Privacy Policy

Last updated: 7 November 2026

At GV Events we respect your privacy and handle the personal data you share with us carefully. This policy explains what data we collect through gvevents.si, why we use it, who we may share it with, how long we keep it and what rights you have.

1. Data controllers

GV Events is a joint project and brand of two business entities who, as joint controllers, together determine the purposes and means of processing personal data:

  • JS GROUP d.o.o., Pečetova ulica 5, 2000 Maribor, Slovenia
  • Galij Vračun s.p., Čufarjeva cesta 45, 2000 Maribor, Slovenia

The controllers have agreed how their responsibilities are divided. The essence of the arrangement: the single point of contact for all questions and requests about personal data is info@gvevents.si; requests are answered by the controller providing the service concerned, with the other controller assisting. Regardless of this arrangement, you may exercise your rights against either controller.

Contact: info@gvevents.si, phone +386 41 575 288.

2. What personal data we collect

When you send us an inquiry through the website, we process the data you enter in the form:

  • your name, phone number and email address,
  • the type and date of the event, the expected number of guests and the services you need,
  • information about the venue, your wishes, programme, music and anything else you choose to tell us in your message.

If you contact us by phone or email, we process the data from that communication.

When you visit the website, technical data (e.g. IP address, device and browser type, time of access) is processed automatically as needed for the site to work securely. If you allow it in the cookie banner, we also collect data on how the site is used through Google Analytics and Meta Pixel (see section 7).

Your name and a phone number or email address are required for us to reply to your inquiry. Without them we cannot prepare a quote. All other information is optional.

3. Purposes and legal bases

  • Replying to your inquiry, preparing a quote and agreeing on a collaboration – steps prior to entering into a contract (Art. 6(1)(b) GDPR).
  • Organising and running the event and performing the contract – performance of a contract (Art. 6(1)(b) GDPR).
  • Accounting and tax obligations – legal obligation (Art. 6(1)(c) GDPR).
  • Website security, preventing misuse and establishing or defending legal claims – legitimate interest (Art. 6(1)(f) GDPR).
  • Visitor statistics (Google Analytics) and ad measurement (Meta Pixel) – your consent (Art. 6(1)(a) GDPR and the Slovenian Electronic Communications Act, ZEKom-2).

We do not use inquiry data to send marketing messages. You can withdraw your cookie consent at any time using the cookie settings button at the bottom of the page; withdrawal does not affect the lawfulness of processing before it.

4. How long we keep data

  • Inquiries that do not lead to a collaboration: up to 12 months from the last contact.
  • Client and event data: until the limitation periods for possible claims expire; invoices and other accounting records for as long as tax law requires (generally 10 years).
  • Google Analytics data: up to 14 months.

When these periods expire, we delete or anonymise the data.

5. Who we share data with

We never sell your personal data. To the extent necessary, it is processed by our service providers and partners:

  • our web hosting and email providers,
  • Make (Celonis) and Google (Google Sheets), which we use to record inquiries in our internal log,
  • Google Ireland Ltd. (Google Analytics) and Meta Platforms Ireland Ltd. (Meta Pixel) – only if you have consented to these cookies,
  • our accountant,
  • external suppliers for a specific event (e.g. catering, venue) where this is necessary to deliver the agreed service,
  • competent authorities, where required by law.

Google and Meta may also transfer data to the United States. Such transfers rely on the EU-U.S. Data Privacy Framework, under which both companies are certified, or on the European Commission's standard contractual clauses.

6. Security

We use appropriate technical and organisational measures to protect data against unauthorised access, loss or misuse. Only people who need the data for their work have access to it. Complete security of transmission over the internet cannot be guaranteed.

7. Cookies

We use essential cookies without consent because the site needs them to work. Google Analytics and Meta Pixel only load if you allow them in the cookie banner. The list of cookies and how long they last is on the Cookies page.

8. External links

The website links to other websites and social networks (e.g. Instagram). Their operators are responsible for how data is processed there.

9. Your rights

Under the conditions set out in the GDPR, you have the right to access your data, rectification, erasure, restriction of processing, objection to processing, data portability and withdrawal of consent. Send your request to info@gvevents.si. We reply within one month at the latest and may verify your identity first for security reasons.

10. Complaints

If you believe we are processing your data unlawfully, you can lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si.

11. Automated decision-making

We do not carry out automated decision-making or profiling that has legal or similarly significant effects on you.

12. Changes

We may update this policy from time to time. The current version is always published on this page, with the date of the last update shown at the top.