Privacy Policy
Last updated:
1. Data controller
The controller of personal data is Društvo električnih kolesarjev Slovenije — the Slovenian E-Cyclists Association (E-DEKS), Kotnikova ulica 5, 1000 Ljubljana, Slovenia, reg. no. 2706580000, tax no. 45564469, e-mail: info@e-deks.si.
Questions about data protection and requests to exercise your rights can be sent at any time to info@e-deks.si.
2. What data we process
User account: name, e-mail address, account type (cyclist or provider) and a securely stored password (hashed).
Provider data: organisation and location details you submit when registering as a provider or claiming a station.
Contributions: station suggestions, corrections, photos and issue reports, including contact details where you voluntarily provide them.
Technical data: basic server logs (IP address, access time) required for security and operation of the service.
3. Purposes and legal bases
We process data to provide the service (performance of contract — your account and published content), to review and moderate contributions and keep the service secure (legitimate interest), on the basis of consent where you explicitly give it, and to comply with legal obligations.
We do not sell personal data and we do not use it for advertising.
4. Device location
The map accesses your device’s location only at your explicit request (e.g. tapping the "show my location" button). The location is processed in your browser to display your position and is never stored on the platform’s servers.
5. Cookies and local storage
The platform uses only strictly necessary cookies and local storage for login and basic preferences. We use no tracking or advertising cookies, which is why no cookie banner is shown.
6. Processors and data transfers
We rely on carefully selected processors: a hosting provider, a map service provider (Mapbox — your IP address is transmitted to its servers when map tiles load) and an e-mail delivery provider (confirmation and notification messages).
We do not share personal data with third parties for their own purposes.
7. Data retention
Account data is kept for as long as the account exists. When an account is deleted, personal data is erased, while published map contributions (e.g. station data) may remain in anonymised form. Server logs are kept for a limited period necessary for security.
8. Your rights
Under the General Data Protection Regulation (GDPR) you have the right of access, rectification, erasure, restriction of processing, data portability and objection. Send requests to info@e-deks.si; we will respond within one month at the latest.
If you believe processing violates the law, you may lodge a complaint with the Information Commissioner of the Republic of Slovenia (www.ip-rs.si).
9. Changes to this policy
We may update this privacy policy from time to time. The current version is always published on this page with the date of the last change.