This policy applies to the normatik.si website and to messages you send us by e-mail. It also briefly describes user account data in the Normatik app. For the data about your customers that you enter into the app, you are the controller – that relationship is governed by the terms of use. The Slovenian version of this policy is the original and prevails; this English version is a translation.
In short
- This site sets no cookies, has no analytics and loads nothing from other servers.
- The server keeps a technical log of visits for no longer than 30 days.
- If you write to us, we keep your message while we deal with it, then for no longer than two years after our last contact.
- The site and e-mail are hosted in Slovenia. We do not transfer data from the site or from e-mail outside the European Economic Area.
- We do not sell data.
- For anything about your data, write to info@normatik.si.
Controller
The controller of personal data is:
SOFTBASE IS informacijski sistemi in trgovinska dejavnost d.o.o. (Softbase IS d.o.o.), Spodnje Preloge 95, 3210 Slovenske Konjice, Slovenia, registration number 8799431000, e-mail info@normatik.si
Full company details are in the legal notice. We have not designated a data protection officer. Send questions about data protection to the same address.
What we process
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Server logs: IP address, time, address requested, page you came from, browser type | running the site, finding errors, protecting against abuse | legitimate interest (Article 6(1)(f) GDPR) | no longer than 30 days |
| E-mail: e-mail address, name if you give it, message content | replying, agreeing on additional storage | steps before entering into a contract (Article 6(1)(b)) or legitimate interest (Article 6(1)(f)) | as long as needed, then no longer than two years after our last contact |
| User account in the app: name, e-mail address, sign-in and account security data | performing the contract, security of the service | contract (Article 6(1)(b)) and legitimate interest (Article 6(1)(f)) | by the retention classes in the app; see section 11.1 of the terms |
| Subscription: company or personal name, address, tax number, e-mail address, proforma invoice and invoice details | concluding and performing the subscription, issuing invoices | contract (Article 6(1)(b)) and legal obligation (Article 6(1)(c)) | for as long as the contract lasts; invoices for as long as tax law requires |
| Data you enter into the app: data about your customers and transactions | providing the service on your instructions | you are the controller, we are the processor | for as long as the contract lasts, issued documents until the statutory period ends; see section 11.2 of the terms |
Server logs
When you open a page, the server automatically records a technical log of the request:
- IP address,
- date and time,
- the address requested and the server’s response,
- the page you came from, if your browser sends it,
- browser and operating system type.
We need the logs to run the site, find errors and protect against abuse. The legal basis is our legitimate interest in running the site securely (Article 6(1)(f) of the General Data Protection Regulation). The logs are deleted after no more than 30 days.
We do not use the logs to measure traffic, we do not combine them with other data and we do not use them to find out who you are.
When you write to us
If you write to info@normatik.si, we process your e-mail address, your name if you give it, the content of your message and any details you add yourself.
- Purpose: answering your question and, where relevant, agreeing on additional storage.
- Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) or our legitimate interest in replying to your message (Article 6(1)(f)).
- Retention: as long as needed to deal with it, then no longer than two years after our last contact. If you become a user, we keep correspondence relating to the contract for as long as it is needed to perform the contract. Where the law requires longer retention, the statutory period applies.
User account in the app
Softbase IS d.o.o. is the controller of user account data in the Normatik app at app.normatik.si (name, e-mail address, sign-in and account security data). We process it to perform the contract and for the security of the service. Details are in section 11.1 of the terms of use.
For the data about your customers and transactions that you enter into the app, you are the controller and Softbase IS d.o.o. is the processor. This relationship is governed by the data processing agreement in section 11.2 of the terms of use. Issued documents are kept for as long as the law requires (10 or 20 years) and cannot be deleted before that period ends.
The app’s sub-processors and retention classes are published at app.normatik.si/pravno.
Does this site use cookies?
No. This site sets no cookies and does not use browser storage. It has no analytics, ads, social media buttons, embedded videos or third-party fonts. The fonts are on our own server. The site loads nothing from other servers. That is why there is no cookie banner.
