Back to home page

Privacy Policy

This privacy policy explains how Cab2Web ("we", "us", "our") collects, uses, shares, and protects your personal data when you visit our website or use our services. We are based in Slovenia and process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Personal Data Protection Act (ZVOP-2).

If you have questions about this policy or your rights, contact us using the email above.

1) What data we collect and why

A. Website visits (automatic collection)

Technical data: IP address, device type, browser, operating system, pages viewed, time and date, referring URL.

Purpose and legal basis: website security and operation (Legitimate interests, Article 6(1)(f) GDPR); compliance with legal obligations (Article 6(1)(c)).

B. Contact and inquiries

Data: name, phone, email, message content, type of service.

Purpose and legal basis: responding to inquiries and executing/confirming requests (Contract, Article 6(1)(b)); reminders and operational communications (Legitimate interests, Article 6(1)(f)).

C. Marketing (optional)

Data: name, email/phone, marketing consents, campaign interactions.

Purpose and legal basis: sending newsletters, promotions, or satisfaction surveys only with your consent (Article 6(1)(a)). Consent can be withdrawn at any time.

2) Cookies and similar technologies

We use necessary cookies for the operation of the site and (if enabled) analytical/marketing cookies to improve services. You can change or withdraw cookie consent at any time via our cookie banner or browser settings. Blocking certain cookies may affect the functionality of the site.

3) How we share your data

We share personal data only with:

• IT / hosting and security providers that ensure the operation of our website.
• Email / SMS providers for sending confirmations or reminders.
• Accountants or legal advisors for legal compliance.
• Analytics tools to improve website performance and user experience.
• Government authorities, if required by law.

All processors operate in accordance with agreements requiring GDPR compliance. We do not sell your personal data.

International transfers: If any provider stores data outside the EU/EEA, we rely on an adequacy decision (e.g., EU-US Data Privacy Framework) or Standard Contractual Clauses (SCC) with additional safeguards.

4) Data retention

We retain personal data only as long as necessary for the purposes collected, then delete or anonymize it.

• Inquiry/contact data: up to 24 months after the last inquiry.
• Marketing lists: until unsubscription or withdrawal of consent.
• Payment/accounting records: 10 years (Slovenian tax law).

5) Your rights (GDPR)

You have the right to:

• Access your data and receive a copy.
• Correct inaccurate or incomplete data.
• Delete data ("right to be forgotten") where appropriate.
• Restrict or object to certain processing (including direct marketing).
• Data portability for data you have provided based on consent or contract.
• Withdraw consent at any time (does not affect prior processing).
• File a complaint with the Information Commissioner: https://www.ip-rs.si/

To exercise your rights, contact us at info@cab2web.com. We may need to verify your identity.

6) Children

Our services and website are not intended for children under the age of 16. We do not knowingly collect data from children without parental/guardian consent.

7) Security

We implement appropriate technical and organizational measures to protect personal data, including transport encryption (HTTPS), access control, principle of least privilege for staff, and regular updates. However, no method of transmission or storage is 100% secure.

8) Links to third-party websites

Our website may contain links to other websites. These sites have their own privacy policies; we are not responsible for their practices.

9) Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows the current version. Significant changes will be highlighted on our website.