent (erasure);
• limit how we use data while a question about it is being resolved (restriction);
• send you or another organisation the data you gave us, in a machine-readable format, where we process it on the basis of consent or contract (portability).

You can also:

• object at any time to processing based on our legitimate interest. We then stop unless we have compelling grounds that override yours.
• withdraw consent at any time, for the future. For cookies, use Cookie preferences in the footer.

Write to the email address in the first section. We reply within one month. For complex requests we may extend this by up to two further months and will tell you if we do. We may ask you to confirm your identity first. Requests are free unless they are clearly unfounded or excessive.

If you think we are handling your data unlawfully, you can file a complaint to the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si. You can also complain to the supervisory authority in the EU country where you live or work.

Automated decisions

We do not make decisions about you that are based solely on automated processing and that have legal or similarly significant effects on you.

Children

nomnio.com is written for companies and job seekers. If we learn that a child has sent us personal data, we delete it.

Updates

When our processing changes, we update this policy and the “Last updated” date at the top of the page. We announce significant changes on the website.