If we ever add traffic measurement or another tool that requires consent, we will first update this policy and add a banner where you decide for yourself. Without your consent, such a tool will not run.
Processors and recipients
We use one processor for the site and e-mail:
| Processor | What it does | Where |
|---|---|---|
| HITROST.COM internet storitve d.o.o., Cesta železarjev 8B, 4270 Jesenice, Slovenia | website and e-mail hosting | Slovenia |
The data processing agreement is part of its terms of business. Under those terms it may use external providers as sub-processors for parts of the service (for example DNS servers) and must tell the customer when they change.
The app has its own sub-processors. The list is published at app.normatik.si/pravno. We will name the provider of the optional appointments module before we switch the module on.
FURS, AJPES and other authorities to which you submit data by law are recipients required by law, not our processors. They are shown on the same list.
We do not sell data or give it to anyone else for their own purposes. The exception is where the law requires us to disclose it, for example at the request of a court or another competent authority.
Transfers to third countries
We do not transfer data from the site or from e-mail to countries outside the European Economic Area.
The app has an optional AI assistant, which is switched off by default. Its language model provider is in the USA. If you switch the assistant on, the content of your questions and the data needed for an answer are transferred to that provider under the European Commission’s standard contractual clauses. You can request a copy of the clauses at info@normatik.si. Unless you switch it on, no such transfer takes place.
Security
- The site is served only over an encrypted connection (HTTPS).
- The site is static: it has no sign-in of its own, forms or scripts, so you enter nothing on it. The “Log in” link leads to the app at app.normatik.si.
- We collect only the data we need and keep it no longer than stated.
- Only people who need it for their work have access to the logs and e-mail.
If you notice a security issue, write to info@normatik.si.
Your rights
Under the General Data Protection Regulation you have the right:
- of access to your data and to a copy,
- to rectification of inaccurate data,
- to erasure, except where we must keep data by law,
- to restriction of processing,
- to object to processing based on legitimate interest,
- to data portability where processing is based on a contract.
Right to object. You may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (server logs, replies to messages and the security of user accounts). We then stop processing the data unless we demonstrate compelling legitimate grounds that override your interests, or we need the data to establish, exercise or defend legal claims (Article 21 GDPR).
How: send your request to info@normatik.si. No special form is needed. Exercising your rights is free of charge, unless a request is manifestly unfounded or excessive.
Time limit: we reply without undue delay and within one month at the latest. Where a request is complex or there are several, this may be extended by up to two further months. We tell you about any extension and the reasons within the first month (Article 12(3) GDPR).
If we need to confirm that the request really comes from you, we will ask for as little information as possible.
For the data about your customers that you enter into the app, you are the controller. If a data subject sends us a request about such data, we refer them to you and help you respond.
Complaints
If you believe we process data in breach of the rules, you can lodge a complaint with a supervisory authority. In Slovenia, this is:
Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, Slovenia, www.ip-rs.si
You may also lodge a complaint with the supervisory authority in the EU member state where you habitually live or work.
We would welcome it if you wrote to us first so that we can try to resolve the matter together. This is not a condition for a complaint.
Do you have to give us data?
Neither the law nor a contract requires you to give us data. Your browser sends the IP address itself; without it the site cannot be shown. If you do not send us your e-mail address, we cannot reply.
In the app, you cannot sign up without an e-mail address, and you cannot use the service until you confirm it.
Automated decision-making
We do not take decisions based solely on automated processing and we do not create profiles. The AI assistant in the app only makes suggestions; the user decides and carries out the action.
Children
The site and the service are intended for sole traders and their accountants. They are not directed at children, and we do not knowingly collect children’s data.
Changes and validity
We update this policy when the processing changes. A new version applies once it is published on this page. We also inform app users of material changes that affect them by e-mail or in the app.
Last updated: 23 September 2026.