1. Data controller
The data controller is Valutoria, which operates the Valutoria.net website. For any questions about the processing of personal data, contact us at info@valutoria.net.
2. What data we collect
- Account data: email address, name (if provided), hashed password.
- Technical data: IP address, browser type, visit time, pages viewed (via Google Analytics 4).
- Communication: the content of messages you send us.
- Newsletter: your email address if you subscribe.
3. Purpose and legal basis
- Contract performance (Art. 6(1)(b) GDPR): managing your account and access to content.
- Consent (Art. 6(1)(a) GDPR): sending the newsletter and optional analytics cookies.
- Legitimate interest (Art. 6(1)(f) GDPR): site security and abuse prevention.
4. Who we share data with
We share data only with the following processors acting on our behalf:
- Supabase / Lovable Cloud — database hosting and authentication.
- Google Ireland Ltd. — traffic analytics (Google Analytics 4).
- Cloudflare — hosting and protection against attacks.
5. Transfers to third countries
Some processors are located outside the EU (e.g. the US). Transfers rely on the European Commission's Standard Contractual Clauses or other appropriate safeguards under the GDPR.
6. Retention periods
- Account data: while the account is active + 30 days after deletion.
- Newsletter: until you unsubscribe.
- Analytics data: 14 months.
7. Your rights
Under the GDPR you have the following rights:
- Right of access
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object
- Right to withdraw consent
You can exercise these rights at info@valutoria.net. You may also lodge a complaint with the Slovenian Information Commissioner (www.ip-rs.si).
8. Cookies
The site uses strictly necessary cookies (login, cart) and analytics cookies (Google Analytics 4) to improve the user experience. You can decline analytics cookies in your browser settings.