Privacy policy

The controller of your personal data is Ondea, email: office@ondea.si. For anything about your data, write to office@ondea.si.

Contact and booking form: name, email, company, website, your message and the time you choose for a call.

Instant audit: the address of the website you ask us to check and, if you leave them, your name and email. We read only the public content of that website.

AI chat agent: what you write in the chat. Please don't enter sensitive data (ID numbers, health data, passwords, other people's data).

AI agents and our API: if an AI agent books a call on someone's behalf, we receive the name, email and message it sends, plus the agent's name. The agent must have that person's consent.

Technical data: our hosting provider records standard server logs (IP address, browser, time, page) for security and to keep the site running.

Visits from AI crawlers and AI assistants: we count which bot or assistant (for example ChatGPT) a visit came from and which page it opened. This contains no IP address or personal data.

To reply to your enquiry, prepare the audit and organise the call - steps you asked for before a possible contract (Article 6(1)(b) GDPR).

To protect the site from abuse and keep it working, and to understand which pages are useful - our legitimate interest (Article 6(1)(f) GDPR).

To keep records we are required to keep by law, if we start working together (Article 6(1)(c) GDPR).

We don't sell data and don't use it for advertising.

When you send an enquiry, an AI system researches your public website, estimates which processes could be automated and gives the enquiry a priority for our team. This helps us prepare for the call. It does not produce any decision with legal or similarly significant effects for you: a person always reads the enquiry and decides.

The chat agent, the instant audit and the tools on the demo page are AI, not people. Their answers may contain mistakes; we confirm anything important in person.

The sample companies, people and figures in the demos are made up for illustration.

Vercel Inc. - hosting, server logs and storage of enquiries (the storage is in the EU, Frankfurt).

Anthropic PBC - the AI models (Claude) behind the chat, the audit and the demos. They receive only the text you enter and the public content of the website you asked us to check, and do not use it to train models.

Telegram - internal notifications to our team about new enquiries.

Resend - sending emails, once we enable it.

Some of these providers are outside the EU. Transfers take place under the European Commission's standard contractual clauses or another valid safeguard under Chapter V GDPR.

Enquiries and bookings: up to 12 months after the last contact, unless we start working together - then for the term of the contract and as long as the law requires.

Chat: the conversation is kept only in your browser for the current session and reaches us only as part of the request you send.

Server logs: for the period set by the hosting provider.

You can ask for access to your data, correction, deletion, restriction of processing and data portability, and you can object to processing based on our legitimate interest. Write to office@ondea.si; we reply within one month.

You have the right to lodge a complaint with the data protection supervisory authority in the EU country where you live, work or where the alleged breach took place.

Data is transmitted only over an encrypted connection (HTTPS). Access to enquiries is limited to our team and protected with a password.

The site and our services are for companies. We do not knowingly collect data from people under 16.

We use no advertising or analytics cookies. Details are in the cookie policy: /en/cookies.

When we change this policy, we update the date at the top. Material changes we will also announce on the site.