This page describes what personal data we receive when you use the slo-way.com website, and how we process and protect it.

The organisation Poslovno svetovanje, Mariia Golubnik s.p., Kamniška ulica 26A, 1000 Ljubljana, Slovenia, tel. +386 31 020 553 (hereinafter "the company", "we") pays particular attention to the security and confidentiality of users' personal information.

We receive contact and other personal data from people who visit our website and want to obtain further information about the company's services and/or contact us through:

  • online forms on the website;
  • internet communication systems (WhatsApp, Telegram, Viber and other messengers listed on the website);
  • social networks;
  • the email and/or phone listed on the website.

1. Principles of personal data processing

When processing personal data, the company is guided by the requirements of European Union and Republic of Slovenia data protection law and observes the following principles:

  • Lawfulness, fairness and transparency — personal data is processed on lawful grounds, openly and fairly towards the data subject.
  • Purpose limitation — personal data is collected for clearly defined and lawful purposes and is not further processed in a way incompatible with those purposes.
  • Freedom of choice and consent — data is processed primarily on the basis of freely given consent of the data subject, or to the extent necessary to perform a contract, meet legal obligations or pursue the company's legitimate interests.
  • Data minimisation — only the data, and only to the extent, necessary to achieve the specific processing purposes is processed.
  • Accuracy and currency — the company aims to keep data accurate and up to date, based on the information provided by the data subject.
  • Storage limitation — personal data is kept in a form that allows data subjects to be identified for no longer than is necessary for the processing purposes, or until consent is withdrawn, unless the law requires otherwise.
  • Integrity and confidentiality — the company takes the necessary technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction.

2. Purposes of personal data processing

The company collects, processes and stores personal data for the following purposes:

  • providing consultations and the company's other services on immigration, settling in and related matters, including through online forms, messengers and other communication channels;
  • preparing individual and anonymised offers in line with the data subject's interests in the company's areas of activity (immigration, study, business, etc.);
  • concluding, performing and administering contracts with clients and partners;
  • informational and marketing communication (sending information about services, special offers, events, etc.) where the relevant consent has been given;
  • conducting surveys, research, campaigns and events related to the company's activities;
  • compiling internal statistics and analytics to improve the quality of services and develop the company.

3. What personal data we collect

You can use most sections of the slo-way.com website without disclosing your identity. However, if you fill in an online form on the website, contact us through messengers, social networks, email or by phone, subscribe to the newsletter or otherwise voluntarily provide your data, we may request and process the following categories of personal data (depending on the specific request and form):

  • first and last name;
  • email address;
  • phone number;
  • preferred communication channel (messenger, social network, etc.);
  • country and city of residence;
  • the immigration route, service or topic of interest;
  • for a more detailed request — date of birth, citizenship, level of education, marital status, information about work or study, and other information necessary for a preliminary assessment of whether the services can be provided, agreed with you.
  • technical data when filling in forms on the website — IP address and browser type (user-agent). This is used solely to protect forms from automated spam and is stored together with the enquiry.

You decide what data to provide. The company processes only the personal data you provide voluntarily and directly, or that is necessary to perform a contract or meet legal obligations. On request, we are always ready to explain what data is required and for what purpose.

4. Cookies

The website uses Google Tag Manager to load web analytics (see section 6). These cookies are set only after you click "Accept" in the cookie notice on your first visit — until then no analytics cookie is set. We do not use technically necessary cookies without which the website cannot work.

You can change your decision at any time — a "Cookie settings" link is in the footer of every page. Declining or withdrawing consent does not restrict access to any section of the website.

5. Security of processing and storage of personal data

  • Data is transferred from the website over the secure HTTPS protocol.
  • An SSL certificate is used to encrypt transmitted information, ensuring the confidentiality and integrity of the data.
  • Electronic personal data databases are held in the company's secure information environment and/or with reliable service providers in compliance with data protection requirements.
  • Access to personal data is limited to authorised employees and engaged persons (processors) for whom such information is necessary to perform their duties and who are bound by a confidentiality obligation.
  • Access control tools, audit systems, firewalls and antivirus software are used.

6. Statistical analysis and web analytics

We use Google Tag Manager (Google Ireland Limited) to load web analytics services that help us understand which pages are useful to visitors and improve the website. Analytics analyses anonymised technical data — pages visited, visit duration, device type — and does not link it directly to your name or the contact details you may have left in a form.

