Privacy Policy

Privacy Policy

Last updated: 26 July 2026

1. Introduction

Onitex Automation d.o.o. respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and disclose personal data when you visit our website, submit an enquiry, request a quotation, request technical support or otherwise communicate with us.

We process personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), the Slovenian Personal Data Protection Act and other applicable privacy and electronic communications legislation.

2. Data Controller

The controller responsible for the processing of personal data described in this Privacy Policy is:

Onitex Automation d.o.o.
Obrtniška ulica 7 / Via degli Artigiani 7
6000 Koper-Capodistria
Slovenia

Identification number: 9123938000
VAT number: SI 18000274
Email: info@onitex.com
Technical support: support@onitex.com
Telephone: +386 64 152 151

Onitex Automation d.o.o. determines the purposes and means of processing personal data collected through the website and related business communications.

3. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed in connection with:

  • visits to our website and related subdomains;
  • contact and enquiry forms;
  • quotation requests;
  • service and technical-support requests;
  • communication by email, telephone or messaging applications;
  • customer, supplier, distributor and business-partner relationships;
  • website analytics, advertising and conversion measurement;
  • embedded content and videos;
  • HubSpot customer relationship management and website tracking.

This Privacy Policy does not apply to websites operated independently by third parties, even when they are linked from our website.

4. Personal Data We Collect
4.1 Information you provide directly

When you contact us or submit a form, we may collect:

  • your full name;
  • business email address;
  • telephone number;
  • company name;
  • job title or function;
  • country;
  • preferred method of communication;
  • information contained in your message;
  • product, container, label or production requirements;
  • requested machine configuration;
  • machine model;
  • machine serial or service number;
  • description of a technical issue;
  • photographs, videos, drawings, specifications or other files you provide;
  • information concerning your company, project, application or production process;
  • correspondence and records of communication with us.

Please do not provide personal data that is unnecessary for your enquiry. You should also avoid sending special-category personal data, such as health information, political opinions, religious beliefs or biometric data.

4.2 Information collected automatically

When you visit our website, certain technical information may be collected automatically, including:

  • IP address;
  • browser type and version;
  • operating system;
  • device type;
  • screen resolution;
  • approximate geographical location;
  • language and time-zone settings;
  • referring website or advertising source;
  • pages visited;
  • time and date of visits;
  • session duration;
  • interactions with website content;
  • form and conversion events;
  • cookie and similar technology identifiers;
  • advertising identifiers, where permitted;
  • diagnostic, security and error information.

Google Analytics normally collects information such as visitor and session statistics, approximate location, browser information and device information.

4.3 Information associated with HubSpot CRM

We use HubSpot CRM and the HubSpot Tracking Code to manage business relationships and understand how visitors interact with our website.

If you submit a form, communicate with us or are already recorded as a contact in our CRM, HubSpot may associate website interactions with your CRM contact record. This may include pages visited, form submissions, referral sources, email interactions and other business communications.

HubSpot may process IP addresses and online identifiers collected through its tracking code. Depending on the HubSpot services and settings used, HubSpot may act as our processor or, for certain processing activities, as an independent controller.

5. Purposes and Legal Bases for Processing

We process personal data only where we have a valid legal basis.

5.1 Responding to enquiries

We process your contact information and message to:

  • answer questions;
  • evaluate your application;
  • recommend suitable equipment;
  • arrange calls or meetings;
  • provide technical or commercial information.

The legal basis is taking steps at your request before entering into a contract under Article 6(1)(b) GDPR and our legitimate interest in managing business enquiries under Article 6(1)(f) GDPR.

5.2 Preparing quotations and proposals

We process information about your company, products, production requirements and contact details to:

  • determine a suitable technical configuration;
  • prepare quotations;
  • calculate pricing and delivery conditions;
  • perform product tests;
  • communicate about a potential project.

The legal basis is Article 6(1)(b) GDPR.

