1. Data Controller

Controller: Aleš Korošec
Email: ales_korosec@hotmail.com
Website: aleskorosec.si

A Data Protection Officer has not been appointed because this is not required based on the nature and scale of the activities.

2. Personal Data We Collect

a) Data you provide voluntarily

• your name, if you provide it,
• your email address,
• the content of your message, enquiry or order,
• information needed to arrange a service, lesson, collaboration or order,
• any other information you choose to provide.

b) Data collected automatically

• IP address or shortened/anonymised IP address, where this is enabled,
• technical information about your device, browser and operating system,
• website usage data, such as visited pages, visit time and interactions,
• data related to cookies and similar technologies.

3. Purposes of Processing

Personal data may be processed for the following purposes:

• responding to enquiries and messages,
• arranging drum lessons, consulting, performances, collaborations or other services,
• processing orders for books, handbooks, PDFs or other digital materials, where applicable,
• sending updates if you subscribed or gave consent,
• improving the website, user experience and content,
• website security, abuse prevention and technical maintenance,
• compliance with legal obligations, such as accounting or tax requirements.

4. Legal Bases

Depending on the context, personal data may be processed on one or more of the following legal bases:

• consent, for example when you subscribe to updates or accept analytics/marketing cookies,
• performance of a contract or pre-contractual steps, for example when you send an enquiry, order a product or arrange a service,
• legal obligation, for example accounting, tax or other legal requirements,
• legitimate interest, for example basic website security, abuse prevention, technical operation, content improvement or the establishment, exercise or defence of legal claims.

5. Data Retention

• Contact messages: kept for as long as necessary to respond and continue communication, and for a reasonable period afterwards.
• Service or order-related data: kept for as long as needed to provide the service or complete the order, and then in accordance with legal requirements.
• Accounting records: kept in accordance with applicable tax and accounting laws.
• Cookies and analytics data: kept according to provider settings, cookie preferences and your consent.
• Security logs: kept for a limited period needed for security, troubleshooting and abuse prevention.

6. Processors and Disclosure of Data

Personal data is not sold and is not shared with third parties for their own marketing purposes.

Personal data may be processed by trusted service providers where this is necessary for the operation of the website and services, such as:

• website hosting providers,
• email service providers,
• providers of contact forms, backups and website security tools,
• analytics or cookie-related providers, if enabled and consented to,
• accounting, legal or other professional service providers, where needed,
• public authorities or other authorised parties, where required by law.

Appropriate processing agreements or other safeguards are used where required.

7. International Transfers

Some service providers may process data outside the European Union or the European Economic Area. In such cases, transfers are carried out only where an appropriate legal basis and safeguard is in place, such as an adequacy decision, Standard Contractual Clauses or another mechanism recognised under the GDPR.

8. Cookies and Analytics

This website may use essential cookies needed for the website to function properly, and analytics or marketing cookies where they are enabled and you have given consent.

• Essential cookies support basic website functionality and are usually not disabled.
• Analytics cookies help understand website visits and improve content.
• Marketing cookies are used only if enabled and consented to.

You can manage cookie preferences through the cookie banner, if enabled, or through your browser settings.

9. Embedded Content and External Links

This website may include links to external websites or embedded content such as videos, maps, PDF documents, social media content or third-party tools.

Embedded content from other websites may behave as if you visited the external website directly. These providers may collect data, use cookies or track your interaction with the embedded content, especially if you are logged in to their service.

External websites are governed by their own privacy policies.

10. Orders, Handbooks and Digital Products

If you send an enquiry or order a book, handbook, PDF or other material, the data you provide is used for communication, order fulfilment, delivery, support and compliance with legal obligations.

For digital products, your email address may be used to deliver the file. Data is not used for other purposes unless there is a valid legal basis or your consent.

11. Your Rights

Under the GDPR, you may have the following rights:

• right of access,
• right to rectification,
• right to erasure, where the conditions are met,
• right to restriction of processing,
• right to object,
• right to data portability, where applicable,
• right to withdraw consent where processing is based on consent.

To exercise your rights, contact:
ales_korosec@hotmail.com.

For security reasons, additional information may be requested to verify your identity before a request is processed.

12. Right to Lodge a Complaint with a Supervisory Authority

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with a supervisory authority.

Since the website is operated from Slovenia, the relevant supervisory authority is:

Information Commissioner of the Republic of Slovenia
Dunajska cesta 22, 1000 Ljubljana, Slovenia
Email: gp.ip@ip-rs.si
Website: www.ip-rs.si

Depending on where you live, you may also have the right to contact your local data protection authority.

13. Data Security

Appropriate technical and organisational measures are used to protect personal data against unauthorised access, loss, alteration or misuse. Access to personal data is limited to persons or providers who need it for the relevant processing purpose.

However, no transmission over the internet can be guaranteed as completely secure.

14. Children

This website is not intended to knowingly collect personal data from children. If a minor sends an enquiry related to lessons or learning, involvement of a parent or legal guardian may be required before further arrangements are made.

15. Changes and Contact

This Privacy Policy may be updated from time to time. Changes take effect when published on this page.

For privacy-related questions, please contact:
ales_korosec@hotmail.com.