OnitexBack

Legal

Privacy Policy

Last updated: 9 July 2026

This Privacy Policy explains how Onitex Automation d.o.o. ("Onitex", "we", "us") processes personal data of visitors and prospective customers of onitex.com, x50.onitex.com and related pages. We comply with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

1. Data controller

Onitex Automation d.o.o.
Via degli Artigiani 7
6000 Koper-Capodistria
Slovenia
Email: sales@onitex.com

2. What data we collect

  • Contact form data: name, company, email, phone (optional), country, product type, weekly volume, free-text message, optional file attachment.
  • Consent record: the exact consent text you accepted, policy version, timestamp, IP address and user agent — kept as legal proof under Art. 7(1) GDPR.
  • Technical data: minimal server logs required to operate and secure the site.

3. Purposes and legal bases

  • Answering your inquiry and preparing an offer — Art. 6(1)(b) GDPR (pre-contractual steps taken at your request).
  • Security, fraud prevention, record keeping — Art. 6(1)(f) GDPR (legitimate interest).
  • Marketing emails (only if you opted in) — Art. 6(1)(a) GDPR (consent). You can withdraw consent at any time via the unsubscribe link in every email or by writing to sales@onitex.com.

4. Recipients and processors

We use service providers acting as processors under data processing agreements or data processing terms incorporated into their service agreements:

  • Lovable (hosting, database, file storage) — EU/US, standard contractual clauses.
  • Resend (transactional email delivery) — EU/US, standard contractual clauses.
  • Google (Google Analytics 4) — site usage analytics; US, standard contractual clauses / EU-US Data Privacy Framework.
  • HubSpot — visitor analytics and marketing automation; US, standard contractual clauses.

We do not sell personal data and do not use it for automated decision-making with legal effects.

5. International transfers

Where processors transfer data outside the EEA, we rely on the EU Standard Contractual Clauses (Commission Decision 2021/914) and, where applicable, the EU–US Data Privacy Framework.

6. Retention

  • Contact form submissions: up to 24 months from last interaction.
  • File attachments: 30 days (download links expire automatically).
  • Consent log: 3 years from the date of collection (evidentiary purposes).
  • Marketing subscribers: until you unsubscribe.

7. Your rights

Under GDPR you have the right to:

  • access your personal data (Art. 15);
  • have inaccurate data corrected (Art. 16);
  • have data erased (Art. 17);
  • restrict processing (Art. 18);
  • data portability (Art. 20);
  • object to processing based on legitimate interest (Art. 21);
  • withdraw consent at any time (Art. 7(3)) — without affecting prior lawful use;
  • lodge a complaint with your supervisory authority (in Slovenia: Informacijski pooblaščenec, ip-rs.si).

To exercise these rights, email sales@onitex.com. We reply within 30 days.

8. Cookies and analytics

We use essential cookies required for the site to function (for example, remembering your cookie acknowledgement). We also use analytics cookies to understand how visitors use the site and improve our pages.

Analytics tools currently enabled:

  • Google Analytics 4 — measures page views, sessions, and interactions with our pages.
  • HubSpot — tracks visitor activity and supports marketing communication.

You can manage or disable analytics cookies through your browser settings or via the cookie notice when you first visit the site.

9. Security

Data is transmitted over HTTPS. Attachments are stored in a private bucket accessible only via short-lived signed URLs. Access to personal data inside Onitex is limited to staff who need it to reply to your inquiry.

10. Changes

We may update this Policy. Material changes will be announced on this page with an updated "Last updated" date.