PRIVACY POLICY

Higeja d.o.o.

Effective date: 17 August 2026

Higeja d.o.o., Ptujska ulica 19, Ljubljana, registration number 1482076000, tax number 62888137 (hereinafter: “Higeja”), respects the privacy of visitors to its website, customers, course participants, and other individuals whose personal data it processes.

This Privacy Policy explains which personal data Higeja processes, for what purposes, on which legal basis, how it protects such data, and what rights individuals have.

When processing personal data, Higeja complies with applicable data protection legislation, in particular the EU General Data Protection Regulation (GDPR) and applicable legislation of the Republic of Slovenia.

1. DATA CONTROLLER

The data controller is:

Higeja d.o.o.
Ptujska ulica 19
Ljubljana
Registration number: 1482076000
Tax number: 62888137
Email: info@higeja.si
Phone: 01/54 63 201

For questions regarding the processing of personal data, individuals may contact us at:

info@higeja.si

2. PERSONAL DATA WE PROCESS

Depending on how the website is used, whether a purchase or course registration is made, or how an individual communicates with Higeja, we may process different types of personal data.

This may include, in particular:

  • first and last name,

  • address,

  • email address,

  • telephone number,

  • information required for issuing an invoice,

  • order and purchase information,

  • course participation information,

  • information required for issuing certificates,

  • information provided by an individual when communicating with Higeja,

  • information related to the use of the website,

  • payment or transaction information required to process and verify payments.

Higeja generally does not collect or seek to collect personal data that is not necessary for a specific purpose.

3. PURPOSES OF PROCESSING PERSONAL DATA

We may process personal data for the following purposes:

  • processing and fulfilling orders,

  • selling courses and products,

  • processing payments,

  • issuing invoices,

  • organizing and conducting courses,

  • communicating with customers and course participants,

  • responding to questions and inquiries,

  • handling complaints and other requests,

  • issuing certificates,

  • maintaining records of course participants and customers,

  • fulfilling legal and accounting obligations,

  • protecting Higeja’s rights and legitimate interests,

  • ensuring the security and proper functioning of the website,

  • sending notifications and promotional communications where there is an appropriate legal basis or consent,

  • other purposes for which the individual has provided the data or for which there is an appropriate legal basis.

4. LEGAL BASES FOR PROCESSING

Higeja processes personal data on the basis of one or more legal bases provided for by applicable legislation.

Personal data may be processed, among other things:

  • where processing is necessary for the performance of a contract or for taking steps at the request of an individual prior to entering into a contract,

  • where processing is necessary to comply with a legal obligation,

  • where processing is necessary for the legitimate interests of Higeja,

  • on the basis of the individual’s consent where consent is required.

Where processing is based on consent, the individual may withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. PURCHASES THROUGH THE ONLINE STORE

When purchasing products or courses through the Higeja online store, Higeja processes the information necessary to fulfil the order.

The data is primarily used for:

  • processing the order,

  • processing payment,

  • delivering products,

  • communicating regarding the order,

  • issuing invoices,

  • handling potential complaints and claims.

Customers may also make an online purchase without registering a user account where the online store allows this.

6. PAYMENT SYSTEMS

For card payments, Higeja uses the external payment service provider Stripe.

When a payment is made, personal data required to process the transaction may also be processed by the payment service provider.

Higeja generally does not store complete payment card details where these are processed directly by an external payment service provider.

The external provider’s own rules and privacy policy also apply to the processing of data by that provider.

7. COMMUNICATION WITH INDIVIDUALS

If an individual contacts Higeja by email, telephone, contact form, or other means, Higeja may process the information provided by the individual.

This information is used for:

  • responding to questions,

  • handling inquiries,

  • resolving complaints,

  • processing orders,

  • other communication necessary for the business relationship.

8. NEWSLETTERS AND PROMOTIONAL COMMUNICATIONS

Higeja may send customers and other individuals information about its services, courses, products, news, and offers where there is an appropriate legal basis.

