Privacy policy

Last updated: 21 September 2026 · ECO PFAS / eco-pfas.com

This policy explains how ECO ELEMENT processes personal data of visitors to the ECO PFAS website, which presents solutions for removing PFAS from water. It applies to eco-pfas.com and the ECO PFAS web presence. The same processing principles apply to visitors from Slovenia, Croatia and other countries.

1. Who controls your data?

ECO ELEMENT d.o.o.
Kranjčeva ulica 22, 1000 Ljubljana, Slovenia
Email: info@eco-element.si
Phone: +386 51 315 202

You can send privacy questions and data requests to the email address above with the subject “Personal data protection”. We follow the General Data Protection Regulation (Regulation (EU) 2016/679 – GDPR), Slovenia’s Personal Data Protection Act (ZVOP-2) and the Electronic Communications Act (ZEKom-2) where applicable to cookies and electronic communications.

2. What data do we process and why?

Enquiries and communication

When completing the contact form, you provide your name, email address, selected area of interest and message. Company name and phone number are optional. In subsequent communication, we also process information you send by email or provide by phone.

We use the information to answer questions, understand your needs, prepare quotations and arrange cooperation. If you enquire about a service for yourself as an individual, the basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). For general questions and communication with company representatives, the basis is our legitimate interest in responding to enquiries and conducting business communication (Article 6(1)(f) GDPR).

Providing data is voluntary. Fields marked with an asterisk are required to submit the form; we cannot reply without valid contact details. Do not include health information or other personal data unnecessary for the enquiry. Submitting an enquiry does not subscribe you to a newsletter.

Website operation and security

When connecting to the website, infrastructure providers receive technical data such as IP address, request time, requested URL and browser details. This enables page delivery, troubleshooting and protection against misuse. Necessary processing for secure operation is based on legitimate interests (Article 6(1)(f) GDPR).

Possible subsequent cooperation

If we agree on a service or supply, we also process the necessary data to perform the contract or conduct business communication. Data required by law, such as invoice information, is processed under Article 6(1)(c) GDPR.

3. How long do we retain data?

Enquiry data is generally retained for 12 months after communication ends, in line with the company’s existing policy. If an enquiry leads to a business relationship, relevant data becomes part of that relationship’s documentation.

Contract documentation is retained during performance and generally for five years after completion. Where legislation requires a different period, that period applies. Data needed for a specific dispute is retained until proceedings end and relevant claim periods expire. It is then deleted or anonymised.

Technical logs should be retained only as long as necessary for security, troubleshooting or a specific incident. External infrastructure retention also depends on the provider; its rules do not replace our retention period for received correspondence.

4. Who receives the data?

Enquiries are handled by ECO ELEMENT personnel who need the data to respond or carry out agreed activities. Hosting, email and maintenance providers support technical delivery. Competent authorities or professional advisers may receive data where required by law or legal proceedings.

Contact form – FormSubmit

The current form sends data through FormSubmit to info@eco-element.si. The provider receives form contents, the page URL from which the enquiry was sent and technical connection data. Its published rules are available in the FormSubmit privacy policy.

FormSubmit’s public policy does not provide enough information to confirm processing locations, all retention periods or the legal basis for possible transfers outside the European Economic Area (EEA). We therefore cannot confirm that all data is processed exclusively within the EEA. Questions about recipients and transfers can be sent to info@eco-element.si.

Fonts and hosting

Fonts are stored with the website and loaded from the same site. Loading fonts does not connect the browser to Google Fonts. The eco-pfas.com website is hosted by NEOSERV. Technical connection data, such as the IP address, access time and requested page, is processed to operate and secure the hosting service.

Transfers outside the EEA require an appropriate basis under Chapter V GDPR, such as a valid adequacy decision or appropriate contractual safeguards. Information about specific providers and safeguards is available on request at info@eco-element.si.

5. Cookies, analytics and external links

This website’s code does not include Google Analytics, advertising trackers or our own analytics or advertising cookies. Private-access or external-service providers may use technical mechanisms for security and operation. If additional analytics or non-essential cookies are introduced, we will update this notice and, where required, obtain consent before use.

Links to articles and other external websites lead to sites with their own privacy rules. This policy does not replace their notices.

YouTube videos

The technology page includes an embedded YouTube video. The player loads only when you click “Play video”. Until then, this video does not connect to YouTube. After the click, YouTube receives technical connection data and may process playback data under its own privacy rules.

6. Your rights

Subject to the conditions in the GDPR, you may request:

• access to your personal data and a copy;
• correction of inaccurate or completion of incomplete data;
• erasure or restriction of processing;
• data portability where processing is based on contract or consent and carried out by automated means.

You may object to processing based on legitimate interests for reasons relating to your particular situation. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Send your request to info@eco-element.si. We will respond without undue delay, generally within one month. Complex or numerous requests may extend this by up to two further months; we will explain the extension within the first month. If there is reasonable doubt about identity, we may request only the additional information needed to confirm it.

If you believe we handle your data unlawfully, you may complain to the Information Commissioner of the Republic of Slovenia or the competent supervisory authority in the country of your habitual residence, workplace or alleged infringement. In Croatia, this is the Croatian Personal Data Protection Agency (AZOP).

7. Automated decision-making

This contact form does not involve automated decision-making or profiling that produces legal or similarly significant effects. We handle each enquiry individually.

8. Policy changes

Changes are published on this page with an updated date. If processing purposes or methods change materially, we will provide appropriate notice and obtain fresh consent where required. Visiting or continuing to use the site after a change does not constitute consent to additional processing purposes.