5.3 Performing contracts and supplying equipment

Where you purchase equipment or services from us, we process personal data to:

  • process and fulfil orders;
  • manufacture and configure equipment;
  • arrange delivery and commissioning;
  • issue invoices and other commercial documents;
  • provide warranty and after-sales support;
  • manage payments and contractual obligations.

The legal basis is performance of a contract under Article 6(1)(b) GDPR and compliance with legal obligations under Article 6(1)(c) GDPR.

5.4 Technical support and service requests

We process service-request information to:

  • identify the relevant machine;
  • diagnose technical issues;
  • provide remote or on-site support;
  • supply spare parts;
  • process warranty requests;
  • maintain service and repair records;
  • improve machine reliability and documentation.

The legal basis is performance of a contract under Article 6(1)(b) GDPR and our legitimate interest in supporting our products, maintaining safety and improving product quality under Article 6(1)(f) GDPR.

5.5 Website operation and security

We process technical information that is necessary to:

  • display and operate the website;
  • maintain network and information security;
  • prevent fraud, misuse and cyberattacks;
  • diagnose technical errors;
  • maintain records of consent and website configuration.

The legal basis is our legitimate interest in operating a secure and functional website under Article 6(1)(f) GDPR and, where applicable, compliance with legal obligations under Article 6(1)(c) GDPR.

5.6 Analytics and website improvement

With your consent, we use analytics technologies to:

  • measure website traffic;
  • understand how visitors use the website;
  • evaluate the performance of pages and content;
  • identify technical or usability problems;
  • improve our website and marketing activities.

The legal basis is your consent under Article 6(1)(a) GDPR.

5.7 Advertising, conversion measurement and remarketing

With your consent, we use Google Ads and Meta advertising technologies to:

  • measure advertising conversions;
  • understand which campaigns result in enquiries;
  • create advertising audiences;
  • limit or optimise advertising delivery;
  • show advertising that may be relevant to previous website visitors;
  • evaluate and improve advertising performance.

These activities may involve profiling based on website interactions, advertising identifiers, referral information and previously visited pages.

The legal basis is your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time through the website’s Cookie Settings.

5.8 Compliance and legal claims

We may process personal data to:

  • comply with accounting, tax, customs, export-control and other legal obligations;
  • respond to lawful requests from public authorities;
  • establish, exercise or defend legal claims;
  • protect our rights, property, employees and customers.

The legal basis is Article 6(1)(c) GDPR or our legitimate interests under Article 6(1)(f) GDPR.

6. Forms and Required Information

Providing personal data through our website is generally voluntary. However, certain information is necessary for us to respond to an enquiry, prepare a quotation, provide service support or perform a contract.

Fields marked as required must be completed. If you do not provide the required information, we may be unable to process your request.

Submitting a form does not automatically subscribe you to marketing communications. We do not use form information for unrelated electronic marketing unless we have a separate lawful basis or have obtained any consent required by law.

7. Cookies and Similar Technologies

Cookies are small files stored on your device. We may also use pixels, tags, local storage and similar technologies.

7.1 Strictly necessary technologies

Strictly necessary technologies support essential website functions, security, network management and consent-preference storage. They may be used without consent where permitted by law.

7.2 Analytics technologies

With your consent, Google Analytics and related tools may collect information about website visits, sessions, device characteristics, approximate location and interactions with website content.

7.3 Advertising technologies

With your consent, Google Ads Conversion Tracking, Google Ads remarketing and Meta Pixel may collect or receive information about your website interactions. This information may be used for conversion measurement, audience creation, advertising attribution and personalised advertising.

Meta’s terms provide that Onitex and Meta Platforms Ireland Limited may act as joint controllers for the collection and transmission of certain event data through Meta Pixel. Meta acts as an independent controller for certain subsequent processing.

7.4 HubSpot tracking

With your consent, HubSpot tracking technologies may be used to understand website activity and associate visits with CRM records where a visitor can be recognised.

7.5 Embedded videos

Our website may include videos embedded from YouTube or Vimeo. When an embedded video is loaded or played, the video provider may receive information including your IP address, device information, the page visited and your interaction with the video.

