Privacy policy

This policy explains how Cana water d.o.o. collects, uses and protects personal data submitted through canawater.eu. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Slovenian law.

Controller

Cana water d.o.o., Serdica 82, 9262 Rogašovci, Slovenia. VAT SI39911756. Contact: info@canawater.eu · +386 31 401 999.

What we collect

When you submit an inquiry through the contact form, by email or by phone, we collect:

• your name and the company you represent;
• your business email address and phone number;
• the content of your message and any information you choose to share about your venue, event or project;
• technical metadata related to the submission (e.g. timestamp, IP address) for security and abuse-prevention purposes.

With your consent we also collect anonymous analytics data and advertising-measurement data through cookies and similar technologies (see the cookie policy).

Why we use your data

• To reply to your inquiry, prepare a proposal and discuss a possible business relationship.
• To negotiate, conclude and perform a contract for our private-label water service or other B2B services.
• To send you transactional emails related to your inquiry or order.
• To comply with our legal and accounting obligations (e.g. retaining invoices).
• With your consent, to measure the performance of our site and the effectiveness of our marketing.

Legal bases

We process personal data on the following GDPR legal bases:

• Performance of a contract or pre-contractual steps (Art. 6(1)(b)) - to reply to your inquiry and prepare a proposal.
• Legitimate interest (Art. 6(1)(f)) - to keep the site secure, prevent abuse of the form, and respond to direct business inquiries from companies.
• Consent (Art. 6(1)(a)) - for analytics and marketing cookies, including Meta Pixel and Google Analytics. You can withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)) - for tax, accounting and record-keeping requirements.

Analytics and advertising

With your consent we use Meta Pixel (Meta Platforms Ireland Ltd.) and Google Analytics together with Google Ads conversion tracking (Google Ireland Ltd.) to measure how people find and use the site and to evaluate the performance of our advertising campaigns. These tools may set cookies and process limited personal data such as a pseudonymous identifier, IP address, device and browser information, and pages viewed. Hashed contact details may also be transmitted to improve measurement (“advanced matching” / “enhanced conversions”).

These providers may transfer data outside the EU/EEA. Where this occurs we rely on the EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. You can refuse or withdraw consent at any time via the cookie banner.

Sharing

We never sell your personal data. We share it only with processors that help us operate the site and our business, each bound by a data-processing agreement. Typical processors include:

• hosting and infrastructure providers for the site;
• email delivery providers used to send replies and notifications;
• analytics and advertising-measurement providers (Meta, Google) - only with your consent;
• accounting and tax advisors, where required.

We may also disclose data when required by law or to protect our legal rights.

How long we keep it

Inquiry data is retained for as long as needed to respond and to pursue a potential business relationship, and for up to 5 years after the last meaningful contact for legitimate-interest purposes (responding to follow-up questions, defending legal claims). Invoices and other accounting documents are retained for 10 years in line with Slovenian tax law. Analytics and advertising data is retained for the period set by the relevant provider, typically up to 14 months. After the applicable period we delete or anonymise the data.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw any consent you have given. You can exercise these rights by contacting info@canawater.eu. We will reply without undue delay and at the latest within one month.

You also have the right to lodge a complaint with the Slovenian Information Commissioner (Informacijski pooblaščenec) if you believe that our processing of your personal data infringes the GDPR.

Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction.

Changes

We may update this policy from time to time. The version published on this page is the version in force.

Final legal text to be reviewed by client counsel before launch.