These services run only after your consent to the use of cookies. If you decline cookies, you continue to use the website with no restrictions — analytics simply does not load.

Processing of data by Google services is governed by Google's privacy policy; any transfer of data outside the EEA is carried out on the basis of the mechanisms provided for by data protection law.

7. External services and resources

The website may use mapping services (for example, Google Maps) to show location and build routes, social network widgets and plugins (Facebook, Instagram, Telegram widgets, etc.), as well as "Share" buttons and links to external resources.

The use of such services is governed by the relevant operators in accordance with their own privacy policies. Personal data collected and processed by us is not passed to external services from our website, except in the cases expressly provided for by this policy or where you have given separate consent.

8. Newsletters and informational messages

The news and newsletter subscription function may be implemented using a third-party mailing service. Only the data (usually name and email address) you provided when subscribing and that is technically necessary to deliver the message is passed to this service.

You can withdraw your consent to receive the newsletter at any time using the unsubscribe link at the end of each message or by sending us a message through the contacts listed on the website.

9. Precautions and limitations

We apply technical and organisational measures to protect data against accidental or deliberate unauthorised access, alteration, disclosure or destruction. Transferring data over the internet always involves certain risks, since data packets may pass through third-party communication nodes whose level of protection is not controlled by the company.

When transferring confidential documents, we recommend, where possible, using additional protection (file encryption, password protection, etc.). You are responsible for keeping your passwords and access to your devices and communication channels secure.

10. Personal data retention periods

Personal data is kept for the period necessary to achieve the processing purposes (providing services, performing a contract, complying with legal requirements), or until you withdraw your consent to processing, where such withdrawal is possible and does not conflict with mandatory legal requirements, but generally for no more than five years from the date consent was given, unless other periods are set by applicable law.

Once the retention periods expire, the data is deleted or anonymised, unless there are lawful grounds for keeping it longer (for example, accounting, tax reporting, or the possible defence of the company's rights in judicial and administrative procedures).

11. Transfer of data to third parties

The company does not sell or pass your personal data to third parties, except in the following cases:

  • the transfer is necessary to perform a contract or to prepare a contract offer (for example, interaction with partners, educational institutions, lawyers, etc.) — to the extent necessary to achieve the purpose and where there is a relevant legal basis;
  • processing is carried out on the company's behalf by authorised operators (hosting providers, mailing services, IT support, accounting and other outsourced services) that act under a contract and are obliged to observe confidentiality and data protection requirements;
  • the transfer is required by law (for example, at the request of government bodies within their competence, and for keeping mandatory accounting and tax records);
  • you have given explicit consent to the transfer of your data to specific third parties.

In all cases the amount of data transferred is limited to the minimum necessary.

12. Rights of the data subject

Under applicable law, every data subject has the right to:

  • obtain from the company confirmation of whether their personal data is being processed and information about which data is being processed;
  • obtain a copy of the personal data being processed;
  • request the correction of inaccurate or outdated data and its completion;
  • request the restriction of processing where there are grounds provided for by law;
  • object to processing where the legal basis for processing is the company's legitimate interest or the carrying out of marketing;
  • request the erasure of their personal data (the "right to be forgotten"), where there are no other lawful grounds for its further processing and storage;
  • withdraw consent to data processing, where processing is based on consent (without affecting the lawfulness of processing before withdrawal);
  • transfer their data to another operator, where this is technically possible and provided for by law;
  • lodge a complaint with the competent data protection authority in the event of a breach of their rights.

To exercise these rights, you can contact us using the contacts listed below or on the contacts page.

13. Contacts for personal data matters

For all matters relating to the processing of your personal data, and to exercise your rights as a data subject, you can contact us:

  • through the contact form on the slo-way.com website;
  • by phone: +386 31 020 553;
  • by the email listed in the "Contacts" section of the website.

Poslovno svetovanje, Mariia Golubnik s.p.
Kamniška ulica 26A
1000 Ljubljana, Slovenia

14. Changes to the Privacy Policy

The company reserves the right to update this Privacy Policy from time to time. The current version is always available on the slo-way.com website. The date of the last update is given at the end of the document.

Version: September 2026.