Legal
Privacy Notice
What personal data this website collects, why, who else handles it, how long I keep it, and your rights.
Last updated: 3 November 2026
In short
- I collect only what I need to reply to your message.
- I don’t sell your data or use it for advertising.
- This website doesn’t use cookies, advertising or Google Analytics. My hosting provider, Netlify, provides basic visit statistics and page-speed measurements, without cookies.
- You can ask me to see, correct or delete your data at any time.
1. Who is responsible for your data
The controller of your personal data is:
Uha Vavpetič, private individualLjubljana, Slovenia
Email: uha@uha.coach
I process personal data in line with the EU General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).
2. What I collect and why
When you visit the website
What: technical data your browser sends automatically, such as your IP address, browser type, the page requested, the referring page and the time. A small script from Netlify also measures how quickly the page loads and displays in your browser (page-speed measurements). No cookies are used.
Why: to deliver the website, keep it secure, and understand in aggregate how many visits the site receives, which pages are viewed and how well it performs. The data is collected and processed by my hosting provider, Netlify.
Legal basis: my legitimate interest in a working, secure and well-performing website and in understanding how it is used (Art. 6(1)(f) GDPR). You can object at any time (see section 6).
When you use the contact form
What: your name, email address and your message.
Why: to read your message and reply to you.
Legal basis: my legitimate interest in replying to messages sent to me (Art. 6(1)(f) GDPR).
When you email me
What: your email address and your messages.
Why and legal basis: the same as for the contact form.
Please don’t include confidential workplace information, sensitive personal details or health information in the contact form or your emails.
3. Who else handles your data
I use service providers to operate this website, receive messages and manage email.
- Netlify, Inc. (USA): website hosting, visit statistics and page-speed measurements, contact-form processing and storage, security and spam filtering. Netlify uses additional providers, including Automattic (Akismet), for some of these functions.
- Microsoft (Exchange Online / Outlook): email services.
Personal data may also be disclosed to public authorities where required by law.
I do not sell personal data or use contact information for advertising or newsletters.
4. Transfers outside the EU
Some personal data may be processed in countries outside the European Economic Area, including the United States, through the providers used to operate this website and email.
Where applicable, transfers to US organisations participating in the EU–US Data Privacy Framework are covered by the European Commission’s adequacy decision.
For other international transfers, the relevant provider must use an appropriate transfer mechanism under the GDPR, where required.
Further information about these arrangements is available through the privacy documentation of Netlify and Microsoft.
5. How long I keep your data
- Messages from the contact form and emails: 12 months after our last contact.
After that, I delete the data or make it anonymous.
6. Your rights
Under the GDPR, you have rights concerning your personal data. Depending on the circumstances, these include the right to:
- access your personal data and receive a copy;
- correct inaccurate or incomplete information;
- request deletion of your personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- exercise data portability where the GDPR conditions apply.
To exercise your rights, email me at uha@uha.coach. I will respond within one month, subject to any extension permitted by law.
You may also lodge a complaint with the Slovenian Information Commissioner or another competent supervisory authority.
Information Commissioner of the Republic of SloveniaDunajska cesta 22, 1000 Ljubljana, Slovenia
gp.ip@ip-rs.si · www.ip-rs.si
7. Other things you should know
Do you have to give me your data? No. But without your name and email I can’t reply to you.
Automated decisions. I don’t make automated decisions about you or create profiles.
Security. I protect your data with appropriate measures, such as strong passwords and two-factor authentication on the accounts I use. I share it only where it’s needed.
Children. This website is meant for adults. I don’t knowingly collect data from anyone under 18.
Changes. If I change how I handle your data, I update this page and the date at the top.