Privacy policy
Last updated: 5 August 2026
This page describes how Vega SmartLab informacijski sistemi d.o.o. handles the personal data of visitors to vegasmartlab.com. The Vega ERP application has its own separate privacy policy, published on vegaerp.com.
Controller
Vega SmartLab informacijski sistemi d.o.o., Novi trg 11, 8000 Novo mesto, Slovenia.
Registration number 7507666000, VAT ID SI15595005. For any question about personal data, write to info@vegaerp.com.
We are not required to appoint a Data Protection Officer.
Cookies and tracking
This site sets no cookies. There is no analytics, no advertising pixel, no social plugin and no other tracking. Nothing is stored in your browser.
Because no optional cookies are used, there is no consent banner — under Article 5(3) of the ePrivacy Directive consent is not required in this case.
Data created by your visit
The server hosting this site writes a technical log for each request: IP address, timestamp, requested path, browser type and referring page. We need this to operate and secure the site.
The legal basis is legitimate interest (Article 6(1)(f) GDPR) — keeping the site available and defending against abuse. Logs are kept for at most 30 days and then deleted automatically. We do not build profiles from them or combine them with other sources.
Contact form and email
If you use the contact form or write to info@vegaerp.com, we process the data you choose to include: name, email address, an optional company name, and the content of your message.
The legal basis is taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR), or legitimate interest in replying to a business enquiry (Article 6(1)(f) GDPR).
Submissions are not written to any database — the form delivers them straight to our mailbox. We keep them there for as long as the exchange is live, and afterwards for as long as tax and accounting rules require.
The form uses a hidden field and a submit-timing check to deter spam. We use no CAPTCHA service, and nothing is stored in your browser for this.
Processors and transfers
We do not sell personal data and do not pass it to third parties for their own purposes. The following access it to a limited extent as our contracted processors: our website hosting provider, our email provider, and Resend, Inc. (USA), which delivers contact form messages.
Form messages are sent through servers in Ireland (region eu-west-1). Resend does, however, store sending metadata, logs and API records in the United States. That is a transfer to a third country, safeguarded by Standard Contractual Clauses or the EU-US Data Privacy Framework.
If you would rather avoid that transfer, email us directly at info@vegaerp.com instead of using the form.
Your rights
Under the GDPR you have the right of access to your data, and rights to rectification, erasure, restriction of processing, portability, and objection to processing based on legitimate interest.
Send requests to info@vegaerp.com. We reply within one month at the latest.
If you believe we process your data unlawfully, you may lodge a complaint with the Slovenian Information Commissioner, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si.
Changes
We may update this policy when the site changes. The version published on this page, together with its last-updated date, is the one that applies.