Skip to content
XALIOPEA
ENSL

Last updated: 2 September 2026

Privacy policy

XALIOPEA INTERNATIONAL d.o.o. ("Xaliopea International", "we", "us") respects your privacy. This policy explains what personal data we process, why, and what rights you have under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Slovenian Personal Data Protection Act.

1. Data controller

The data controller is XALIOPEA INTERNATIONAL d.o.o., Ravne 14, Sv. Anton, 6276 Pobegi, Slovenia, registration number 7227868000, VAT identification number SI10402624.

For any question about this policy or about your personal data, write to aurora.makovac@gmail.com.

2. Data we process through this website

This website is deliberately minimal. It does not use cookies, analytics, advertising trackers, embedded social media widgets or third-party fonts loaded at runtime. We do not build profiles of visitors and we do not sell or share data with advertisers.

Our hosting provider processes standard server request records — including IP address, browser user agent, requested page and timestamp — for the purpose of delivering the site and protecting it from abuse. This processing rests on our legitimate interest in operating a secure website (Article 6(1)(f) GDPR).

3. Data you send us directly

If you contact us by email, we process the contents of your message and your contact details in order to reply and, where relevant, to negotiate or perform a contract (Articles 6(1)(b) and 6(1)(f) GDPR).

Correspondence is retained for as long as it is needed for the enquiry or the business relationship, and afterwards only where statutory accounting and tax rules require it.

4. Our applications

Applications we publish under our own name in the Google Play Store, the Apple App Store or elsewhere are covered by the data-safety disclosure shown on each application's store listing, which states exactly what that application collects and why.

Where an application collects no personal data, we say so on the listing and no such data reaches us. Where an application does collect personal data, it is processed only for the stated purpose, never sold, and never shared with third parties except with processors acting on our documented instructions.

5. Work performed for clients

In development and consulting work we may process personal data contained in a client's systems. In that role we act as a processor on behalf of the client, who remains the controller, under a written data processing agreement that limits us to the client's documented instructions.

6. Recipients and international transfers

We disclose personal data only to service providers necessary to run our business — hosting, email and accounting — each bound by a data processing agreement, and to public authorities where the law requires it.

We keep data within the European Economic Area wherever possible. If a transfer outside the EEA is unavoidable, it takes place under an adequacy decision or the European Commission's standard contractual clauses.

7. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you
  • have inaccurate data corrected
  • have your data erased where the legal grounds apply
  • restrict or object to processing based on legitimate interest
  • receive your data in a portable, machine-readable format
  • withdraw consent at any time, where processing is based on consent

8. Exercising your rights and complaints

Send any request to aurora.makovac@gmail.com. We answer within one month, as required by the GDPR.

If you believe we are processing your data unlawfully, you may lodge a complaint with the Slovenian supervisory authority: Informacijski pooblaščenec, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si.

9. Changes to this policy

We may update this policy as our services or the law change. The date at the top of this page always reflects the current version.

Back to home
Ravne 14, Sv. Anton, 6276 Pobegi