Cookies and Privacy
This privacy policy explains how personal data is processed on the website Jaka Šubic - between law and everyday life (https://jakasubo.info) for visitors, users of contact channels and commenters.
Personal Data Controller
The controller of personal data is Jaka Šubic, Cesta v Gorice 25, 1000 Ljubljana, Slovenia, email: [email protected].
What Data I Process and Why
During a normal visit to the website, technical data may be processed in server logs, such as IP address, time of visit, requested URL, user agent or browser, referring page and basic error data. The purpose of processing is to ensure operation and security, fix errors and prevent abuse. The legal basis is legitimate interest under Article 6(1)(f) of the General Data Protection Regulation (GDPR).
If you write to me by email or through the contact details on the site, I process the data you provide yourself, especially your name, email address, telephone number, message content and other data you voluntarily include. The purpose of processing is to reply to the message and handle the matter for which you contacted me. The legal basis is usually legitimate interest under Article 6(1)(f) GDPR; where the communication is connected with an agreement or performance of a service, Article 6(1)(b) GDPR may also apply.
If you submit a comment, the data entered in the comment form is processed, together with technical data that WordPress needs for publication, moderation and spam protection. Your email address is not publicly displayed. The legal basis for publishing a comment is your active submission of the comment and legitimate interest in managing discussion, moderation and website protection under Article 6(1)(f) GDPR.
If email notifications or another subscription function are enabled on the site, the data you provide for that purpose is used only to send the selected notifications. The legal basis is your consent under Article 6(1)(a) GDPR. You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing before withdrawal.
As a rule, I obtain the data directly from you when you provide it yourself, while some data is generated automatically through the use of the website or from the technical environment of your device, browser or network connection.
Where processing is based on legitimate interest, that interest consists in particular in ensuring a secure, stable and functioning website, responding to received messages, moderating comments, preventing abuse, and the reasonable technical, content-related and organizational management of the website.
Providing personal data is generally not a legal or contractual obligation. In an individual case, however, it may be necessary if you wish to receive a reply, publish a comment or use a particular function of the site. If you do not provide the necessary data, I may not be able to reply to you, publish the comment or enable a particular functionality.
Cookies
A cookie is a small text file stored by the website on your device. Some cookies are necessary for website operation, security, login, saving selected settings or WordPress functionality. Consent is generally not required for such cookies because they are needed to provide the service requested by the user.
Analytics, advertising, marketing or similar non-essential cookies are used only if they are actually enabled on the website and if you provide valid consent for them where consent is required. You may change or withdraw consent at any time in the cookie settings on the site or in your browser settings.
At the time of the latest update to this policy, the website does not use analytics, advertising or marketing cookies.
Cookies the website may use:
| Cookie name | Purpose | Retention period | Source |
|---|---|---|---|
| cookie_notice_accepted | Records that the cookie notice was acknowledged. | Usually up to 1 year. | jakasubo.info |
| js_site_lang | Stores the selected website language. | Usually up to 1 year. | jakasubo.info |
| comment_author_{HASH}, comment_author_email_{HASH}, comment_author_url_{HASH} | If selected in the comment form, stores your name, email address and website for your next comment. | Usually up to 1 year. | jakasubo.info |
| wordpress_test_cookie | Checks whether the browser supports cookies for signing in to WordPress. | Until the end of the session. | jakasubo.info |
| wordpress_logged_in_{HASH}, wordpress_sec_{HASH} | Verifies sign-in and protects the signed-in user’s session. | Until the end of the session or the selected sign-in period. | jakasubo.info |
| wp-settings-{USER_ID}, wp-settings-time-{USER_ID} | Stores user-interface preferences for the signed-in user. | Usually up to 1 year. | jakasubo.info |
| PH_HPXY_CHECK | A security or server cookie used to protect against abuse and verify that the session is working properly. | Until the end of the session. | jakasubo.info or the hosting provider |
You can also control cookies in your browser settings:
If you disable cookies, some website functions may not work properly.
Analytics, External Services and Transfers to Third Countries
The website may use services of external providers for hosting, security, WordPress maintenance, sending email, spam protection, analytics, display of embedded content or links to social networks. These providers process personal data as processors or independent controllers, depending on their role and service.
Recipients or categories of recipients of personal data may in particular include the hosting provider, providers of technical maintenance and security, email service providers, spam protection providers, providers of analytics or embedded services, and providers of other tools that I use to manage, develop or improve the website, but only to the extent necessary for the specific processing purpose.
If services of providers from the United States of America or other third countries are used, personal data may be transferred outside the European Economic Area. Such transfer is carried out only where an appropriate legal basis exists, for example an adequacy decision of the European Commission, participation of the provider in the EU-U.S. Data Privacy Framework, standard contractual clauses or another mechanism allowed by the GDPR. The old Privacy Shield arrangement is no longer used as an independent transfer basis.
Artificial Intelligence (AI)
Some parts of the website, such as individual texts, translations, summaries, descriptive labels, visual materials, technical solutions or content drafts, may be wholly or partly created, translated, edited, reviewed or otherwise processed with the help of artificial intelligence tools. I use such tools as support for content preparation, technical maintenance, accessibility improvements and work organization, but I still review the final published content myself and remain responsible for it.
If the use of such tools in a particular case requires the processing of personal data, I try to limit the scope of that data to what is reasonably necessary for the specific purpose and to use appropriate safeguards and an appropriate legal basis under Article 6 GDPR. As a rule, I do not include sensitive or unnecessary personal data in such tools unless this is necessary for handling a specific matter.
Depending on the specific service, contractual terms and manner of use, the provider of such an AI tool may act either as a processor or as an independent controller. Where such use includes a transfer of personal data to third countries, the rules set out in the section on external services and transfers to third countries also apply.
Data Retention
Technical logs are kept only for as long as necessary for operation, security and error resolution, unless a longer retention period is required by law or a specific security review. Contact messages are kept for as long as necessary to reply and resolve the matter, then deleted or archived where retention is needed for evidence, legal obligations or protection of rights. Comments and related data may be kept for as long as the comment is published or as long as needed for moderation, security and protection of rights.
Your Rights
Under the GDPR, and subject to the conditions set by law, you have the right of access to personal data, rectification of inaccurate data, erasure, restriction of processing, data portability, objection to processing based on legitimate interest, and withdrawal of consent where processing is based on consent.
You may send a request to [email protected]. If you believe that the processing of personal data is not compliant with the law, you may lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, email: [email protected], website: https://www.ip-rs.si.
Automated Decision-Making
I do not carry out automated decision-making on the website, including profiling, that would produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.
External Links and Content
The website may contain links to external websites or embedded third-party content. The controllers of those external sites or services are responsible for personal data processing there. I recommend checking their privacy policies before using external services.
Copyrighted Content and Responsibility for Content
The content on the website is informational or personal in nature. Despite efforts toward accuracy and currency, it does not constitute individual legal, medical, financial or other professional advice unless expressly stated in a specific agreement. Copyrighted content may not be reproduced, modified, republished or distributed without prior permission, except where the law provides otherwise.
Ljubljana, July 11, 2026
Jaka Šubic