We respect your privacy. In this document, we inform you how Društvo Strojnik.si (brand makerSP_CE), as the controller of personal data, collects, processes and protects your personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 – GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).
1. Data controller
Company: Društvo Strojnik.si
Registered office: Aškerčeva cesta 6, 1000 Ljubljana, Slovenia
Brand: makerSP_CE (coworking space)
Registration number: 4046102000
Tax number: 60009055 (not liable for VAT since June 2025)
E-mail for privacy questions: info@makerspace.si
Phone: +386 30 393 405
Contact address: Pivovarniška ulica 6, 1000 Ljubljana
2. Data protection officer
In accordance with Article 37 of the GDPR and Article 45 of ZVOP-2, the controller is not obliged to appoint a data protection officer, as it does not meet the conditions that would require it (it is not a public authority, does not carry out as a core activity regular and systematic large-scale monitoring of individuals, and does not process large volumes of special categories of data).
All questions related to the protection of personal data may be sent to the e-mail address info@makerspace.si.
3. What personal data we collect
3.1 Data collected through the reservation form
When you submit a reservation for the coworking space through the online form on makerspace.si, we collect the following data:
- first and last name;
- e-mail address;
- phone number;
- company or organisation name (if provided);
- selected date and type of package or workspace;
- selected payment method;
- any additional message you entered in the form.
3.2 Data collected through direct contact
If you contact us by e-mail or phone, we collect the data you provide yourself (e.g. name, contact, content of the message). We process this data solely for the purpose for which you contacted us.
3.3 Technical data about website usage
When you visit the makerspace.si website, data such as IP address, browser type, language, date and time of visit, pages viewed and traffic source may be automatically recorded on the host server. This data is used to maintain stable operation, website security and statistical analysis of visits.
4. Purposes and legal bases of processing
We process your personal data solely for the following purposes and on the following legal bases:
- Performance of a contract (reservation and use of the coworking space, communication with the user): name, surname, e-mail, phone, selected package and date, additional message – legal basis: performance of a contract at the request of the individual (Article 6(1)(b) GDPR); retention period: until the service is provided and 12 months thereafter.
- Invoicing and accounting: name, surname, address, amount, description of the service – legal basis: legal obligation (Article 6(1)(c) GDPR, ZDavP-2, ZGD-1); retention period: 10 years.
- Information about the offer and news of the coworking space: name, surname, e-mail – legal basis: legitimate interest of the provider (Article 6(1)(f) GDPR); retention period: until withdrawal by the individual.
- Handling complaints and individuals’ requests: all data needed to resolve the case – legal basis: legitimate interest / fulfilment of legal obligations (Article 6(1)(f), 6(1)(c) GDPR); retention period: 5 years from the conclusion of the case.
- Establishment, exercise or defence of legal claims: all relevant contractual and evidentiary data – legal basis: legitimate interest (Article 6(1)(f) GDPR); retention period: until the statute of limitations of the claim.
5. Data processors
When processing personal data, we use the services of the following data processors, with whom we have concluded appropriate data processing agreements in accordance with Article 28 of the GDPR:
- Web hosting provider (Slovenia / EU) – hosting of the website and WordPress database; location: EU; no transfer to a third country.
- Google Ireland Limited (Google Workspace) – e-mail, document storage and collection of submissions from online forms; location: EU with possible transfer to the USA; legal basis for transfer: Standard Contractual Clauses (SCC) of the European Commission and the EU-U.S. Data Privacy Framework.
- Google Ireland Limited (Google Analytics and Google Tag Manager) – website traffic analytics; location: EU with possible transfer to the USA; legal basis for transfer: SCC and the Data Privacy Framework.
- Accounting service / software (Slovenia) – issuing and storage of invoices, bookkeeping; location: EU; no transfer to a third country.
6. Transfer of personal data to third countries
As a rule, we do not transfer your personal data to countries outside the European Union or the European Economic Area. When using Google Workspace, Google Analytics or Google Tag Manager services, data may be transferred to the United States of America. The transfer is lawful because Google Ireland Limited is a signatory to the Standard Contractual Clauses (SCC) approved by the European Commission, and the parent company Google LLC is included in the EU-U.S. Data Privacy Framework, which ensures an adequate level of personal data protection.
7. Rights of the individual
In accordance with Articles 15 to 22 of the GDPR, you have the following rights regarding your personal data:
- Right of access: the right to request information on whether we process your personal data and to obtain access to it.
- Right to rectification: the right to request the correction of inaccurate data or completion of incomplete data.
- Right to erasure (“right to be forgotten”): the right to request the erasure of personal data in legally defined cases.
- Right to restriction of processing: the right to request that, under certain conditions, we restrict processing.
- Right to data portability: the right to receive your data in a structured, commonly used and machine-readable format.
- Right to object: the right to object to processing based on legitimate interest.
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time; withdrawal does not affect the lawfulness of processing prior to withdrawal.
- Right not to be subject to automated decision-making: the right not to be subject to a decision based solely on automated processing (including profiling).
You can exercise your rights by sending a written request to the e-mail address info@makerspace.si or by post to the registered office of the controller. We will respond to your request without undue delay, no later than one month from receipt. In the case of complex or numerous requests, we may extend this period by an additional two months, of which we will inform you. For reliable identification, we may request additional data; we may refuse to act only if we can demonstrate that we are unable to reliably identify you.
7.1 Unsubscribing from notifications
If you receive notifications about the coworking space offer from us and no longer wish to receive them, please inform us by e-mail at info@makerspace.si and we will immediately remove you from the list of recipients. Unsubscribing does not affect communication that is necessary for the performance of already concluded contracts.
8. Right to lodge a complaint with the supervisory authority
If you believe that the processing of your personal data is contrary to applicable law, you have the right to lodge a complaint with the supervisory authority. In the Republic of Slovenia, the supervisory authority is:
Information Commissioner (Informacijski pooblaščenec)
Dunajska cesta 22, 1000 Ljubljana
Phone: +386 1 230 97 30
E-mail: gp.ip@ip-rs.si
Website: www.ip-rs.si
9. Protection of personal data
We have adopted appropriate technical and organisational measures to protect personal data against loss, theft, unauthorised access, disclosure or alteration. Among other things, we use:
- SSL / TLS encryption when transmitting data through online forms;
- restricted access to data only for authorised persons (“need-to-know” principle);
- two-factor authentication for back-end systems;
- regular archiving and backup of data;
- concluded data processing agreements with all data processors.
10. Children and minors
Our website and services are not intended for children under 16 years of age. If a person under 16 provides us with their data, we will delete it as soon as we are notified.
11. Cookies
The makerspace.si website uses cookies to provide basic functionality, security, statistical analysis of visits (Google Analytics) and to improve the user experience. More information about the cookies used, their duration and management options is available in the cookie management banner that appears on your first visit to the website.
12. Changes to the privacy policy
We reserve the right to update this privacy policy from time to time to reflect changes in legislation, our practices or services. We will inform you of material changes by publishing them on the makerspace.si website or by e-mail where necessary. Each version of the privacy policy is marked with the date of the last update.
Version: 1.0
Date of last update: 30 June 2026
Place: Ljubljana
Društvo Strojnik.si – Coworking makerSP_CE