Privacy policyLesnep d.o.o.

Introductory information and personal data controller

Lesnep d.o.o., Miklošičeva cesta 18, 1000 Ljubljana, Slovenia (hereinafter also “Lesnep” or “Personal Data Controller”) respects your privacy and is committed to the protection of personal data.

During the processing of personal data, Lesnep observes the applicable data protection regulations – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, “the GDPR”) and the Personal Data Protection Act (“ZVOP-1-UPB1”).

The purpose of this Privacy Policy is to give you confidence in the privacy and security of all personal data entrusted to Lesnep.

This Privacy Policy outlines our practices concerning information collected at the website (hereinafter also “Service”), which we manage and control and on which you are accessing this Privacy Policy. By providing your personal data or by using the Service, you confirm that you have read and understand this Privacy Policy.

Personal data processing

We process your personal data solely on the basis of clearly stated purposes, securely and transparently.

Users can obtain information from our website either anonymously or by voluntarily deciding to transmit their personal data.

Users can transmit their personal data to us through the online form or by sending an inquiry by email, telephone or in writing to our address or in any other way by which they provide their personal data.

We can also obtain the personal data of users using the cookies on our website, but this prevents user identification, meaning that determining a user’s name and surname and other identification data using only the data collected in this way is not possible.

Categories of the personal data we collect and legal basis for personal data collection and processing

Lesnep collects the following data about website users:

  • Name and surname
  • Email address
  • Any other data provided by the users themselves 

We process your personal data based on your agreement. Giving consent is always voluntary. You can withdraw your agreement at any time without this affecting the lawfulness of prior processing.

An absence of agreement or a withdrawal of consent means that we will not be able to provide certain services (e.g. electronic notification) to the user.

Purpose of the processing of personal data

Lesnep will process your personal data only for specified, explicit and legitimate purposes.

Lesnep will use the collected personal data of users exclusively for one or more of the purposes indicated below:

  • to respond to the user’s inquiry submitted via the online form;
  • for communication and sending information about the services on our website in which the user has expressed interest;
  • for keeping user records;
  • for any subsequent communication with the user in the event of a business cooperation for which the personal data was transmitted;
  • for the establishment of any legal claims and for dispute resolution. Personal data may be disclosed to protect our business and enforce and/or protect our rights. We will disclose personal data only in the manner and under the conditions prescribed by law;
  • we perform analyses of our website usage to improve the user experience, which represents our legitimate interest in maintaining and/or improving our business performance.

You have the right to terminate any processing of your personal data taking place on the basis of your consent at any time.

Retention period

Your personal data will be stored for as long as it is required for the purposes determined in this Privacy Policy and for any additional period that may be required or permitted by law.

Personal data obtained on the basis of your agreement is stored until you withdraw your agreement. You can withdraw your agreement at any time by emailing us at

Data collected on the basis of agreement will be erased before your withdrawal if the purpose for which we collected the data has been achieved.

Personal data for which the retention period has expired (e.g. because the purpose for which it was collected has been achieved, the statutory period has expired, etc.) will be erased, destroyed or rendered anonymous in a manner preventing the reconstruction of the personal data.

Personal data protection

The protection of personal data is ensured in accordance with this Policy and the personal data protection requirements stipulated in the legislation of the Republic of Slovenia and the GDPR.

To protect your personal data against accidental or unlawful destruction, loss, use or alteration and against unauthorised disclosure or access, we use appropriate physical, technical and organisational security measures, specifically:

  • regular and effective updating of the software and computer equipment where personal data is stored;
  • protection of access to personal data;
  • making backups;
  • education of employees who process personal data in their work;
  • informed and diligent conduct in choosing the processors of your personal data;
  • supervision over the employees and other processors of your personal data.

Transmission of personal data

In order to achieve the purpose for which the personal data of users was collected, we may transmit it to the third parties listed below.

Each recipient or processor to whom the personal data was transmitted may process the data only for the purposes for which it was collected.

All recipients or processors are required to observe the applicable legislation as well as the provisions of this Privacy Policy.

The collected personal data may be transmitted:

  • to business partners that help provide certain services, such as Ljubljana nepremičnine d.o.o., a real estate agency specialising in the brokerage of real estate sales/purchases. We use Google and Facebook services for the purpose of remarketing.
  • to other contractual partners that e.g. provide information services for us and that process the data only for the purposes of these services (e.g. hosting, maintenance and IT support services);
  • when required by legislation (e.g. court, etc.).

If your personal data is transmitted outside the European Economic Area, we will ensure that your personal data will be protected in a manner that complies with the GDPR. Appropriate safeguards can be applied especially through the performance of agreements regulating the transfer of personal data that are based on standard data protection provisions adopted by the European Commission or by a suitable data protection supervisory authority and authorised by the European Commission.

User rights under the GDPR

Every user has the following rights:

  • right to obtain confirmation as to whether or not personal data concerning them are being processed, and, where that is the case, access to the personal data;
  • right to obtain the rectification of inaccurate personal data concerning them;
  • right to erasure of their personal data;
  • right to restriction of processing of their personal data;
  • right to data portability concerning the personal data that they actively provided;
  • right to object to the continued processing of personal data concerning them;
  • right to withdraw agreement to the processing of their personal data if the processing is based on their agreement.

To exercise any of these rights, please contact us at our email address or write to us at: Lesnep, Miklošičeva cesta 18, 1000 Ljubljana, Slovenija.

Competent data protection authority

If you want to file a complaint or if you think that Lesnep has not resolved your problem to your satisfaction, you can address your request or complaint to the competent data protection authority:

Informacijski pooblaščenec / Information Commissioner

Zaloška 59, 1000 Ljubljana

Tel. +386 1 230 9730

Fax +386 1 230 9778



Updates to the Privacy Policy

This Policy is subject to amendment at any time without warning or notice. By using the website after the Policy is amended, the user confirms that they agree with the amendment.

We recommend that you review this Privacy Policy regularly when you visit the Service.

I have read, understood and accepted the Privacy Policy of Lesnep, družba za komunikacije, d.o.o., Tržaška cesta 2, 1000 Ljubljana, Slovenia.