Privacy Policy
Because we value your trust, protecting your data and respecting your right to privacy and informational independence in the collection, processing, and use of your personal data is of utmost importance to us. The following information is intended to provide you with a quick and easy overview of the data we collect and process about you in connection with your use of our website and services.
The company responsible for data protection on this website is Webink, Simon Pihler s.p. For any questions regarding privacy, you can contact us at the email address hi@etisia.com.
1. Subject Matter
The subject of this privacy statement is information explaining which personal data is collected on the etisia.com websites and within the Etisia application, and for what purpose it is processed. If we have links to other sites, we have neither influence nor control over the linked content or relevant data protection regulations. We recommend that you check the privacy policies on the linked websites to determine whether and to what extent personal data is collected, processed, used, and made accessible to third parties.
2. Definitions and Terms
Below is a selection of some legal definitions that will help you understand the privacy statement. The full text of the General Data Protection Regulation (GDPR) along with further definitions and terms can be found here.
Personal Data
All information relating to an identified or identifiable natural person ("data subject"). A natural person is considered identifiable if they can be directly or indirectly identified, particularly by reference to an identifier such as a name, identification number, location data, online identifier, or by reference to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.
Processing
Any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, combination, restriction, erasure, or destruction.
Controller
Refers to a natural or legal person, public authority, agency, or other body which alone or jointly with others determines the purposes and means of the processing of personal data. If the purposes and means of processing are prescribed in accordance with EU law or the law of Member States, the controller or certain criteria for its nomination may be provided for in accordance with EU law or the law of Member States.
Recipient
Refers to a natural or legal person, public authority, agency, or another body to which personal data can be disclosed, whether a third party or not. Authorities may obtain personal data in the context of a particular investigation in accordance with EU law or the law of Member States but are not considered recipients. The processing of these data by the designated authorities is carried out in accordance with the applicable data protection regulations and in accordance with the purposes of the processing.
Third Party
This is a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
3. Categories of Personal Data on the etisia.com Websites
Relevant Area: Visiting the Website
When you access the etisia.com website, so-called access data is collected, including the IP address, and stored in a log file. The log file also stores the name of the website you requested, the retrieved file, date and time of access, amount of data transferred, notification of successful retrieval, browser type and version, operating system, the so-called referrer URL (previously visited page), as well as the provider making the request. However, based on this data, you cannot be identified.
When you visit our website, cookies are also stored on your end device (laptop, tablet, smartphone, or personal computer).
To provide users with a seamless connection and comfortable use of our website, we collect log file data, including the IP address. The log file is used for analysis to evaluate system security and stability, as well as for administrative purposes. Cookies also help us make our services and website more user-friendly by helping us determine whether you have, for example, already visited a page on our website. Using the cookie identifier, we also receive information about user behavior on our website and search queries that lead you to our site, so we can tailor our offerings to users' interests for future visits.
Log files, including the IP address, serve only to optimize the technology and configuration of our website and the security of our systems (e.g., in the context of a system intrusion or security incident). When accessing our website, it is not possible to obtain any personal data from the log files, including the IP address. Personal reference only occurs when you log into your customer user account at the same time. In this case, we can link your IP address directly to you.
Data retention period: Log files, including IP addresses, are automatically deleted two (2) months after collection. Before that, the IP address is anonymized and stored only for administrative (technical) purposes.
Hosting: Our website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare provides content delivery, DNS, and edge computing services. More information at: https://www.cloudflare.com/privacypolicy/.
Legal basis: Article 6(1)(f) of the General Data Protection Regulation.
Planned or required provision of data: The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address or cookie identifier, the service and functionality of our website are not guaranteed, and individual applications and services may not be available or may be limited.
Relevant Area: Cookie Consent Management
Personal Data: Cookie consent preferences, IP address, browser information.
Description and purpose of data processing: We use CookieYes to manage cookie consent on our website. CookieYes displays a cookie consent banner that allows you to accept or reject different categories of cookies. Your consent preferences are stored to ensure we respect your choices on subsequent visits.
Recipient and data processor: CookieYes Limited, 3 Warren Yard, Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom. More information at https://www.cookieyes.com/privacy-policy/.
Legal basis: Article 6(1)(c) of the General Data Protection Regulation (legal obligation to obtain consent).
Relevant Area: Web Analytics
Personal Data: IP address, cookie identifier, device and browser information, browsing behavior.
Description and purpose of data processing: We use tracking tools and web analytics tools on our website, including Google Analytics 4 (GA4) and Google Tag Manager (GTM). This involves collecting access data to our website and evaluating the behavior of our visitors to optimize our offerings.
