Privacy & Cookie Policy

1. Who is responsible for your data?

ASH d.o.o. (“ASH SYSTEMS”, “we”, “us”) is the controller of personal data processed through this website and in connection with website enquiries.

Na Rojah 26
SI-1000 Ljubljana, Slovenia
Email: info@ash-systems.com

2. What data we process and why

Enquiries and correspondence

When you contact us, we process the contact details you provide, the contents of your message and any subsequent correspondence. This may include your name, business email address, company and any additional information you choose to share.

We use this information to respond to your enquiry and manage the related business communication. Our legal basis is our legitimate interest in responding to enquiries and maintaining business relationships. Where you request steps towards a contract to which you would personally be a party, we process the necessary information to take those steps.

Providing information is voluntary. However, without sufficient contact details and information about your request, we may be unable to respond. Required fields are marked in the contact form.

Website operation and security

Our website is hosted with Neoserv (Šenčur, Slovenia).

Technical data may include your IP address, browser information, requested pages, access times and error or security logs. We use the necessary data to operate the website, troubleshoot problems and protect it against misuse, based on our legitimate interest in maintaining a secure and functioning website.

We use Cloudflare Turnstile to protect our contact form from automated spam and abuse. When the form loads, your browser connects to Cloudflare, Inc., which processes technical data such as your IP address and browser information to distinguish human visitors from bots. This is a security measure based on our legitimate interest in protecting the form; it is not used for advertising or profiling.

Optional analytics and external services

We use Google Analytics (GA4) to understand how visitors use our website, and Google Consent Mode to ensure Analytics only sets measurement cookies for visitors who accept the “Analytics” category in the cookie banner. If you do not accept, Google Analytics may still receive limited signals that do not rely on cookies or identifiers stored on your device. Project videos on this website are hosted directly on our site, so they do not set any external cookies.

3. Who receives your data?

Access to personal data is limited to people who need it for the purposes described in this policy.

We use service providers to support our website and business communications, such as providers of hosting, email and technical maintenance. Where they process personal data on our behalf, the processing is governed by appropriate data-processing arrangements. Our cookie consent choices are recorded and managed via CookieYes, which acts as a processor for that purpose. Cloudflare, Inc. provides the Turnstile spam-protection service for our contact form.

Depending on the optional cookies you accept, this may also include Neoserv (hosting) and Google LLC (Google Analytics).

We may also disclose information where required by law or where necessary to establish, exercise or defend legal claims.

4. International data transfers

Our hosting provider, Neoserv, stores website data within Slovenia (EU/EEA), so no international transfer occurs for hosting. Cloudflare, Inc. (Turnstile) and, where you accept the relevant optional cookies, Google LLC are based in the United States and may process data outside the EEA; both are certified under the EU–U.S. Data Privacy Framework, which serves as the transfer mechanism.

5. How long we keep data

• Enquiries and correspondence: for 3 years from the last contact, unless a longer period is required for an ongoing business or legal relationship.
• Website and security logs: 12 months.
• Contact-form submissions: not stored in our website database — each submission arrives only as an email notification, retained according to our email provider’s standard mailbox retention.
• Consent records: retained by CookieYes for as long as necessary to demonstrate compliance, currently up to 12 months.
• Analytics data: retained for 14 months, Google Analytics’ standard default.

Where an enquiry develops into a contractual relationship, relevant records are retained according to the requirements applicable to that relationship. Information needed for a legal claim may be retained for the relevant period.

Cookie lifetimes are listed in the cookie table below. A cookie’s lifetime may differ from the retention period of data collected through it.

6. Your rights

Depending on the circumstances and legal basis, you may request access to your personal data, correction, erasure, restriction of processing or data portability.

You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing relies on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, contact info@ash-systems.com. We normally respond within one month. If an extension is permitted because of the complexity or number of requests, we will explain this within that period. We may request additional information where reasonably necessary to verify your identity.

You may lodge a complaint with the Slovenian Information Commissioner at www.ip-rs.si, or with the competent supervisory authority in the EU/EEA.

7. Automated decision-making

We do not use personal data collected through this website for solely automated decisions that produce legal or similarly significant effects on you.

8. Cookies and similar technologies

Cookies are small files stored on your device. Websites may also use similar technologies to store information or access information on your device.

Strictly necessary technologies

These support functions necessary to provide a service you request, such as remembering your cookie preferences. Where the legal exemption applies, they do not require consent.

You can block cookies through your browser, but doing so may affect website functionality.

Optional technologies

We use optional technologies for the purposes described in the table below only after you give consent. You can accept or reject optional categories and change your choices using “Cookie settings”, available in the website footer.

Withdrawing consent stops future use of the relevant optional technologies. You can also delete previously stored cookies through your browser settings.

Cookies and services used on this website

The table below reflects the tools actually configured for this website (WordPress, Elementor, WPForms, CookieYes, Cloudflare Turnstile, and Google Analytics with Consent Mode). Exact cookie names may be refined once CookieYes’s own cookie scan runs on the live site.

9. Changes to this policy

We update this policy when our website or data-processing practices change. The date above identifies the latest revision.