Privacy Policy

Date of adoption: February 24., 2026

1. Introduction

We are committed to protecting your privacy and carefully processing personal data. Our website uses cookies to improve the user experience and support the operations of Studio Norya — a creative studio specializing in design, strategy, and marketing. All data processing is carried out in accordance with applicable legislation, including the General Data Protection Regulation (GDPR) and the Electronic Communications Act (ZEKom-1).

2. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. We use cookies to enhance website functionality, analyze visits, and support your engagement in the programs and projects.

3. Purpose of Collecting Personal Data

We collect personal data exclusively for the following purposes:

  • Communication with users and clients.
  • Notifying about the services, products, or events (e.g., newsletters).

4. Types of Data Collected

We collect the following personal data:

  • First and last name
  • Email address
  • Mobile phone number

5. Legal Basis for Data Processing

Personal data processing is based on:

  • The individual’s consent (Article 6(1)(a) GDPR), given voluntarily when subscribing to newsletters or filling out a contact form.

6. Data Storage and Security

  1. Storage:
  • Personal data is stored electronically on a secure server.
  • Access to data is restricted to authorized personnel only.
  1. Retention Period:
  • Data is retained until the individual withdraws consent or until the purpose of processing is fulfilled.
  • After withdrawal of consent or fulfillment of purpose, data is permanently deleted.
  1. Security Measures:
  • Use of strong passwords for data access.
  • Regular software updates and protection via antivirus solutions.
  • Email encryption where necessary.

7. Individual Rights

In accordance with the GDPR and the Slovenian Personal Data Protection Act (ZVOP-2), individuals have the following rights:

  • Right of access to their personal data.
  • Right to rectify inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”).
  • Right to restrict processing.
  • Right to data portability.
  • Right to object to processing.
  • Right to withdraw consent at any time (withdrawal does not affect the lawfulness of processing prior to withdrawal).

Contact for Exercising Rights:

8. Disclosure of Data to Third Parties

We do not disclose personal data to third parties, except when necessary to fulfill legal obligations.

9. Procedures in Case of Data Breach

In the event of a personal data breach, we will:

  1. Immediately take action to protect data and mitigate consequences.
  2. Notify the Information Commissioner of the Republic of Slovenia within 72 hours of discovering the breach, if there is a risk to individuals’ rights.
  3. Notify affected individuals if the breach poses a high risk to their rights.

10. Use of Cookies on the Website

Types of cookies used:

  • Necessary cookies: Ensure basic website functionality and cannot be disabled.
  • Analytical cookies: Help us understand website usage for further development and improvements.
  • Functional cookies: Support personalization of the user experience.
  • Advertising cookies: Used to display content tailored to our mission and programs.

Your Cookie Choices:

Upon your first visit to our website, you will be prompted to set your cookie preferences. You may reject or adjust the use of analytical, functional, and advertising cookies at any time via the cookie settings link.

11. Processing of Personal Data via Cookies

Through cookies, we may process certain personal data, such as:

  • IP address
  • Device information
  • Information about your interaction with the website

These data are processed exclusively for the purposes you have consented to.

12. Consent for Personal Data Processing

We obtain consent from individuals in a clear and understandable manner before collecting data. Consent must be:

  • Clear and voluntary.
  • Withdrawable at any time.

13. Contact Information for Questions

For any questions regarding personal data processing, individuals may contact:

This policy is effective from the date of adoption and is regularly updated
in line with changes in legislation.

Eva Malerič s.p.