Last updated: 4 October 2026.
1. Who is responsible for your personal data?
The controller of personal data on inter-media.si is Intermedia, d.o.o., Leskoškova 9e, 1000 Ljubljana, Slovenia. For privacy enquiries and to exercise your rights, contact info@inter-media.si or write to the postal address above. You can also call +386 1 544 54 51.
This policy explains how data is processed when you visit our website, submit enquiries, place orders, upload files, subscribe to our newsletter or use the virtual assistant Izzy. It covers our processing activities; external service providers may issue separate notices for their own activities.
2. What data do we process and why?
Enquiries and communication: we process your name, contact details, company information, messages and attachments that you send us. We use them to respond, provide advice and prepare quotations. For an individual seeking to enter into a contract, the basis is taking steps at their request before entering into a contract, Article 6(1)(b) GDPR. For communication with company contact persons and general business enquiries, the basis is our legitimate interest in responsive business communication, Article 6(1)(f) GDPR.
Orders, production and delivery: we process customer and recipient details, billing and delivery addresses, contact details, selected products, specifications, instructions, order information and payment information. We use these to fulfil orders, arrange delivery and handle complaints. The basis is performance of a contract, Article 6(1)(b) GDPR; for contact persons of legal entities, it is our legitimate interest in carrying out the business relationship, Article 6(1)(f) GDPR. Invoices and other mandatory records are processed to comply with legal obligations, Article 6(1)(c) GDPR.
Customer account: if you create an account, we process login details, contact information and linked orders to provide the account and access to orders under Article 6(1)(b) GDPR. Creating an account does not replace consent to receive newsletters.
Website operation and security: technical data may include your IP address, access time, requested page address, browser and device information, and error and security logs. The purpose is to operate the website, detect misuse and protect the system, based on our legitimate interest, Article 6(1)(f) GDPR. Access to or storage of information on your device is assessed separately under the rules governing cookies.
Newsletter: with your consent under Article 6(1)(a) GDPR, we use your email address and subscription information to send news and offers. You can unsubscribe using the link in an email or by contacting info@inter-media.si. Unsubscribing does not affect messages needed to fulfil your order.
Analytics and advertising: where you consent, we use visit, interaction, traffic-source and purchase data, together with online identifiers, for statistics and advertising measurement through Google Analytics 4 and Google Ads. The basis is consent, Article 6(1)(a) GDPR. This data is not necessarily anonymous.
3. Photographs and print files
We use photographs, artwork, text and other files to prepare quotations, review files, create designs, produce items and fulfil the agreed order. Files may contain personal data, including images of other people. Provide only the data needed for the order and ensure that you are entitled to supply it and authorise its use. An ordinary photograph does not in itself constitute biometric identification.
Uploading a file for an order does not give permission to publish it in our project gallery, advertising or social media. Such use requires a separate arrangement and an appropriate legal basis. If you supply files on behalf of another controller, we separately agree data-processing terms where required.
We may use Dropbox to transfer and store files. Files may also be shared with staff or contractors who need them for the agreed production work.
4. Virtual assistant Izzy
Izzy is an AI assistant. Your message and conversation context are sent to the technology provider OpenAI to generate a response. If you leave contact details and an enquiry in the conversation, our team may receive them to follow up. Processing a specific pre-contractual enquiry is based on Article 6(1)(b) GDPR; general assistance and business communication rely on our legitimate interest in providing support, Article 6(1)(f) GDPR.
Using Izzy is not a condition of purchase; you can also email or call us. Do not enter passwords, full payment-card details, health information or other sensitive information into the chat. The assistant's responses are informational and do not independently confirm an order. We do not carry out automated decision-making that produces legal or similarly significant effects on you within the meaning of Article 22 GDPR.
5. Cookies and your choices
Strictly necessary cookies support basic functions such as the shopping cart, login, security and remembering your cookie choices. Optional analytics and advertising technologies are used for visitor statistics and advertising measurement or personalisation on the basis of your consent.
The cookie panel offers “Reject All”, “Settings” and “Accept All”. “Reject All” rejects optional categories, not strictly necessary functions. You can change your choices later using the “Cookie Settings” button on the website. Withdrawal of consent does not affect the lawfulness of processing before withdrawal. You can also delete cookies through your browser; this may affect website functionality.
6. Who may receive the data, and where is it processed?
To the extent necessary for these purposes, recipients may include hosting, technical support, email, accounting, production and delivery providers, as well as payment providers Stripe and PayPal, file-transfer provider Dropbox, website translation provider Weglot, security and network infrastructure provider Cloudflare, analytics and advertising provider Google, and assistant technology provider OpenAI. The payment provider processes data according to your selected payment method. Some providers act as independent controllers for certain activities. We may also disclose data to competent authorities where required by law.
External services may involve processing outside the European Economic Area. Such transfers require an appropriate basis under Chapter V GDPR. You can request information about the safeguards used and how to obtain a copy by contacting info@inter-media.si.
7. How long do we keep data?
Retention depends on the purpose, order fulfilment, applicable mandatory retention periods and potential claims. We distinguish accounting records from working photographs and print files; the obligation to retain an invoice does not itself justify keeping all attachments for the same period. Newsletter data is kept until consent is withdrawn or the purpose ends; limited evidence of consent and unsubscription may be retained where necessary to demonstrate compliance. Data needed for a specific dispute may be kept until that dispute is resolved. Once the applicable period ends, we delete the data or irreversibly anonymise it.
8. Your rights
Subject to the GDPR's conditions, you may request access, rectification, erasure, restriction of processing and data portability. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. You may object to direct marketing, including related profiling, at any time. You may also withdraw consent at any time.
Send your request to info@inter-media.si. Where necessary, we may ask for proportionate additional information to verify your identity. We respond without undue delay, normally within one month; if an extension is justified, we inform you of the reasons within that period. The right to erasure is not absolute, particularly where data is needed to meet legal obligations or deal with legal claims.
You may complain to the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, www.ip-rs.si, or to a competent supervisory authority, in particular in the country of your habitual residence, place of work or the alleged infringement.
9. Do you have to provide data?
Information needed for a quotation, order, payment or delivery is necessary to carry out the requested process; without it, we may be unable to do so. Required fields are marked in the form. Newsletter subscriptions, optional cookies and use of Izzy are voluntary and are not conditions of placing an order.
10. Changes to this policy
We update this policy when our practices or data-protection requirements change. The current version and update date are published on this page. We notify you appropriately of material changes to processing and obtain fresh consent separately where required.
