Privacy policy
This policy explains what personal data Nests d.o.o. processes in connection with the website nests.si, why we process it, and what rights you have under the General Data Protection Regulation (GDPR).
Last updated: 25 August 2026
1. Data controller
The controller of personal data processed through this website is:
Nests d.o.o.
Vinjole 16, Lucija, 6320 Portorož, Slovenia
Registration number: 9265538000
VAT ID: SI26366070
Email: [email protected]
Telephone: +386 31 882 206
For any question about this policy or about how we handle your data, write to [email protected].
2. What we collect
2.1 Information you send us
If you contact us by email or telephone, we process the information you choose to provide — typically your name, email address, telephone number, company name and the content of your message.
- Purpose: to answer your enquiry and, where relevant, to prepare an offer and enter into a contract.
- Legal basis: steps taken at your request prior to entering into a contract, and performance of a contract (Art. 6(1)(b) GDPR); otherwise our legitimate interest in responding to business enquiries (Art. 6(1)(f) GDPR).
- Retention: enquiries that do not lead to a contract are deleted no later than two years after the last contact. Contractual and accounting records are kept for the periods required by Slovenian tax and accounting law.
2.2 Server logs
Like virtually every website, nests.si is served by a hosting provider that records technical access data: IP address, date and time of the request, the page requested, the referring page, and browser and operating system identifiers.
- Purpose: to deliver the website, maintain security, and detect and investigate faults or abuse.
- Legal basis: our legitimate interest in operating a secure and functioning website (Art. 6(1)(f) GDPR).
- Retention: log data is kept only for as long as the hosting provider requires it for these purposes, and is not used to identify or profile individual visitors.
2.3 Cookies and analytics
This website sets no cookies and uses no analytics, advertising or tracking services. We do not build visitor profiles and we do not share visitor data with advertisers.
2.4 Local storage (mini-game)
Our home page contains an optional mini-game. If you play it, your browser's local storage is used to remember your highest score, whether sound is muted, and whether you have already seen the instructions. This information stays in your browser, is never transmitted to us or to anyone else, and is not personal data in our hands. Clearing your browser's site data removes it.
3. Third parties
3.1 Web fonts
This website loads typefaces from Google Fonts (Google Ireland Limited). When a page loads, your browser requests the font files from Google's servers, which means your IP address and basic request information are transmitted to Google. This happens on the basis of our legitimate interest in a consistent presentation of the website (Art. 6(1)(f) GDPR). Google's handling of that data is described in Google's own privacy policy.
3.2 Hosting
The website is operated on infrastructure provided by a third-party hosting provider acting as our processor under a data processing agreement, and processing data within the European Economic Area or under an equivalent transfer safeguard.
3.3 Email
Email sent to and from our @nests.si addresses passes through our email provider, which acts as a processor on our behalf.
3.4 No sale of data
We do not sell personal data and we do not transfer it to third parties except to the processors described above, or where we are legally required to do so.
4. Client project data
When we develop software for a client, we may process personal data contained in that client's systems. In those cases the client is the controller and Nests d.o.o. acts as a processor under a written data processing agreement, following the client's documented instructions. This website's privacy policy does not govern that processing.
5. Your rights
Under the GDPR you have the right to:
- request access to the personal data we hold about you;
- have inaccurate data corrected;
- request erasure of your data, where the conditions for it are met;
- request restriction of processing;
- receive your data in a structured, commonly used, machine-readable format (data portability);
- object to processing based on our legitimate interests;
- withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, write to [email protected]. We respond within one month, as required by the GDPR.
You also have the right to lodge a complaint with the Slovenian supervisory authority, the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, or with the supervisory authority in your country of residence.
6. Security
This website is served exclusively over HTTPS. We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss and disclosure, including restricted access to systems and regular updates of the software we operate.
7. Children
This website is not directed at children and we do not knowingly collect personal data from children.
8. Changes to this policy
We may update this policy when our services or the applicable law change. The current version is always published on this page, with the date of the last update shown at the top.