With these tools, it is possible to investigate where visitors come from, how they accessed our website, which areas of the website are more frequently visited, and how often and for how long certain subpages and categories are viewed. We can also determine which search terms and websites the user entered and assess how many users visit our pages overall and which information or offers are most in demand. The goal is to use this acquired knowledge to help design our offerings and website in a user-friendly way.
Interest in data processing: By statistically analyzing user profiles, we can derive information about the operation and success of our website, such as how often information pages for certain product groups are accessed and how many visitors clicked on a particular offer. Using tracking tools, we can better target our offers to our customers, visitors, and interested parties.
Recipient and data processor: The following providers of tracking tools and web analytics tools process access data on our behalf for user analysis and statistical processing:
- Google Analytics 4 (GA4) & Google Tag Manager: Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. More information at policies.google.com/privacy
Data retention period: Information about this can be found in the links mentioned above.
Legal basis: Article 6(1)(a) of the General Data Protection Regulation (consent via cookie banner).
Planned or required provision of data: The provision of the aforementioned personal data is neither legally nor contractually required.
Relevant Area: Advertising
Personal Data: IP address, cookie identifier, order identifier, browsing behavior.
Description and purpose of data processing: The website uses advertising tracking tools. With the help of these advertising tracking tools, we can display or arrange the display of individual advertisements on our websites, which are selected (automatically) based on visitor preferences. Technically, advertising tracking is usually carried out via advertising identification tags through which cookies, among others, are used by advertising network providers to create user profiles and display ads based on cookie profiles when the website is accessed. Through such remarketing offers, the user can be shown relevant offers across the internet.
Interest in data processing: With the help of advertising tracking tools, we can better target our offers to our customers, visitors, and interested parties. Common advertising methods include retargeting and remarketing campaigns, in which users can be re-addressed at other times and places on the internet with potentially interesting products.
Recipients of the aforementioned data:
- Google Ads: Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. More information at policies.google.com/privacy
- Meta (Facebook/Instagram): Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. More information at facebook.com/privacy/policy/
Data retention period: Information about this can be found in the links mentioned above.
Legal basis: Article 6(1)(a) of the General Data Protection Regulation (consent via cookie banner).
Planned or required provision of data: The provision of the aforementioned personal data is neither legally nor contractually required.
Relevant Area: Live Chat Support
Personal Data: Chat messages, IP address, browser information, name and email (if provided).
Description and purpose of data processing: We use Tidio to provide live chat support on our website. If you initiate a chat conversation, messages you send and associated metadata are processed to provide you with real-time customer support.
Recipient and data processor: Tidio LLC, 149 New Montgomery Street, 4th Floor, San Francisco, CA 94105, USA. More information at https://www.tidio.com/privacy-policy/.
Legal basis: Article 6(1)(a) and (f) of the General Data Protection Regulation.
Relevant Area: Contact Form and Email Communication
Personal Data: Name, email address, message content.
Description and purpose of data processing: When you submit our contact form, the data you provide (name, email address, and message) is sent to us via Mailgun, our transactional email service. We use this data solely to respond to your inquiry.
Recipient and data processor: Mailgun Technologies, Inc. (a Sinch company), 112 E. Pecan Street #1135, San Antonio, TX 78205, USA. Mailgun processes email data on our behalf. More information at https://www.mailgun.com/legal/privacy-policy/.
Data retention period: Contact form submissions are retained for the duration necessary to handle your inquiry and for a reasonable period thereafter for follow-up purposes.
Legal basis: Article 6(1)(b) and (f) of the General Data Protection Regulation.
Relevant Area: AI-Powered SMS Template Generation
Personal Data: Business name, industry, service type, and other form inputs provided by you.
Description and purpose of data processing: Our website offers an SMS template generator feature that uses artificial intelligence to create customized SMS templates for your business. When you use this feature, the information you provide in the form (such as business name, industry, and service details) is sent to an AI language model to generate the template. No personally identifiable information beyond what you voluntarily provide in the form is collected.
Recipient and data processor: OpenRouter, Inc. provides API access to AI language models. The data you submit is processed to generate the requested SMS templates. More information at https://openrouter.ai/privacy.
Data retention period: Form data is processed in real time and is not stored on our servers after the template is generated.
Legal basis: Article 6(1)(a) and (b) of the General Data Protection Regulation.
Relevant Area: Google Calendar Integration
The Etisia application uses integration with Google Calendar to synchronize calendar events. When you connect your Google account with our application, you permit us to access your calendar data in accordance with the approved permissions. This data may include event titles, descriptions, event times, and other relevant information, which we use solely to inform customers about their appointments or events and to update the calendar in case of changes or cancellations.
