Privacy Policy

The controller is REGIONALNI TEHNOLOŠKI CENTER ZASAVJE d.o.o. (short form: RTCZ d.o.o.), Naselje Aleša Kaple 9a, 1430 Hrastnik, Slovenia. Company registration number: 1639030000. VAT ID: SI69351953.

For any question about data protection, contact us at info@rtcz.si or at the address above. We have not appointed a Data Protection Officer, as the conditions in Article 37 GDPR do not apply to us.

Quote request form. When you submit a request, we process the data you enter yourself: your name, email address, company name, phone number, the content of your message, and the details of your request (industry, use case, material, quantity, finishing, deadline). You may optionally attach a file (e.g. a CAD model) or provide a link to one. We use this data solely to handle your request and prepare a quote.

Confirmation email. We automatically send a confirmation of receipt to the email address you enter in the form. This message is not marketing and does not sign you up to any mailing list.

Bot protection (Cloudflare Turnstile). When the form is submitted, a security check runs in which the provider Cloudflare processes your IP address, browser information and interaction pattern. Its purpose is to prevent abuse of the form.

Rate limiting. On submission, your IP address is briefly stored as a counter entry in Upstash Redis to prevent mass abuse of the form. The entry is deleted automatically when the time window expires, after about two hours.

Cookieless traffic measurement (Vercel Analytics and Vercel Speed Insights). These collect aggregated data about visits and loading performance (e.g. pages viewed, load times). They use no cookies, do not store your IP address, and cannot track an individual visitor across websites.

Google Analytics 4 (only with your consent). If you accept statistics cookies in the cookie banner, Google Analytics 4 is loaded and sets the _ga and _ga_<ID> cookies. These let us measure traffic, how visitors move through the site, and how many quote requests are submitted. Without your consent the Google Analytics script is not loaded at all and no data is sent to Google. We use no advertising cookies and no profiling for advertising purposes.

Server logs. Our hosting provider Vercel, like any web server, automatically records standard access logs (IP address, request time, page address, browser type), which is technically necessary for the operation and security of the site.

Your cookie choice. Your choice in the cookie banner, together with its timestamp and policy version, is stored in your browser's local storage (localStorage). The record stays in your browser and is never transmitted to us; it exists so we do not ask you again and so the validity of a given consent can be demonstrated.

Google Search Console. We use Google Search Console to monitor how the site appears in Google Search. The tool shows us only aggregated statistics about search queries and rankings, which Google collects as an independent controller through its own search engine. It sets no cookie on our website and collects nothing about you as a visitor to this site.

Content management (Contentful). We manage the site's content in Contentful. That system collects no data about website visitors.

Fonts. The Inter and Space Grotesk typefaces are hosted on our own server and served from this website. Your browser does not connect to Google Fonts servers when viewing the site.

Data from the quote request form is processed under Article 6(1)(b) GDPR (steps taken at your request prior to entering into a contract). The same basis covers the confirmation email.

The security check (Cloudflare Turnstile), rate limiting, server logs and cookieless traffic measurement (Vercel Analytics and Speed Insights) are processed under Article 6(1)(f) GDPR (our legitimate interest in the security, availability and improvement of the website). We have assessed that this processing, being limited in scope and short-lived, does not override your rights and freedoms.

Google Analytics 4 and its cookies are processed solely on the basis of your consent under Article 6(1)(a) GDPR and Article 225 of the Slovenian Electronic Communications Act (ZEKom-2). You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing carried out before it.

Providing personal data is not a statutory obligation. However, without the data in the form (at minimum your name and email address) we cannot handle your request or send you a quote.

Quote requests and the related correspondence (including attached files) are kept in our business mailbox with our provider Webtasy d.o.o. (Domenca) for 2 years from the last contact, after which they are deleted. If a request leads to an order, the related documentation is subject to the longer statutory retention periods, in particular under tax and accounting legislation.

The rate limiting entry (IP address) is deleted automatically when the time window expires, after about two hours.

The _ga and _ga_<ID> cookies last 2 years from your last visit, or until you withdraw consent, at which point we delete them.

The record of your cookie choice is valid for 12 months; after that we ask for consent again. You can delete it yourself at any time by clearing the site's data in your browser.

Aggregated Vercel Analytics and Speed Insights data and server logs are retained according to Vercel's default retention periods.

We do not sell personal data and do not share it with third parties for their own purposes. Access is limited to our employees who handle quote requests and to the processors listed below, with whom we have data processing agreements in place under Article 28 GDPR.

Some of the processors listed above are established in, or process data in, the United States. Such transfers take place under the European Commission's adequacy decision for the EU-US Data Privacy Framework where the provider is certified under it, and otherwise under the standard contractual clauses adopted by the European Commission, together with supplementary technical and organisational measures. You may request a copy of the relevant safeguards at info@rtcz.si.

A cookie is a small file a website stores in your browser. This website uses no strictly necessary cookies: the form, the security check and Vercel's traffic measurement all work without them.

The only cookies this website may set are the Google Analytics 4 statistics cookies, and only if you consent. You can change or withdraw your consent at any time via the "Cookie preferences" link in the site footer. On withdrawal we delete both cookies.

Separately, we store the record of your cookie choice in your browser's local storage (localStorage). Technically this is not a cookie and it is never sent to a server.

Under the GDPR you have the right of access to your personal data (Article 15), to rectification (Article 16), to erasure (Article 17), to restriction of processing (Article 18), to data portability (Article 20), and to object to processing based on legitimate interest (Article 21).

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal. Consent for statistics cookies is withdrawn via the "Cookie preferences" link in the site footer.

To exercise a right, write to info@rtcz.si. We respond without undue delay and at the latest within one month of receipt. To prevent abuse, we may ask for additional information to verify your identity.

If you believe the processing of your personal data infringes the law, you may lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, email gp.ip@ip-rs.si, website www.ip-rs.si.

We do not use personal data for automated decision-making producing legal or similarly significant effects on you, nor for profiling for advertising purposes.

The website is served exclusively over an encrypted HTTPS connection. Form data is not stored in a website database; it is delivered by email to our business mailbox and then retained according to the periods above. Uploaded files are checked for size and type before sending and are not stored on the website's server.

This website is aimed at business users and is not directed at persons under 16. We do not knowingly collect children's personal data.

We may update this policy from time to time, in particular when we introduce new services or change existing ones. The version published on this page is the one in force; the date of the last update is shown at the top. Where a change concerns cookies or consent, we ask for your consent again.

REGIONALNI TEHNOLOŠKI CENTER ZASAVJE d.o.o. (short form: RTCZ d.o.o.)
Naselje Aleša Kaple 9a, 1430 Hrastnik, Slovenia
Privacy enquiries: info@rtcz.si
General email: info@3d-prototip.si
Phone: +386 3 56 42 750