Privacy Policy

Last updated: 11 October 2026 (Google Maps and YouTube added)

This privacy policy explains what personal data Tomyco d.o.o. processes when you visit tomyco.eu or send us an inquiry, why we do it, how long we keep it and what rights you have under the EU General Data Protection Regulation (GDPR).

Who is responsible for your data

The controller of your personal data is:
Tomyco d.o.o.
Zgornje Gameljne 48f
1211 Ljubljana – Šmartno
Slovenia
VAT ID: SI53679296
Email: info@tomyco.si

For any question about your data or to exercise your rights, write to info@tomyco.si.

Inquiry form

When you send an inquiry through the form on our Contact page, we process the data you enter:

• name (required)
• company (optional)
• email address (required)
• website URL (optional)
• target countries and services you are interested in (optional)
• your message (required)
• your consent and the date and time it was given

Purpose: to reply to your inquiry and, if you ask for it, to prepare an offer.

Legal basis: your consent (Article 6(1)(a) GDPR), which you give by ticking the checkbox in the form, and steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).

How the data is handled: the inquiry is sent by email to info@tomyco.si and a copy is stored in our website’s administration area (accessible only to our administrators). Your email address is used as the reply address, so we can answer you directly. We do not use your data for newsletters or advertising, and we do not sell it or pass it on to third parties for their own purposes.

Retention: we keep inquiries for up to 2 years after our last contact. Inquiries stored on the website are deleted automatically after that period. If a contract follows, the data becomes part of the business relationship and is kept for as long as the contract lasts and as required by law (for example, accounting and tax rules).

Spam protection: the form uses a hidden field and a time check instead of an external captcha service, so no data is sent to a captcha provider. To limit abuse, a one-way (hashed) form of your IP address is kept temporarily for up to 1 hour. If the form shows an error, the values you entered are kept for up to 10 minutes so you do not have to type them again.

You can withdraw your consent at any time by writing to info@tomyco.si. Withdrawal does not affect the lawfulness of processing before the withdrawal.

Server logs and security

Every time you visit the website, the web server and our security firewall automatically process technical data: your IP address, the date and time of the request, the page requested, the referring page, and your browser and operating system (user agent). We use this data only to deliver the website, keep it secure, detect and block attacks and fix errors.

Legal basis: our legitimate interest in a secure and working website (Article 6(1)(f) GDPR). Log data is kept only for a limited period and is not combined with other data to identify you.

Cookies

Visitors of tomyco.eu do not receive analytics, advertising or social media cookies from us. We use no analytics or tracking tools and no advertising pixels, and our fonts are hosted on our own server.

The map on our Contact page and the videos in some articles are third-party content. They are not loaded automatically: you see a placeholder first, and nothing is requested from Google or YouTube until you click “Show map” or “Play video”. Only then can these services set their own cookies (see below).

Only strictly necessary technical cookies are used, and only for logged-in administrators of the website (WordPress login and security cookies). These are exempt from consent because the site cannot be administered without them.

Google Maps

Our Contact page offers a map from Google Maps, provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) and, for users in the EEA, Google Ireland Limited. The map is loaded only after you click “Show map”. From that moment your browser connects to Google’s servers, and Google processes data such as your IP address and may set cookies; data may be transferred to the USA. If you do not click, no data is sent to Google.

Legal basis: your consent, given by clicking the button (Article 6(1)(a) GDPR). More information: Google Privacy Policy.

YouTube videos

Some articles contain official videos from YouTube (Google LLC / Google Ireland Limited). We embed them in YouTube’s privacy-enhanced mode (youtube-nocookie.com), and only after you click “Play video”. After the click, YouTube processes data such as your IP address and may store cookies or similar data on your device; data may be transferred to the USA. If you do not click, no data is sent to YouTube.

Legal basis: your consent, given by clicking the button (Article 6(1)(a) GDPR). More information: Google Privacy Policy.

Who receives your data

Your data is processed by Tomyco d.o.o. It is stored with our web hosting and email service providers, who process it on our behalf and only on our instructions (processors). Backups of the website, which include stored inquiries, are made to keep the data available in case of technical problems. We do not transfer your data to third parties for their own use, unless we are required to do so by law.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you
• have inaccurate data corrected
• have your data deleted (“right to be forgotten”)
• restrict the processing of your data
• data portability – receive your data in a common machine-readable format
• object to processing based on our legitimate interest
• withdraw your consent at any time, without affecting earlier processing

To exercise any of these rights, write to info@tomyco.si. We will reply without undue delay and at the latest within one month.

Right to lodge a complaint

If you believe that we process your personal data unlawfully, you can lodge a complaint with the Slovenian supervisory authority:
Informacijski pooblaščenec Republike Slovenije (Information Commissioner of the Republic of Slovenia)
Dunajska cesta 22, 1000 Ljubljana, Slovenia
www.ip-rs.si

Changes to this policy

We may update this policy when our website or the law changes. The current version is always published on this page, with the date of the last update at the top.