We obtain your consent to access this data when you connect your Google account. You can revoke this consent at any time in our application's settings or by disconnecting your Google account. Your data is stored in a secure environment and is accessible only to authorized persons. We use the latest security standards and technologies to ensure the protection of your data. We do not share your data with third parties unless it is necessary to provide our services or required by law.
The use and transfer of information received from Google APIs to the Etisia application and other applications will comply with the Google API Services User Data Policy, including the Limited Use requirements.
We are committed to transparency in the processing of your personal data. You have the right to access, correct, delete, and restrict the processing of your data related to your Google account. You also have the right to information about how your data is used and for what purposes. If you wish to exercise any of these rights or have questions regarding privacy and data protection, please contact us at hi@etisia.com.
Relevant Area: Subscription to Cloud Service and Payment Processing
Personal Data: Email address, first and last name, billing address, payment information (excluding credit card details), login data (in case of registered customers), IP address, cookie identifier.
Description and purpose of data processing: We process data within the framework of the initial order or, if you are an existing customer, to provide you with your customer user account on the etisia.com platform. If you have created a customer user account, we will need your login data to verify your account.
Recipient and data processor: We share your data with recipients exclusively based on contracts relating to order processing and only to the extent necessary to fulfill the contractual provisions of the service.
All payment processing and subscription billing is handled by Paddle.com Market Limited, which acts as the Merchant of Record for all transactions. This means Paddle is responsible for processing your payment, handling invoicing, managing applicable sales taxes (VAT, GST, sales tax), and processing refunds. Paddle collects and processes your payment data directly. Responsibility for your payment data lies with Paddle. More information about Paddle's data handling practices can be found at paddle.com/legal/privacy.
Data retention period: We process and/or delete invoices and order confirmations according to appropriate tax and business retention periods unless you have expressly consented to further use of your data. Deletion of your customer user account is possible at any time and can be requested by sending a message to hi@etisia.com.
Legal basis: Article 6(1)(a), (b), (f) of the General Data Protection Regulation.
Planned or required provision of data: The provision of the aforementioned personal data for subscription is contractually required. Otherwise, the order cannot be executed.
Relevant Area: SEO Optimization
Personal Data: IP address, browser information, page interaction data.
Description and purpose of data processing: We use Writesonic SEO tools to audit and optimize our website's search engine performance. This tool may collect page-level interaction data to provide optimization recommendations.
Recipient and data processor: Writesonic, Inc. More information at writesonic.com/privacy-policy.
Legal basis: Article 6(1)(f) of the General Data Protection Regulation.
Relevant Area: Web Fonts
Personal Data: IP address, browser information.
Description and purpose of data processing: Our website uses Google Fonts to ensure consistent and visually appealing typography. When you visit our website, your browser downloads the required font files from Google's servers. In doing so, your IP address and browser information are transmitted to Google.
Recipient and data processor: Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. More information at policies.google.com/privacy.
Legal basis: Article 6(1)(f) of the General Data Protection Regulation.
4. International Data Transfers
Some of the third-party service providers mentioned above are based in the United States or other countries outside the European Economic Area (EEA). Where personal data is transferred to countries outside the EEA, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or reliance on the EU-U.S. Data Privacy Framework where applicable.
5. Your Rights Regarding the Processing of This Data
Under the General Data Protection Regulation, you have the following rights:
- Right of access (Article 15 GDPR): You have the right to request confirmation of whether we process your personal data and to obtain information about this data.
- Right to rectification (Article 16 GDPR): You have the right to request the correction of inaccurate personal data.
- Right to erasure (Article 17 GDPR): You have the right to request the deletion of your personal data under certain conditions.
- Right to restriction of processing (Article 18 GDPR): You have the right to request the restriction of data processing under certain conditions.
- Right to data portability (Article 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to object (Article 21 GDPR): You have the right to object to the processing of your personal data at any time.
- Right to withdraw consent (Article 7(3) GDPR): You have the right to withdraw your consent for data processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
For any need or request for information, revocation, or objection to data processing, please send an email to hi@etisia.com. Additionally, you have the right to lodge a complaint with the relevant supervisory authority. In Slovenia, this is the Information Commissioner (Informacijski pooblascenec), available at www.ip-rs.si.
6. Changes to This Privacy Policy
We reserve the right to update this privacy policy from time to time to reflect changes in our data processing practices or legal requirements. We encourage you to review this page periodically for the latest information on our privacy practices. Significant changes will be communicated through a notice on our website.
Last updated: 9 March 2026