Google states that websites using Google Analytics, Google advertising services or embedded YouTube content may share the visited page URL, IP address and other information with Google.

Where required by law, embedded third-party content and non-essential tracking technologies are not activated until you provide consent.

7.6 Managing consent

You can accept, reject or customise non-essential technologies through the website’s cookie banner or Cookie Settings panel.

You may withdraw or change your consent at any time. Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.

The current list of cookies and similar technologies, including their providers, purposes and expiry periods, should be available through the Cookie Settings panel.

8. Google Services

We use services provided by Google, including:

  • Google Analytics 4;
  • Google Ads Conversion Tracking;
  • Google Ads remarketing;
  • YouTube embedded video services.

Depending on your consent and browser settings, Google may process information such as IP addresses, online identifiers, visited pages, advertising interactions, device information, approximate location and conversion events.

Google may combine information received from partner websites with information associated with a Google account, depending on the user’s account and privacy settings.

Where implemented, Google Consent Mode communicates your consent choices to Google tags. Consent Mode does not replace the cookie banner; it adjusts tag behaviour according to the consent status communicated by the website.

For users in the European Economic Area, the relevant Google entity is generally Google Ireland Limited.

9. Meta Pixel

We use Meta Pixel, provided by Meta Platforms Ireland Limited, subject to your consent.

Meta Pixel may record events such as:

  • visiting a page;
  • viewing a product;
  • clicking a button;
  • submitting a form;
  • completing another defined conversion.

Meta may use this information to provide advertising measurement, campaign reports, audience creation and advertising delivery services. Meta may also process information for its own purposes in accordance with its privacy documentation.

Onitex and Meta Platforms Ireland Limited may be joint controllers for the collection and transmission of certain personal data through Meta Pixel. Meta Platforms Ireland Limited is responsible for enabling data-subject rights concerning the personal data subsequently stored and processed by Meta.

10. HubSpot

We use HubSpot CRM and HubSpot website tracking to:

  • store and organise business contact information;
  • record enquiries and communications;
  • manage sales and service relationships;
  • understand website interactions;
  • associate form submissions and website visits with business contact records;
  • improve our sales and customer-support processes.

HubSpot Ireland Limited may process data for users located in the EEA. Data may also be accessed or processed by HubSpot, Inc. and authorised subprocessors outside the EEA.

HubSpot states that its international transfers may rely on the EU–US Data Privacy Framework, Standard Contractual Clauses and other appropriate safeguards.

11. Recipients of Personal Data

We may disclose personal data to the following categories of recipients where necessary:

  • website hosting and website-development providers;
  • cloud infrastructure and information-technology providers;
  • CRM and customer-support providers;
  • analytics, advertising and conversion-measurement providers;
  • video-hosting and embedded-content providers;
  • email, telecommunications and messaging providers;
  • distributors, agents and system integrators involved in your project;
  • freight forwarders, carriers and logistics providers;
  • installation and service partners;
  • accountants, auditors, banks, insurers and professional advisers;
  • public authorities, courts and regulators where disclosure is legally required;
  • potential purchasers or successors in connection with a lawful business reorganisation or transfer.

Service providers acting as processors may process personal data only in accordance with our instructions, applicable contractual terms and data-protection obligations.

We do not sell personal data.

12. International Data Transfers

Some service providers may process or access personal data outside the European Economic Area.

Where personal data is transferred to a country covered by a European Commission adequacy decision, we may rely on that decision.

Where no adequacy decision applies, transfers may be protected by:

  • European Commission Standard Contractual Clauses;
  • the EU–US Data Privacy Framework, where the recipient participates in it;
  • supplementary technical, contractual or organisational safeguards;
  • another lawful transfer mechanism under Chapter V GDPR.

The European Commission recognises transfers to participating United States organisations under the EU–US Data Privacy Framework as providing adequate protection.

You may contact us for further information about the safeguards applicable to a particular transfer.

13. Retention of Personal Data

We retain personal data only for as long as necessary for the relevant purpose and to comply with legal, contractual and regulatory requirements.

