Privacy policy

Data controller

The controller of your personal data is DESTINATUM, družba za svetovanje in trgovino d.o.o., Holcerjeva ulica 7, Skoke, 2204 Miklavž na Dravskem polju (“we” or “us”), trading under the Performance Marketing brand. Registration number: 1868144000, VAT ID: SI43949371.

If you have any questions about data protection, please email us at info@pm.si.

What data we process

• Contact form data: your full name, email address, phone number (optional), company, website, any details about your business you choose to provide (such as revenue range or line of business), and the content of your message.
• Communication data: the content of emails, phone calls and video calls we have with you.
• Technical data: IP address and browser information in server logs, which are needed to keep the website running securely.
• Cookie data: only to the extent you allow. See our cookie policy for details.

Purposes and legal bases

• Responding to your enquiry and preparing a proposal — taking steps at your request prior to entering into a contract (point (b) of Article 6(1) GDPR).
• Performing a contract — where you work with us (point (b) of Article 6(1) GDPR).
• Website security and abuse prevention — our legitimate interests (point (f) of Article 6(1) GDPR).
• Analytics and advertising measurement — only on the basis of your consent (point (a) of Article 6(1) GDPR), which you may withdraw at any time.
• Compliance with legal obligations, such as retaining accounting records (point (c) of Article 6(1) GDPR).

We do not use your data for automated decision-making or profiling that produces effects concerning you, and we do not sell it.

Processors and recipients

Your data may be processed by carefully selected processors acting under contract, who ensure an appropriate level of protection:

• our website hosting provider (servers in the European Union);
• Google Ireland Limited — email (Google Workspace) and, with your consent, Google Analytics and Google Ads;
• Meta Platforms Ireland Limited — with your consent, measurement of ad performance.

Where providers transfer data to the United States, the transfer is based on the EU–US Data Privacy Framework or on the standard contractual clauses adopted by the European Commission.

Retention periods

• We keep enquiry data for up to 12 months after our last contact if we do not go on to work together.
• If we enter into a contract, we keep your data until the contract has been performed and thereafter for as long as the law requires (for example, 10 years for accounting records).
• We keep server logs only for as long as necessary for security purposes — as a rule, for no more than 30 days.
• We store your cookie preferences for 6 months.

Your rights

You may at any time request access to your data, its rectification or erasure, restriction of processing or data portability, and you may object to processing based on legitimate interests. You may withdraw your consent at any time; this does not affect the lawfulness of processing carried out before its withdrawal.

Please send your request to info@pm.si. We will respond within one month at the latest.

If you believe that we are in breach of data protection law, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si.

Data security

This website uses an encrypted connection (HTTPS). Only authorised staff who need the data for their work have access to it, and the contact form is protected against abuse.

Changes to this policy

We may update this privacy policy when our services or the applicable law change. The current version is always published on this page.