GDPR at SaleSqueze.

The short version#

SaleSqueze d.o.o. is a Slovenian company. We operate primarily in the EU and we treat GDPR as the baseline for everything we do, including for non-EU users.

For most inquiries, the privacy policy is the canonical document. This page is a friendlier orientation to your rights.

Your rights as a data subject#

Right to access#

You can ask what personal data we hold about you. We respond within 30 days with a structured export.

Right to rectification#

If we have something wrong (an outdated email, a misspelled name), you can ask us to fix it. We do, within 30 days.

Right to erasure#

You can ask us to delete your personal data. We do, unless we have a legal obligation to retain it (tax records for 7 years, in most cases).

Right to restrict processing#

You can ask us to stop processing your data for specific purposes while a question (accuracy, lawfulness) is being resolved.

Right to data portability#

You can ask for your data in a structured, machine-readable format. We provide JSON exports as standard.

Right to object#

You can object to processing based on legitimate interest. We stop unless we have an overriding legitimate ground.

Right to withdraw consent#

If consent is the basis for a specific processing activity (marketing email, for example), you can withdraw it at any time. We act on the withdrawal immediately.

Right to lodge a complaint#

If you’re not happy with our response, you can complain to:

• Slovenian Information Commissioner (our supervisory authority): ip-rs.si
• Your local DPA if you’re in another EU member state.

How to exercise any of these rights#

Email privacy@salesqueze.com or use the contact page with topic “Legal”. State which right you’re exercising. We acknowledge within 5 working days and respond within 30 days.

We don’t charge for these requests (except when they’re “manifestly unfounded or excessive”, which is a high bar; we’ve never invoked it).

Lawful bases we rely on#

Per Article 6:

• Consent for marketing email.
• Contract performance for customer relationships.
• Legitimate interest for security logging, fraud prevention, aggregate analytics. We have completed legitimate interest assessments for each.
• Legal obligation for tax and accounting retention.

International transfers#

When sub-processors operate outside the EEA, transfers are protected by Standard Contractual Clauses or equivalent. Specific sub-processors are listed on the security page.

For EU customer data, the platform’s processing happens in EU regions (eu-central-1 primary, eu-west-1 failover).

Children’s data#

We don’t intentionally collect personal data from children under 16. The product is not aimed at consumers under 16 (outdoor living buyers are typically adults, often homeowners). If we learn that we have collected data from a child under 16 without parental consent, we delete it.

Data Protection Officer#

Slovenia doesn’t always require a DPO for companies our size. We’ve voluntarily appointed a DPO contact: dpo@salesqueze.com (also reachable through the legal contact form).

Specific products and DPA#

The DPA is the canonical document for processing we do on behalf of customers (configurator sessions, end-buyer data on customer-facing surfaces). The privacy policy covers personal data we control directly (about visitors, customers, partners, candidates).

For the technical security posture, see the security page.