Privacy policy

Last updated: 16 October 2026

This policy explains which personal data Kanum Studio processes when you visit this website or contact us, why we do it and what rights you have under the General Data Protection Regulation (GDPR).

1. Who is responsible

Kanum Studio, inženiring in oblikovanje, Tilen Antonio Čučko s.p.
Zgornji Duplek 64B, 2241 Spodnji Duplek, Slovenia
Registration no. 7588542000 · Tax no. 58024581
solution@kanum-studio.com · +386 69 361 674

We are a small studio and have no data protection officer. Write to the address above with any question about your data.

2. The project enquiry form

When you send a brief, we receive your name, email address, country, your project description and any optional details you add (company, number of parts, reference material, deadline, how you found us). We use them to answer your enquiry and to prepare a quote.

Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). The optional question about how you found us is based on our legitimate interest in knowing which channels work (Art. 6(1)(f) GDPR).

If you came to our site through one of our Google ads, the form also sends us the keyword the ad was shown for. It was part of the link you clicked. We use it only to see which ads lead to enquiries (Art. 6(1)(f) GDPR). Nothing is stored in your browser for this, and we don't send it to Google.

The form is processed by a script on our own web server and delivered by email to our mailbox. You also receive an automatic email confirming what you sent. No external form service is involved.

To protect the form from abuse, the server keeps a one-way hash of your IP address and email address for up to 24 hours to limit repeated submissions. The hash cannot be turned back into the original address.

3. Email and phone

If you write or call us directly, we process what you send us for the same purpose and on the same legal basis as the form.

4. Clients

Once we work together, we keep contact details, project files and correspondence to deliver the work (Art. 6(1)(b) GDPR) and invoices as required by Slovenian tax and accounting law (Art. 6(1)(c) GDPR).

When you share files with us, whether for an enquiry or a project, we send you an upload link from Dropbox. You can upload without creating an account, and the files land in a private folder that only we can access. The service is provided by Dropbox International Unlimited Company (Ireland); data may also be processed by Dropbox, Inc. in the USA, which is certified under the EU–US Data Privacy Framework, with standard contractual clauses as an additional safeguard. Files are kept as described in section 6.

5. Visiting the website

Our hosting provider, Namecheap, Inc. (USA), runs the website and our mailbox on servers in its EU data centre. It records technical access data (IP address, date and time, requested page, browser) in server logs to keep the site secure and running. This is our legitimate interest (Art. 6(1)(f) GDPR). The logs are deleted automatically after a short period set by the provider. Namecheap acts as our processor; any access from the USA is covered by the EU Standard Contractual Clauses in its data processing agreement.

The site sets no cookies and uses no analytics, advertising or tracking tools. Fonts and scripts are served from our own server, so your browser does not contact Google or any other third party while you read. Your language and light/dark choice are stored only in your own browser (local storage) and never sent to us.

6. How long we keep data

Enquiries that do not lead to a project are deleted within 12 months. Project files are kept for 12 months after delivery unless agreed otherwise. Invoices and related records are kept for the periods required by Slovenian law (currently 10 years).

7. Who else sees your data

Only our hosting and email provider (Namecheap, see section 5), our file-transfer service (Dropbox, see section 4), and public authorities or advisers such as an accountant where the law requires it. We never sell your data or use it for marketing lists.

8. Your rights

You can ask us for access to your data, its correction or deletion, restriction of processing and a copy in a portable format, and you can object to processing based on our legitimate interest. Write to solution@kanum-studio.com. We answer within one month.

You also have the right to lodge a complaint with a supervisory authority. In Slovenia this is the Information Commissioner (Informacijski pooblaščenec, Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si); you may also contact the authority in your own country.

We do not use automated decision-making or profiling. Giving us your details is voluntary, but without an email address we cannot reply.