---
title: "Privacy policy"
url: https://pyxios.com/en/privacy/
language: en
modified: 2026-11-04T18:00:39+01:00
---

# Privacy policy

How we protect and process your personal data.

## Data controller

Name

Pyxios – Gregor Rojko s.p.

Registration no.

7465386000

Tax no.

77152891

VAT registered

no

Email

info@pyxios.com

Phone

040354732

This policy explains which personal data we process, why, how long we keep it and what your rights are. We process data in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Slovenian Personal Data Protection Act (ZVOP-2). The controller is the business listed above.

## 1. What we process and why

### Enquiries (contact form, email)

Name, email address, company, selected service, approximate budget and message. Purpose: replying and preparing a quote. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). Retention: up to 2 years after the last communication; if a contract is concluded, as long as needed to perform it and meet legal obligations.

### Purchases in the shop

Email address, name, billing address, company tax ID if provided, purchased products, amount, time of purchase and of the consent given, and number of downloads. Purpose: concluding and performing the contract, delivery, support, invoicing. Legal basis: performance of a contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c) GDPR). Retention: invoices and accounting records for 10 years after the end of the year of issue as required by tax law; other order data until claims under the contract become time-barred.

### Payment data

Card and payment data are processed exclusively by the payment provider Stripe. We never receive or store them; Stripe only sends us the payment confirmation, amount and billing details.

### Technical data

When you visit the site the server automatically logs technical data (IP address, browser, time and page). Purpose: security and operation. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: short term, usually up to 30 days.

## 2. Cookies

We only use strictly necessary cookies, which do not require consent: a session cookie that keeps your cart and protects forms against abuse (deleted at the end of the session). On the payment form Stripe sets cookies required to process the payment and prevent fraud. We use no third-party analytics, advertising or tracking cookies. Fonts are hosted on our own server. Videos (YouTube, Vimeo) load only when you start them; the video provider then receives your IP address.

## 3. Processors and recipients

We share data only with processors needed to run the service: Stripe (Stripe Payments Europe, Ltd., Ireland) for payments and invoices, the website hosting provider and the email provider. Stripe may transfer data to the USA based on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We do not sell data or use it for advertising.

## 4. Your rights

You may at any time request access, rectification, erasure, restriction and portability of your data and object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time. Send requests to info@pyxios.com; we reply within one month. Data we are legally required to keep cannot be erased.

If you believe your data is processed unlawfully you may lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, [www.ip-rs.si](https://www.ip-rs.si), or with the supervisory authority in your country.

## 5. Security

The site uses an encrypted connection (HTTPS). Downloadable files are protected against direct access and available only through a time-limited link. Only the provider has access to the data.

## 6. Changes

We may update this policy; the current version is always published on this page. Effective from 4 November 2026.