Privacy
Last updated:
In short: we collect as little as we can. The site has no database, uses no tracking cookies and sells nothing to anyone. We only get your details if you write to us through a form.
Who looks after your data
The controller is MB VIZIJA, trgovina in storitve d.o.o., Rakuševa ulica 30, 1000 Ljubljana, Slovenia (reg. no. 6973213000, VAT ID SI76186628), which runs Hotspot Bar & Bistro (Kardeljeva ploščad 17, 1000 Ljubljana). For anything privacy-related: mbvizijadoo@gmail.com or +386 70 412 222.
Enquiry forms (events & catering, coffee)
- What: name, email, optional phone, company or venue (coffee), and location, guest count, date and occasion (events), plus your message.
- Why: to reply and put together an offer. Legal basis: steps taken at your request before entering a contract (Art. 6(1)(b) GDPR).
- How: the site emails your message straight to our inbox and stores nothing itself. Sending goes through Resend, which keeps the message and its sending log for 30 days and then deletes them. The inbox is Google's (Gmail).
- How long: in the inbox, as long as the enquiry needs, and at most 2 years if nothing comes of it.
- You don't have to give us anything, but we can't reply without an email. You can always call instead.
Visiting the site
- Visit stats: Vercel Web Analytics — no cookies, and page views aren't tied to your IP address. For each view it records the page, the page you came from, country and city, browser, operating system and device type. So the same visit isn't counted twice, it computes a hash from the request and discards it after 24 hours, so it can't follow you across days or to other websites. We only see totals (e.g. how many people opened the menu), for the last 12 months. Legal basis: our legitimate interest in knowing the site works (Art. 6(1)(f)).
- Server logs: our host Vercel logs technical data on each request (IP address, browser, page, time) to keep the site running and secure, and keeps these logs for one day. Legitimate interest (Art. 6(1)(f)).
- Fonts are served from our own site, not Google's servers.
Google Maps
The map on the homepage only loads after you click "Allow Google Maps". Google then receives your IP address and may set cookies, under Google's own privacy policy. Legal basis: your consent (Art. 6(1)(a) GDPR and the Slovenian ZEKom-2). We remember your choice in your browser (localStorage, not a cookie). You can withdraw it any time via Cookie settings in the footer. Nothing reaches Google unless you click; "Open in Maps" is always there instead.
Links elsewhere
Instagram, Facebook, e-hrana, studentska-prehrana.si and Google Maps are plain links. Once you follow them, their privacy rules apply.
Who else sees data (processors)
| Who | What for | Where |
|---|---|---|
| Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA | hosting, logs, visit stats | USA (pages are also served from the EU) |
| Resend (Plus Five Five, Inc.), 2261 Market Street #5039, San Francisco, CA 94114, USA | sending form messages | USA |
Both take part in the EU–US Data Privacy Framework (DPF), and their data processing agreements also include Standard Contractual Clauses. Transfers to the US rely on these.
Our inbox is a Google (Gmail) account. Google stores the emails as our email provider, under its own terms and privacy policy.
We don't sell data or use it for advertising or automated decisions.
Your rights
You can ask to access, correct, delete, restrict or port your data, object to processing, and withdraw consent at any time. Email mbvizijadoo@gmail.com; we reply within a month. You can also complain to the Slovenian Information Commissioner (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, www.ip-rs.si.
Changes
If anything changes, we update this page and the date at the top.