Privacy policy

1. Data controller

The data controller is IVAN ĐONDRIĆ PR POMOĆNE OBRAZOVNE DELATNOSTI SLO-STUDY STUDIRAJ U INOSTRANSTVU ČAČAK, registered at Zelengorska 34, 32000 Čačak, Serbia, registration number 68418933, tax ID (PIB) 115506241 (hereinafter: “SloStudy”).

For any questions about personal data, SloStudy can be reached at lazar@slostudy.com.

2. What data SloStudy collects

Contact form. When the contact form on the site is filled in, SloStudy collects: first and last name, email address, phone number, country and city, area of interest and the content of the message.

Direct communication. When a person contacts SloStudy by email, WhatsApp or Viber, SloStudy processes the data that person sends: name, phone number, message content and attached documents.

Client data. To conclude and perform the contract, SloStudy processes data of the client and of the student receiving the service:

• first and last name and contact details,
• passport data (number, date and place of issue), citizenship and place of residence,
• data from documents needed for enrollment and administrative procedures (school certificates, diplomas, confirmations and similar documents),
• payment data (amounts and dates of payments).

When a client provides data about another person, for example a parent about a student, they confirm that they are authorised to provide it.

Minors. If the student is under 18, the contract is concluded on their behalf by a parent or guardian, who also gives consent to data processing where consent is required.

Technical data. When the site is visited, the server automatically logs the IP address, browser type and time of access, for security and proper operation of the site.

3. Purposes and legal basis of processing

• Replying to enquiries and scheduling free consultations. Basis: steps taken at the person's request before entering into a contract.
• Concluding and performing the contract, including submitting applications and requests to educational institutions and state authorities of the Republic of Slovenia. Basis: performance of a contract.
• Meeting accounting and tax obligations. Basis: legal obligation.
• Security and proper operation of the site and showing it in the appropriate language. Basis: SloStudy's legitimate interest in a secure, functional and understandable site.
• Measuring site traffic (Google Analytics). Basis: consent.
• Adding clients to the WhatsApp group. Basis: consent.
• Publishing client testimonials with a name or photo. Basis: explicit consent.

Providing data through the contact form is voluntary, but without it SloStudy cannot reply to the enquiry. The client data listed in section 2 is necessary to conclude and perform the contract, and without it the service cannot be provided.

SloStudy does not use data for automated decision-making or profiling and does not sell it to third parties.

4. WhatsApp group and client testimonials

All-in package clients may be added to a private WhatsApp group with up-to-date information. Group members can see each other's names and phone numbers. Joining is voluntary and happens only with the client's consent, and the group can be left at any time.

Client testimonials are published on the site or on social networks only with explicit consent, in the form the client agreed to. Consent can be withdrawn at any time, after which SloStudy removes the testimonial.

5. Cookies and local storage

Essential data, which does not require consent:

• the NEXT_LOCALE cookie, which remembers the chosen language (lasts 1 year),
• the theme setting (light or dark) and the cookie choice, stored in the browser.

To show the site in the right language on the first visit, SloStudy uses the IP address only to determine the country the site is accessed from. This is done by the hosting provider and, exceptionally, by the ipapi.co service.

Analytics cookies, only with consent: if “Accept” is clicked in the cookie notice, SloStudy uses Google Analytics (Google Ireland Limited) to see how the site is used, for example the number of visits, which sections are read and where visitors come from. Google Analytics sets the _ga and _ga_* cookies, which last up to 2 years. SloStudy does not use advertising cookies.

Until “Accept” is clicked, Google Analytics is not loaded. Consent can be withdrawn at any time through the “Cookie settings” link at the bottom of the page, after which the analytics cookies are deleted.

6. Who data is shared with

SloStudy shares data only to the extent needed for the purposes above:

• the website hosting provider: Vercel Inc.,
• the IP-based country lookup service: ipapi.co,
• the email provider: Zoho Corporation,
• the contact form email delivery service: Resend, Inc.,
• the analytics provider, only with consent: Google Ireland Limited,
• associates involved in providing the service, who are bound by confidentiality and for whose work SloStudy is responsible,
• faculties, universities and state authorities of the Republic of Slovenia, when necessary for enrollment or an administrative procedure, and only on the client's instruction,
• the accountant, to meet legal obligations.

Communication via WhatsApp and Viber is also subject to those services' privacy policies.

Some service providers are located outside Serbia and the European Economic Area, in the United States. Data is transferred only with appropriate safeguards provided by law, such as an adequacy decision (the EU-US Data Privacy Framework) or standard contractual clauses.

7. How long data is kept

• Data from enquiries that did not lead to cooperation: 12 months from the last contact.
• Copies of passports and documents for enrollment and administrative procedures: until the service is completed, and at most 6 months after that.
• The contract and other client data: 3 years from the end of cooperation, to establish and defend legal claims.
• Accounting records: for the periods required by accounting and tax regulations.
• Data processed on the basis of consent: until consent is withdrawn.

When these periods expire, data is deleted or permanently anonymised.

8. Rights of the people whose data is processed

Everyone whose data SloStudy processes has the right to:

• request access to their data and a copy of it,
• request correction of inaccurate or completion of incomplete data,
• request erasure of their data,
• request restriction of processing or object to processing,
• request transfer of their data to another controller,
• withdraw consent where processing is based on consent. Withdrawal does not affect the lawfulness of processing before it.

Requests should be sent to lazar@slostudy.com. SloStudy replies without undue delay and within 30 days at the latest. In complex cases this period may be extended, and SloStudy will inform the requester. Exercising these rights is free of charge.

Anyone who believes their data is being processed unlawfully has the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia. People in the European Union may also lodge a complaint with the supervisory authority in their country of residence, in Slovenia the Information Commissioner (Informacijski pooblaščenec).

9. Security

The site uses an encrypted (HTTPS) connection. Only people who need it to provide the service have access to data, and client documents are kept on a password-protected device.

10. Changes to this policy

SloStudy may update this policy from time to time. The date of the last change is always shown at the top of the page.