Privacy policy
Last updated 10 November 2026
TODO: legal review
Controller
TOMSTROJ, podjetje za inženiring, strojegradnjo in trgovino d.o.o., Podovnice 1, 1357 Notranje Gorice, Slovenia. Email: tomstroj@siol.net, phone: +386 41 588 114.
What we process
When you use the order, dealer or contact form we process the data you enter: company name, VAT ID, contact name, email address, phone number, delivery country and address, engraving text and your message. For spam protection and rate limiting we briefly process your IP address.
Purpose and legal basis
We use form data to process orders and enquiries: to prepare an order confirmation and invoice, to arrange delivery and to answer your questions. The legal basis is the performance of a contract or steps prior to a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries and protecting the site from abuse (Art. 6(1)(f) GDPR). We check VAT IDs against the EU VIES service to apply the correct VAT treatment (Art. 6(1)(c) GDPR).
Retention
Order data and invoices are kept for as long as Slovenian tax and accounting law requires (generally 10 years after the end of the year the invoice was issued). Enquiries that do not lead to an order are deleted within 24 months. Rate-limit data is held in memory for at most one hour.
Processors
Resend (email delivery), Vercel (hosting and cookieless, aggregated analytics) and Cloudflare Turnstile (spam protection). Each acts on our behalf under a data processing agreement. Some processors may process data outside the EU under the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
Cookies and analytics
We use Vercel Web Analytics and Speed Insights, which are cookieless and do not track you across sites. We do not use tracking cookies, so no cookie banner is needed. Cloudflare Turnstile may set a strictly necessary cookie when you submit a form.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent. You can lodge a complaint with the Slovenian Information Commissioner (Informacijski pooblaščenec, www.ip-rs.si).
Contact
For any privacy question, email tomstroj@siol.net.