Where consent is required for promotional communications, Higeja will request the individual’s consent in an appropriate manner.

Individuals may request the cessation of promotional communications or unsubscribe at any time using the method indicated in the relevant communication or by contacting:

info@higeja.si

9. DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

Higeja does not sell personal data.

We may disclose personal data or provide access to external service providers where this is necessary to provide our services and conduct our business.

This may include, in particular:

  • online store and hosting providers,

  • payment service providers,

  • accounting and other business service providers,

  • delivery providers,

  • IT support providers,

  • email and communication service providers,

  • other contractual processors where necessary.

External service providers may process personal data only within the scope of their tasks and in accordance with applicable legislation and appropriate contractual obligations.

Higeja may also disclose data to government authorities or other authorized entities where required by law or where necessary to exercise or protect legal rights.

10. RETENTION OF PERSONAL DATA

Higeja retains personal data only for as long as necessary for the purpose for which it was collected or for as long as required by applicable regulations.

Data relating to business, accounting, and tax records is retained for the periods required by applicable legislation.

After the retention period expires, personal data is deleted, destroyed, or anonymized, unless another lawful basis exists for continued retention.

11. SECURITY OF PERSONAL DATA

Higeja uses appropriate technical and organizational measures to protect personal data against:

  • unauthorized access,

  • loss,

  • destruction,

  • alteration,

  • disclosure,

  • other unlawful processing.

Access to personal data is limited to persons who need it to perform their duties.

Despite the use of appropriate security measures, complete security of data transmitted or stored via the internet cannot be guaranteed.

12. COOKIES

The Higeja website uses cookies and similar technologies.

Cookies may be used for:

  • proper functioning of the website,

  • providing online store functionality,

  • storing user preferences,

  • analyzing website usage,

  • improving the user experience,

  • other lawful purposes.

More detailed information about the use of cookies is provided in the separate Cookie Policy published on the Higeja website.

13. PHOTOGRAPHY AND RECORDING

During courses, Higeja may in certain cases photograph or record activities.

Where photographs or recordings are to be used in a manner requiring the individual’s consent, Higeja will obtain the appropriate consent.

Individuals may exercise their rights regarding the use of their personal data or recordings in accordance with applicable legislation.

14. INDIVIDUAL RIGHTS

Under applicable legislation, individuals may have the following rights:

  • the right to access their personal data,

  • the right to correct inaccurate or incomplete data,

  • the right to erasure of personal data where the legal conditions are met,

  • the right to restriction of processing,

  • the right to object to processing,

  • the right to data portability where the legal conditions are met,

  • the right to withdraw consent where processing is based on consent,

  • the right to lodge a complaint with the competent supervisory authority.

To exercise their rights, individuals may contact Higeja at:

info@higeja.si

When submitting a request, Higeja may request additional information to verify the individual’s identity where necessary to protect personal data.

15. RIGHT TO LODGE A COMPLAINT

If an individual believes that Higeja processes their personal data in violation of applicable legislation, they may first contact Higeja at:

info@higeja.si

Individuals also have the right to lodge a complaint with the competent supervisory authority for personal data protection in the Republic of Slovenia.

16. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

When using certain external service providers, personal data may be processed outside the European Economic Area.

Where such a transfer takes place, Higeja ensures that the data is transferred and processed in accordance with applicable legislation and on the basis of an appropriate mechanism ensuring the protection of personal data.

17. CHANGES TO THE PRIVACY POLICY

Higeja may amend this Privacy Policy from time to time due to changes in legislation, business practices, the use of new technologies, or other reasons.

The current version of the Privacy Policy is always published on the Higeja website.

We recommend that users periodically check the latest version.

18. CONTACT

For any questions regarding the processing of personal data, please contact:

Higeja d.o.o.
Ptujska ulica 19
Ljubljana

Email: info@higeja.si
Phone: 01/54 63 201

Effective date: 17 August 2026

Higeja d.o.o.