Privacy policy

The legal provider and controller of enquiry data is:

Luka, who teaches through student employment arrangements, accesses the information needed to answer enquiries, arrange lessons and teach.

We process your name, email, chosen service or level, learning goals and availability to answer an enquiry and arrange a lesson. If you become a customer, we process the information needed to deliver the service and issue an invoice. The form also uses limited technical data to prevent abuse. Please do not include sensitive personal information in free-text fields.

The lawful bases are steps requested before a contract and performance of an agreed service; legal obligations for invoices; legitimate interests for form security and record-keeping; and prior consent for optional basic website analytics if it is validly configured.

A parent or legal guardian should arrange an enquiry and agreement for a paid service for a minor student. Do not include sensitive student information in the form.

Netlify hosts the website and runs the form endpoint. Resend receives submitted form data to deliver the message to the provider and a confirmation to the user. Upstash receives only a SHA-256 hash of the network address for form-abuse limiting, for no more than 60 seconds. If GA4 is active after consent, Google receives the analytics events described below. Google Meet and Miro are not loaded by this website; if either is chosen for an agreed lesson, its separate privacy policy also applies. Data is not sold.

Providers with international infrastructure may process data outside Slovenia. Before using a provider, the controller checks its current terms, processing locations, subprocessors and, where necessary, appropriate safeguards for international transfers. Current details are available on request using the contact below.

Enquiry data and related email are kept only for as long as needed to respond, agree or deliver a service, or handle a request. They are then deleted or anonymised unless retention is required for a legal obligation or legal claim. Invoices are retained for the periods required by law. Upstash uses a hashed network address for form-abuse limiting with a maximum 60-second retention period.

The source configuration does not set a GA4 analytics-data retention period. If GA4 is active, that setting must be checked in the Google Analytics account, so this policy does not state an unverified period.

Google Analytics 4 (GA4) from Google may be used only for basic website statistics, only after explicit analytics consent and only when a valid production measurement ID is configured. This policy does not state that GA4 is active in any given environment. If active, the site sends only page and landing-page paths, selected service, subject or school level, and form-step or CTA location. Analytics events do not include names, emails, phone numbers or free-text form content.

GA4 may use its own browser analytics identifiers. The website code does not set the names or retention periods of Google's analytics cookies; these cannot be verified from this configuration. Rejecting or later withdrawing analytics consent stops later analytics events and updates analytics storage to denied. It does not automatically delete browser data already stored; you can remove it in your browser settings.

Google Ads conversion measurement may be used only after separate advertising consent and valid production configuration. The conversion event is sent only after the server successfully accepts the enquiry. It does not send your name, email or free-text answers; it uses the technical submission ID as a transaction identifier. The website does not create advertising audiences or run personalised tracking, and ad_personalization remains denied. Consent choices are stored in localStorage and can be changed using the Cookie settings button.

Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your data, object to processing, or withdraw consent. Contact info@instruktor.si. You may also complain to the Slovenian Information Commissioner.