Cookie Policy

Identity of the data controller

• ESGON, d.o.o.
• Ameriška ulica 2
• 1000 Ljubljana
• Slovenia

• VAT number: 32212950
• Registration number: 7487622000
• Contact: info@esgon.si · 031 865 278

The company does not have a data protection officer (DPO).

What personal data do we process?

If you use our services, we collect various types of your data, such as your contact details and your IP address.

We process the following personal data:

• Contact details, comprising personal data through which we can get in touch with you: first and last name, email, company name, job title and the data you disclose in the online form;
• Device data from which you access the web, such as the IP address and the location associated with it, the chosen browser and its version;

For the purposes of analytical processing and advertising we use Google Analytics and Hotjar, which collect certain data. More on this below.

Change cookie settings

Detailed cookie table

Google Analytics

Purpose / Information:

This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd. (“Google”). The Google Analytics service uses a special type of cookie, which is stored on your computer and enables the analysis of your use of the website. The information about the use of the website collected by the cookie is generally transferred to a Google server in Ireland and stored there.

The Google Analytics service on this website has been extended to include the code “gat._anonymizeIp();”, which ensures the anonymous collection of IP addresses (so-called IP masking). With IP anonymization on this website, Google will truncate your IP address within the area of the EU and other states party to the European Economic Area Agreement. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there.

Google uses this information on our behalf to analyze your use of this website, in order to compile reports on website activity and provide additional services related to website use and internet use. Google may pass this information on to third parties where required by law or where these third parties process the data on Google's behalf. The IP address transmitted by your browser as part of the Google Analytics service is not combined with any other data held by Google.

We use Google Analytics to analyze and regularly improve the use of our website. With the help of the statistical data obtained, we can improve our offering and make it more interesting for you as a user. At the same time, we obtain information about the functionality of our website.

In the Google Analytics configuration we have ensured that Google receives this data as a processor and therefore may not use this data for its own purposes. The configuration of the advertising features of the Google Analytics service is independent of this and is described in the relevant section, provided that it is also used on this website.

Recipients:

Third-party data: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001. Google Analytics terms of service, a general overview of Google Analytics security and privacy principles, Google's privacy policy. Google uses standard contractual clauses (SCC) for data transfers.

Deletion / Objection:

You can disable the storage of cookies by selecting the appropriate setting in your browser. In addition, you can prevent Google from recording the data related to your use of the website collected by the cookie (including your IP address) and from processing this data by downloading and installing the browser add-on available on the website.

Cookie lifetime: up to 12 months (this applies only to cookies set by this website).

Maximum data storage period: up to 26 months.

Legal basis: Article 6 (1) f GDPR (legitimate interest)

Advertising features of the Google Analytics service

If you consent to the use of the advertising features of the Google Analytics service, this website uses the extended features of the Google Analytics service in addition to the standard features. The advertising features of the Google Analytics service used on this website include reports on demographic characteristics and interests within the Google Analytics service.

We use Google Analytics cookies to assess the demographic characteristics and interests of visitors to our website in an anonymous form. We use this information to improve the website.

You can prevent your participation in this tracking process in several ways: a) by setting your browser accordingly; b) via Google's advertising settings at https://www.google.com/ads/preferences/?hl=en; c) by setting your cookie options accordingly. Please note that in this case you may not be able to fully use all the features of this offering.

Storage period: up to 26 months.

Legal basis: Article 6 (1) a GDPR.

Hotjar (Hotjar Ltd.)

This website uses the Hotjar web analytics service provided by Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe Tel.: +1 (855) 464-6788).

This tool shows us the movements across the web pages on which Hotjar is used (so-called heatmaps). With it we can see how far users move and which buttons they click and how often. In addition, with the help of the tool we can also obtain direct feedback from website users. In this way we obtain valuable information on the basis of which we can design our web pages to be faster and more customer-friendly. The above analysis is based on our legitimate interests in optimization and marketing as well as the appropriate design of our website in accordance with point f of Article 6(1) of the GDPR. When using this tool we pay particular attention to the protection of your personal data. Therefore, we can only determine which buttons you click and how far you scroll. Areas of the web pages where your personal data or the personal data of third parties is shown are automatically hidden by Hotjar, so it can never be read.

Hotjar provides every user with a “Do Not Track Header” option, with which the use of the Hotjar tool is prevented, so that no data about the visit to individual web pages can be recorded. This setting is supported by all the latest versions of available browsers. In this way your browser sends a request to the Hotjar program to disable the tracking of an individual user. If you use our website with different browsers/computers, you must set the “Do Not Track Header” option for each individual browser/computer separately.

Detailed instructions with information about your browser can be found at the following address: https://www.hotjar.com/opt-out
Additional information about Hotjar Ltd. and the Hotjar tool can be found at the following address: https://www.hotjar.com
The privacy policy of Hotjar Ltd. can be found at the following address: https://www.hotjar.com/privacy.

Why do we process data?

On the pages of our website we use cookies; we use your data to determine the number of visitors and for other statistical processing (more in the previous section on Google Analytics and Hotjar).

