Privacy Policy

1. Who We Are

The data controller is FULL STACK, Dario Horvat s.p., with its registered office at Lendavske gorice 412b, 9220 Lendava, registration number: 8842205000, VAT number: 53772881 (hereinafter referred to as "we", "us" or "the company").

For any questions regarding the protection of personal data, you may contact us at the following email address: dario.horvat@fullstack.si.

2. What Data We Collect

We collect the following types of personal data:

• Contact form: first and last name, email address, phone number (optional), message content.
• Event registration: first and last name, email address, phone number.
• Cookies and analytics: website usage data (IP address, browser type, time of visit). Details are provided in the cookies section below.
• Event photographs: photographs uploaded by guests via a QR link, or taken at the photo booth. They generally show identifiable people. We store the upload time, technical image data and — if the guest enters one — an optional name. See section 5 below.

3. Legal Basis for Processing

We process personal data on the following legal bases in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2):

• Legitimate interest (Art. 6(1)(f) GDPR): processing contact inquiries and responding to messages.
• Contract (Art. 6(1)(b) GDPR): processing data for the performance of services and event registrations.
• Consent (Art. 6(1)(a) GDPR): where consent is required (e.g., analytics cookies, email notifications).
• Legitimate interest (Art. 6(1)(f) GDPR) — event photographs: collecting and displaying event photographs for the organiser and the guests. We do not ask for consent for this — instead you may object at any time (Art. 21 GDPR) and we will remove the photograph.

4. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected:

• Contact messages: up to 1 year after the conclusion of communication.
• Event registrations: up to 6 months after the conclusion of the event.
• Cookies: in accordance with the validity of each individual cookie (see the cookies section below).
• Event photographs: kept for the period agreed for that event (90 days by default; longer for some events, which is stated on the notice at the venue). After that they are permanently deleted — from the database and from storage. Anonymisation is not possible: a photograph of a face remains personal data.

5. Event photographs — how we handle them

Who can see your photograph. We share it with the event organiser (the couple or client) and with guests of the same event, in a gallery reached through the QR link.

Display on a screen at the venue. Your photograph may be shown on a screen or projection at the venue (a “photo wall”). Not every photograph is shown — it depends on the settings for that event, and the organiser can switch the display off at any time.

Stated plainly: photographs are not necessarily reviewed by anyone before they appear. Depending on the event settings, a photograph may be displayed automatically. The control is removal after the fact: once hidden, it disappears immediately from the screen, the gallery, the leaderboard and the archive the organiser receives.

Objection and removal (Art. 21 GDPR). You may ask for a photograph to be removed at any time — including one you did not upload but appear in. Tell the helper at the event, or write to dario.horvat@fullstack.si. We remove it without asking for reasons.

What we do not do. We do not use photographs for marketing, we perform no facial recognition or biometric processing, we build no profiles, and we do not link photographs across different events.

Children. Minors may be present at events. If you are a parent or guardian and want a child’s photograph removed, the process above applies and we treat it as a priority.

6. Your Rights

In accordance with the GDPR and the Slovenian Personal Data Protection Act (ZVOP-2), you have the following rights:

• Right of access – you may request a copy of your personal data.
• Right to rectification – you may request the correction of inaccurate data.
• Right to erasure – you may request the deletion of your personal data ("right to be forgotten").
• Right to restriction of processing – you may request the restriction of processing of your data.
• Right to data portability – you may request the transfer of your data in a structured format.
• Right to object – you may object to processing based on legitimate interest.

Please send requests to dario.horvat@fullstack.si. We will respond to requests within 30 days.

7. Cookies

This website uses cookies to ensure proper functioning and to improve the user experience.

• Necessary cookies: enable basic website functionality (e.g., login, session). These cookies are essential and cannot be disabled.
• Analytical cookies: help us understand how visitors use the website. We use them only with your consent.

You can change your cookie settings at any time in your browser settings or through our cookie banner.

8. Data Transfers and Processors

We do not sell your data and do not pass it to third parties for their own purposes. We use the following processors to operate the service:

• Server hosting — an infrastructure provider with servers in the European Union.
• Photo storage — an object-storage provider configured to keep data in the European Union. The provider may be a company established outside the EEA, so any transfers are covered by standard contractual clauses and a data processing agreement.
• Email delivery — for confirmation messages on data requests.

For the exact list of processors on a given date, contact us at dario.horvat@fullstack.si.

9. Data Security

We use appropriate technical and organisational measures to protect your personal data, including encryption of data in transit (SSL/TLS), access restrictions, and regular security reviews.

10. Complaint

If you believe that the processing of your personal data violates applicable legislation, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec Republike Slovenije):

• Website: www.ip-rs.si
• Email: gp.ip@ip-rs.si
• Address: Dunajska cesta 22, 1000 Ljubljana

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting them on this page. We recommend that you periodically check this page for any changes.

12. Contact

For questions regarding the protection of personal data or to exercise your rights, please contact us:

• FULL STACK, Dario Horvat s.p.
• Address: Lendavske gorice 412b, 9220 Lendava
• Email: dario.horvat@fullstack.si
• Phone: +386 40 844 981