Privacy Policy
Last updated: June 2026
1. Data controller
Controller: Ansambel Istrski Fantje, Korte, Slovenia
Email: info@istrskifantje.com
Phone: +386 40 303 990
This policy explains how we process personal data when you visit istrskifantje.com and use services offered on the site.
2. Data we process
Depending on your use we may process:
- Technical visit data (e.g. IP address, browser type, time of visit, pages viewed) where needed for operation, security, or statistics with your consent.
- Cookie data, including analytics (Google Analytics) if you accept via the cookie banner.
- Contact data if you email or call us (e.g. name, email, message content).
- Shop notification sign-up data (first name, last name, email) and a record of consent if you use the form on the Shop page.
We do not intentionally collect sensitive categories of data via the website.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Website operation and security | Legitimate interest (Art. 6(1)(f)) |
| Visit statistics (Analytics) | Consent (Art. 6(1)(a)) |
| Answering enquiries | Legitimate interest / pre-contract (Art. 6(1)(f) or (b)) |
| Shop opening notification | Consent (Art. 6(1)(a)) |
4. Cookies
Essential cookies enable basic functions (e.g. storing your cookie choice).
Analytics cookies (e.g. Google Analytics) load only if you choose “Accept” in the banner. Refusing analytics does not block viewing the site. You can change browser settings or revisit the banner where available.
5. Retention
- Analytics data: according to provider settings and our retention (typically up to 26 months or shorter if configured).
- Enquiry emails: as long as needed to handle the matter, usually up to 2 years.
- Shop subscribers: until consent is withdrawn or after the notification is sent, within a reasonable period thereafter.
6. Recipients
We may share data with:
- hosting and maintenance providers (processors),
- Google Ireland Limited (Analytics) if you consented,
- authorities when required by law.
We use appropriate processor agreements where required.
7. Transfers outside the EEA
If a provider (e.g. Google) processes data outside the EEA, this relies on appropriate safeguards (e.g. EU Standard Contractual Clauses). More information is available from the provider.
8. Your rights
You have the right of access, rectification, erasure, restriction, objection (where applicable) and portability (where applicable). You may withdraw consent at any time without affecting lawfulness before withdrawal. You may lodge a complaint with your supervisory authority; in Slovenia: Information Commissioner (www.ip-rs.si).
Contact: info@istrskifantje.com.
9. Security
We use reasonable technical and organisational measures (e.g. HTTPS, restricted CMS access, server updates) to reduce risk of unauthorised access or loss.
10. Children
The website is not directed at children under 16 without parental consent. If we learn we collected a child’s data without a proper basis, we will delete it.
11. Changes
We may update this policy. The new version is published on this page with the last updated date.