Privacy Policy

The controller responsible for the personal data processed through this website is ExpoAuto d.o.o. (see the company details above). You can reach us at the email address and phone number listed there for any question about this policy or about your personal data.

This website is an informational marketing site; it does not require you to register or log in. The only personal data we actively collect is what you choose to submit through the contact form: your name, your company or dealership name, your email address, your phone number, and the content of your message.

The company/dealership name and phone number fields are optional; the other fields are required to process your enquiry. We do not ask for any special categories of data, and please do not include any in your message.

As with any website, our hosting infrastructure automatically processes limited technical data (such as IP address, browser type, and request timestamps) needed to deliver the page to your device and to keep the site secure. This is standard server-log activity and is not used to build marketing profiles.

We process the data you submit through the contact form to respond to your enquiry and, where you are requesting a quote or the sourcing of a specific vehicle, to take steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).

Where your enquiry is general commercial contact rather than a specific request to enter into a contract, we process your data on the basis of our legitimate interest in maintaining professional business-to-business communication with dealers, leasing companies and fleet operators (Article 6(1)(f) GDPR). You may object to this processing at any time — see "Your rights" below.

We do not use your data for any purpose beyond responding to, and where relevant following up on, your enquiry, and we do not use it for automated decision-making or profiling.

Your message is transmitted to our inbox using Resend, an email-delivery service that acts as our data processor for the sole purpose of delivering contact-form submissions. Resend does not use your data for its own purposes.

Our website hosting provider processes technical connection data (such as IP address) as necessary to operate and secure the website.

We do not sell or rent your personal data, and we do not share it with third parties for their own marketing purposes. We do not transfer it to any recipient beyond those described in this policy.

The contact page of this website loads an embedded map from a third-party map provider so that you can locate our office. This embed is loaded only on the contact page — it is not present anywhere else on the site. When it loads, the third-party provider may set its own cookies and process your IP address in accordance with its own privacy policy, independently of ExpoAuto.

This website does not use analytics, advertising or marketing cookies, and we do not run any third-party tracking or profiling scripts.

The site's language switcher (English/German) may set a single functional cookie (NEXT_LOCALE) purely to remember your language preference between visits. This cookie does not identify you and is not used for tracking. The one exception is the contact-page map embed described above, which may set its own cookies once that page is loaded.

ExpoAuto is established in Slovenia and processes contact-form data primarily within the European Economic Area (EEA). Where a processor we use (such as our email-delivery or hosting provider) transfers data outside the EEA, we rely on that provider's compliance with an adequacy decision, the EU Standard Contractual Clauses, or another safeguard recognised under the GDPR.

We keep contact-form submissions and the resulting correspondence for as long as needed to handle your enquiry and any resulting business relationship, and afterwards for a limited period to allow for follow-up and to meet applicable legal, accounting or record-keeping obligations. We then delete or anonymise the data.

Under the GDPR, you have the right to request access to the personal data we hold about you, to have inaccurate data corrected, to have your data erased, to restrict or object to our processing of it, and to receive a copy of it in a portable format. Where processing is based on legitimate interest, you may object to it at any time on grounds relating to your particular situation.

To exercise any of these rights, contact us at the email address shown in the company details above. We will respond within the time limits set by the GDPR.

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Slovenian supervisory authority, the Information Commissioner (Informacijski pooblaščenec), Zaloška cesta 59, 1000 Ljubljana, Slovenia — or with the supervisory authority of your own EU member state.

We may update this privacy policy from time to time to reflect changes to our processing activities or to legal requirements. The date at the top of this page shows when it was last revised.