Unless a longer period is required or justified:

  • general enquiries that do not result in a business relationship may be retained for up to three years after the last meaningful communication;
  • quotation and project information may be retained for up to three years after the quotation expires or the project becomes inactive;
  • customer, order, invoice and payment records are retained for the duration required by applicable accounting, tax and commercial legislation;
  • contractual and warranty records may be retained for the duration of the contractual relationship and applicable limitation periods;
  • service records may be retained while the relevant machine remains in operation or supported, where necessary to provide safe and effective technical support;
  • consent records may be retained for as long as necessary to demonstrate compliance;
  • website security logs are retained only for the period reasonably necessary for security, diagnostics and incident investigation;
  • analytics, advertising and CRM tracking data are retained according to our configured provider settings, the applicable cookie duration and the purpose for which the data was collected.

When personal data is no longer required, it is deleted, anonymised or securely archived where continued retention is legally required.

14. Data Security

We use appropriate technical and organisational measures designed to protect personal data against:

  • unauthorised access;
  • accidental loss;
  • misuse;
  • alteration;
  • disclosure;
  • destruction.

These measures may include access controls, authentication, encryption where appropriate, secure backups, system monitoring, employee confidentiality obligations and contractual controls over service providers.

No transmission or storage system can be guaranteed to be completely secure. If we become aware of a personal-data breach, we will take the measures required by applicable law.

15. Your Data-Protection Rights

Subject to the conditions and limitations established by the GDPR, you have the right to:

  • request confirmation as to whether we process your personal data;
  • obtain access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • object to processing for direct-marketing purposes;
  • receive certain personal data in a structured, commonly used and machine-readable format;
  • request transmission of eligible data to another controller where technically feasible;
  • withdraw consent at any time where processing is based on consent;
  • lodge a complaint with a competent supervisory authority.

Withdrawal of consent does not affect processing lawfully performed before withdrawal.

Where you object to processing based on legitimate interests, we will stop processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms or the processing is required for legal claims.

We may request information necessary to verify your identity before responding to a request. We will normally respond within one month, subject to any extension permitted by law.

Requests may be submitted to info@onitex.com.

16. Right to Lodge a Complaint

You have the right to lodge a complaint with the supervisory authority in the EU Member State of your habitual residence, workplace or the place of the alleged infringement.

The Slovenian supervisory authority is:

Information Commissioner of the Republic of Slovenia
Dunajska cesta 22
1000 Ljubljana
Slovenia
Email: gp.ip@ip-rs.si
Telephone: +386 1 230 97 30

The Slovenian Information Commissioner supervises compliance with personal-data and cookie requirements under the relevant Slovenian legislation.

17. Automated Decision-Making and Profiling

We do not use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you.

Google and Meta advertising technologies may use website interactions and online identifiers to create audiences, measure advertising performance or personalise advertising where you have consented. This does not result in an automated decision by Onitex concerning the purchase, price, eligibility or provision of our products and services.

18. Third-Party Websites

Our website may contain links to third-party websites, social networks and external services.

Those third parties independently determine how they process personal data. We are not responsible for their websites, security practices or privacy policies. We recommend reviewing the relevant third-party privacy information before providing personal data.

19. Children’s Privacy

Our website and products are intended for businesses and professional users. They are not directed at children, and we do not knowingly collect personal data from children through the website.

If you believe that a child has provided personal data to us, please contact us so that we can review and, where appropriate, delete the information.

20. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our website, services, processing activities, service providers or applicable legislation.

The current version will be published on this page, together with the date of the latest update. Material changes may also be communicated through the website or another appropriate channel.

21. Contact

For questions about this Privacy Policy, the processing of your personal data or the exercise of your data-protection rights, contact:

Onitex Automation d.o.o.
Obrtniška ulica 7 / Via degli Artigiani 7
6000 Koper-Capodistria
Slovenia

Email: info@onitex.com
Technical support: support@onitex.com
Telephone: +386 64 152 151

We value your privacy. We use cookies to enhance your browsing experience, serve personalised content, and analyse our traffic. By clicking “Accept”, you consent to our use of cookies.