Privacy & data handling

v 2026-05-31 · GDPR & ZVOP-2 compliant

1 · Who runs this site

This website (NADIR) is operated by Alexandro Priftuli S.P., a sole proprietor (samostojni podjetnik) registered in Slovenia, providing solar PV drone inspection services under CAA UAS operator number SVN-RP-5e7paass28ru. NADIR is a website / trading name; the data controller is Alexandro Priftuli S.P.

2 · What we collect and why

Contact submissions you send us (name, email, company, brief). Server-side access logs (IP, user-agent, timestamp) retained 30 days for security. Analytics via Google Analytics 4 (GA4) — pages viewed, device type, and approximate location derived from IP — collected only after you give consent. GA4 sets analytics cookies; we set none of our own. No advertising or marketing pixels.

3 · Where it lives

This site is hosted on Amazon Web Services (AWS, Amazon EC2) in the EU region eu-west-1 (Ireland), with data stored at rest in the EU. Analytics are provided by Google Analytics 4. AWS and Google (Google Ireland Ltd, with Google LLC in the US) act as processors under EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework; as US-owned providers they may in principle be subject to US lawful-access requests. No advertising pixels.

4 · How long we keep it

Enquiries: 18 months after the last interaction. Analytics data (GA4): 14 months. Server access logs: 30 days. Contracted project deliverables: 5 years (legal retention for inspection records). After that, hard-deleted with confirmation on request.

5 · Your rights

Access, correction, deletion, portability and objection rights under GDPR Art. 15–22. You may withdraw analytics/cookie consent at any time via the cookie settings, with no effect on data already collected. One email to alex@nodnod.studio, reply within 1 working day. Right to lodge a complaint with the Slovenian Information Commissioner (Informacijski pooblaščenec).

6 · Imagery captured during inspections

Drone-captured imagery is operational data, not personal data, unless individuals are incidentally recorded. Where this happens, faces and licence plates are blurred before any deliverable leaves our infrastructure. Raw archives are deleted 12 months after handover.