Privacy policy
Controller
The controller of personal data is Dimitrije Stopar s.p., Na Pušo 7, 2000 Maribor, Slovenia, registration number 9961151000. Contact: info@operative-intelligence.com, +386 31 651 802.
Visiting the website
On every visit the server writes to a log your IP address, the time, the requested page address, the server's response, the address of the page you came from and details about your browser. The purpose is the operation and security of the website. The legal basis is legitimate interest (Article 6(1)(f) GDPR). The log is kept for 14 days and then deleted automatically.
To monitor visits by search engines and AI crawlers we keep a separate log that contains only the crawler's name, the time, the page address and the server's response, without an IP address. It is kept for 90 days.
The website does not use cookies, analytics or tracking tools. We host the fonts ourselves, so your browser does not call third-party servers when you visit.
Your browser remembers the language you chose (localStorage). This stays on your device and is not sent to us.
Messages by e-mail
If you write to us, we process your name, e-mail address and the content of your message in order to reply. The legal basis is steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) or our legitimate interest in answering a business enquiry (Article 6(1)(f) GDPR).
We keep messages for two years after the last contact and then delete them.
Booking an introductory call
When you book an introductory call, we process the data you enter in the form: name, e-mail address, company, number of employees and a description of the process or challenge, as well as the chosen time and the language of the page. The purpose is to arrange and hold the call: confirmation of the time by e-mail, the Google Meet link, a reminder and cancellation.
You can submit a booking in the web form or through an AI assistant that you have connected to our MCP server: after your explicit consent in the conversation, the assistant sends us the same name, e-mail address, company, company size and short description. We record where a booking came from (web form or AI assistant). A booking is valid only once you click the link in the confirmation e-mail; the assistant cannot confirm it. The provider of your assistant processes your conversation under its own terms.
The legal basis is your consent (Article 6(1)(a) GDPR), which you give with the checkbox in the form or, for a booking through an assistant, by explicitly agreeing in the conversation with the assistant. You can withdraw it at any time by e-mail to info@operative-intelligence.com; withdrawal does not affect the lawfulness of processing before it.
Unconfirmed bookings are deleted within 24 hours. Confirmed bookings, including those you cancel later, are kept for 2 years after the day of the call and are then deleted together with the calendar event. The messages we send (confirmation, cancellation) are in our mailbox and are kept like other e-mail messages.
To protect the form against abuse we store a hashed value of your IP address and e-mail address (hashed with a secret key, so the address cannot be read from it) with the time of the attempt, and delete it after two days. The legal basis is legitimate interest (Article 6(1)(f) GDPR). The form is not mandatory: we can also arrange the call by e-mail.
We process the data in a database on our server and use Google as a processor for the calendar, e-mail and video call (see below). We do not pass the data on to others.
Processors and transfers
Website hosting: DigitalOcean, LLC as processor. The server is in the AMS3 region (Amsterdam, the Netherlands). The data processing agreement is part of DigitalOcean's terms of service. If DigitalOcean processed data in the USA, the transfer would rely on its certification under the EU-U.S. Data Privacy Framework (data processing agreement, point 4.1: https://www.digitalocean.com/legal/data-processing-agreement). The booking database is on the same server.
E-mail, calendar and video calls (Gmail, Google Calendar, Google Meet): Google Workspace. The processor is Google Cloud EMEA Limited (Ireland). Transfers to the USA rely on the certification of Google LLC under the EU-U.S. Data Privacy Framework, which Google uses as a fallback transfer mechanism under its data processing addendum (Cloud Data Processing Addendum, Annex 3, point 4: https://cloud.google.com/terms/data-processing-addendum; status: https://cloud.google.com/terms/alternative-transfer-solution). Transfers to other third countries rely on the standard contractual clauses in the same addendum.
Your rights
You have the right of access, rectification, erasure, restriction of processing, portability and objection (Articles 15 to 21 GDPR). Send your request to info@operative-intelligence.com.
You can lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si.
Changes
We change this privacy policy when our processing changes. The date of the last change is shown below.