This website uses cookies to improve your experience. We use cookies that are strictly necessary for the proper functioning of the website and optional cookies for analytics purposes.

Essential cookies are key to the proper functioning of the website; in addition we use optional third-party cookies that help us analyze and understand how you as visitors use our website.

Optional cookies will be stored in your browser only with your consent. You also have the option to opt out of these cookies. However, disabling some cookies may affect your browsing experience.

With whom do we share your personal data and how do we protect it?

Data recipients:

Google Analytics: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001. Google Analytics terms of service, a general overview of Google Analytics security and privacy principles, Google's privacy policy. Google uses standard contractual clauses (SCC) for data transfers to third countries.

Hotjar: Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe Tel.: +1 (855) 464-6788).

Security measures:

We store your personal data on a secured server at the company Avant.Si d.o.o. (neoserv.si), where we also host the website.

To protect your personal data we use the following technical and organizational measures:

Technical measures:

• Secured servers: The data is stored on secured servers at the company Avant.Si d.o.o.
• Firewall: Dedicated protection of the website with a firewall
• SSL encryption: All communication is protected with SSL certificates

Organizational measures:

• Only authorized persons have access to personal data

International transfers of personal data

Your personal data may be transferred and processed in countries outside the European Economic Area (EEA):

Google Analytics (Google Ireland Limited):

• Location: Ireland (within the EEA) and the USA
• Legal basis: Standard contractual clauses (SCC) under Article 46(2)(c) GDPR
• Additional measures: Google provides additional technical and organizational measures to protect data during transfers to third countries

Hotjar (Hotjar Limited):

• Location: Malta (within the EEA)
• Status: Processing within the EEA, additional transfers in accordance with the GDPR

We carry out all international transfers of personal data in accordance with applicable international data protection agreements and ensure an adequate level of protection of your personal data.

Data retention period

We store data only for as long as is necessary to achieve the purpose for which it was collected, or until you withdraw your consent.

What are your rights in connection with the processing of personal data?

In accordance with the GDPR you have the following rights:

Right of access (Article 15 GDPR)

You have the right to find out what data we collect about you, for what purposes and for how long, where we obtain your personal data from, to whom we disclose it, who else processes it besides us, and what your other rights are in connection with the processing of your personal data. If you are not entirely sure which personal data we collect about you, you can request confirmation from us as to whether or not we collect personal data relating to you, and if we do, you have the right to access this data. In accordance with the right of access, you can request from us a copy of the processed data, whereby we will provide the first copy free of charge and each subsequent copy against payment.

Right to rectification (Article 16 GDPR)

If you notice that the personal data we hold about you is incorrect or incomplete, you have the right to request that we correct or complete it, without undue delay.

Right to be forgotten or erasure (Article 17 GDPR)

In some cases you have the right to erasure of your personal data. We will erase your personal data as soon as possible if any of the following reasons is met:

• We no longer need your personal data for the purposes for which we processed it;
• you have withdrawn your consent to the processing of personal data, where the data concerned is data whose processing requires your consent and we at the same time have no other reason for the further processing of this data.

Please be aware, however, that even if one of the described reasons is met, this does not mean that all your personal data will be erased immediately. This right cannot be exercised in the event that the processing of your personal data continues to be necessary for the fulfillment of our legal obligations.

Right to restriction of processing (Article 18 GDPR)

In certain cases you have the right to request restriction of the processing of your personal data.

Right to data portability (Article 20 GDPR)

To the extent you wish, it is your right to request and receive the personal data relating to you that you have provided to us. To the extent you request it, you will receive it in a structured, commonly used and machine-readable format. At the same time you have the right to transmit this data to other controllers of personal data, without us hindering you in doing so.

Right to object (Article 21 GDPR)

You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data.

Right to lodge a complaint (Article 77 GDPR)

You have the right to lodge a complaint with a supervisory authority (the Information Commissioner of the Republic of Slovenia).

Procedure for exercising rights

To exercise your rights in connection with the protection of personal data:

How to contact us:

Email: info@esgon.si
Subject: “Exercising GDPR rights”

In your request, state:

• First and last name
• Contact details
• A description of your request
• The type of right you wish to exercise

Response time:

We respond to your request without undue delay, and at the latest within one month of receiving the request.

Identity verification:

In some cases we may need to verify your identity in order to protect your personal data from unauthorized access.

Automated decisions and profiling

On our website we do not carry out automated decision-making or profiling that would have legal effects for you or significantly affect you.

Analytical cookies (Google Analytics, Hotjar) are used exclusively for:

• Analyzing website traffic
• Improving the user experience
• Understanding visitor behavior

These analyses do not affect the content you see, nor do they create profiles for advertising purposes.

Changes to the privacy policy

We will inform you of all significant changes to this policy by means of a notice on the website and a request that you re-accept your cookie settings. We will publish minor changes on this page, indicating the date of the last update.

We recommend that you check the policy regularly so that you are aware of any changes.

For all questions regarding the protection of personal data you can contact:

ESGON, d.o.o.
Email: info@esgon.si
Subject: “Protection of personal data”

This policy was last updated: 3 Sep 2025

See also: Privacy Policy · Terms and Conditions