Privacy Policy

We are committed to carefully safeguarding and using your personal data in accordance with the applicable laws that govern this area. In this Privacy Policy, we provide you with information about the processing of your data and your rights in relation to it.


KOTO d. o. o., Agrokombinatska cesta 80, 1000 Ljubljana

Contact Information:

Processing Purposes and Legal Bases

  1. Contacting Us

If you wish to get in touch with us, you can contact us through the web form or send us an email. In this case, we will process your email address and the information you provide to us in communication. We will keep your personal data until the conclusion of the communication. However, you can decide to request erasure at any time, but in this case, we will not be able to respond to your communication.

Legal basis for the processing of personal data: KOTO Company’s legitimate interest in communicating with the public.

2. Service Orders

In the case of a concluded service contract or an issued purchase order, we will process your personal data (name, contact information, content of the agreed service) based on the contract. If you do not provide us with the required data, we will not be able to provide the service.

Legal basis for processing in this case is the contract.

3. Visiting the Website

When you visit our website, we process the following personal data: IP address, data on when you visited the website, which content you viewed, and what operating system, device, and browser you used.

4. Photographing Events

We conduct visual and audio monitoring of events in line with our legitimate interest in documenting events and informing the public in accordance with the third paragraph of Article 93 of the ZVOP-2. However, as an individual, you can object to photography, recording, or publication by contacting us at or during event registration.

Users of Personal Data

Our processors include: website maintenance staff, information support for accounting, marketing tool providers, external service providers (e.g., lecturers, consultants). Processors only process personal data under the instructions and control of the controller.

Transfer of Personal Data to Third Countries or International Organizations

Personal data is not transferred to third countries or international organizations.

Retention Periods

  1. Contact Form: until the conclusion of communication
  2. Service Performance: 5 years from the expiration of the contract or settlement of all obligations
  3. Event Monitoring: archived

Individual Rights

As an individual, you can exercise the following rights: withdrawal of consent or objection, access to data, correction, erasure, restriction of processing, data portability. Rights can be exercised by submitting a written request to the controller’s address or by email to

For assistance in exercising your rights, you can contact the data protection officer at the following address:

Legal Protection: If you believe that the processing of your personal data by the controller violates data protection laws, you have the right to lodge a complaint or report to the Information Commissioner of the Republic of Slovenia, Dunajska 22, Ljubljana.

Changes to the Privacy Policy

This policy was last updated on July 19, 2023.