Privacy Policy | Old School Cars d.o.o.

PRIVACY POLICY

Old School Cars d.o.o.

Last updated: 13 November 2026

1. Data Controller

The data controller responsible for the processing of personal data under the General Data Protection Regulation (GDPR) is:

Old School Cars d.o.o.
Rakuševa ulica 8
1000 Ljubljana
Slovenia

Company Registration Number: 7472358000
Tax Identification Number: 14310589
General Contact Email: office@bavarianoldschool.com

Data Protection Officer (DPO):
Mitja Radakovič
Email: garage@bavarianoldschool.com

Old School Cars d.o.o. is responsible for processing personal data in connection with enquiries about its automotive services, vehicle maintenance, underbody protection, corrosion protection, inspections and related services.

2. Personal Data We Collect

Depending on the nature of your enquiry or service, we may collect and process the following personal data:

  • Full name

  • Telephone number

  • Email address

  • Vehicle information, such as make, model and year

  • Vehicle registration number, where relevant to the requested service

  • Details of the service requested

  • Information you voluntarily provide when contacting us

  • Communication records relating to your enquiry or service

We only collect personal data that is relevant and necessary for the purposes described in this Privacy Policy.

3. How We Collect Your Personal Data

We may collect personal data directly from you through:

  • Facebook and Instagram Lead Ads and instant forms

  • Our website contact forms

  • Email correspondence

  • Telephone calls and messages

  • In-person visits to our premises

  • Other direct communication with our company

When you submit a Facebook or Instagram lead form, the information you provide may be made available to us through the relevant Meta platform.

4. Purposes and Legal Bases for Processing

We process personal data only where a valid legal basis under Article 6 of the GDPR applies.

A. Responding to enquiries and preparing offers

We use your contact details and information about your vehicle to respond to your enquiry, provide information, prepare quotations and arrange appointments.

Legal basis: Article 6(1)(b) GDPR – taking steps at the request of the data subject prior to entering into a contract.

B. Providing services and managing customer relationships

Where you become our customer, we process relevant personal data to provide the agreed services, communicate with you and manage the customer relationship.

Legal basis: Article 6(1)(b) GDPR – performance of a contract.

C. Accounting and legal obligations

We may process relevant personal data for invoicing, accounting, tax reporting and compliance with other applicable legal requirements.

Legal basis: Article 6(1)(c) GDPR – compliance with a legal obligation.

D. Business administration and legal claims

Where necessary, we may process limited personal data to protect our business, maintain records of communications, prevent misuse of our services and establish, exercise or defend legal claims.

Legal basis: Article 6(1)(f) GDPR – legitimate interests pursued by the company, provided that these interests are not overridden by the rights and freedoms of the individual.

We do not use personal data submitted through an enquiry form for unrelated promotional or marketing communications.

5. Facebook and Instagram Lead Forms

If you contact us through a Facebook or Instagram Lead Ad, the information you submit through the form is processed so that we can:

  • Respond to your enquiry

  • Contact you about the requested service

  • Provide information and prepare a quotation

  • Arrange an inspection or service appointment

Meta Platforms may also process personal data in accordance with its own privacy policies and terms.

For information about how Meta processes personal data, please refer to Meta's Privacy Policy:

https://www.facebook.com/privacy/policy/

6. Sharing of Personal Data

We do not sell your personal data.

Where necessary for the purposes described in this Privacy Policy, personal data may be shared with the following categories of recipients:

  • IT, website hosting and communication service providers

  • Platforms used to receive and manage customer enquiries, including Meta

  • Accounting and administrative service providers

  • Professional advisers, where necessary

  • Public authorities, courts or other institutions where disclosure is required by law

We only share information that is necessary for the relevant purpose.

Where a service provider processes personal data on our behalf, we take appropriate steps to ensure that the processing is governed by the required data protection arrangements.

7. International Data Transfers

Some service providers and online platforms, including Meta, may process or store personal data outside the European Economic Area (EEA).

Where personal data are transferred outside the EEA, we rely on an applicable transfer mechanism under the GDPR, such as an adequacy decision of the European Commission or appropriate safeguards under Articles 46 and 47 GDPR.

Further information about the relevant safeguards may be requested by contacting our Data Protection Officer.

8. Data Retention

We retain personal data only for as long as necessary for the purposes for which they were collected, unless a longer retention period is required or permitted by law.

  • Enquiries that do not result in a service: Personal data are retained for up to 12 months after the last communication.

  • Customer and service records: Personal data are retained for the period necessary to manage the customer relationship and comply with applicable legal obligations.

  • Accounting and tax records: Relevant records are retained for the periods required under applicable Slovenian accounting and tax legislation.

When personal data are no longer required, they are securely deleted or anonymised, where appropriate.

9. Your Data Protection Rights

Under the GDPR, you may have the following rights, subject to the conditions and limitations set out in applicable law:

  • Right of access: To obtain confirmation as to whether we process your personal data and request a copy.

  • Right to rectification: To request correction of inaccurate or incomplete personal data.

  • Right to erasure: To request deletion of your personal data where the legal conditions are met.

  • Right to restriction: To request restriction of processing in certain circumstances.

  • Right to data portability: To receive certain personal data in a structured, commonly used and machine-readable format, where applicable.

  • Right to object: To object to processing based on our legitimate interests, where applicable.

  • Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights or submit a privacy-related question, please contact our Data Protection Officer:

Mitja Radakovič
Email: garage@bavarianoldschool.com

We may need to verify your identity before responding to a request.

You also have the right to lodge a complaint with the competent supervisory authority.

10. Supervisory Authority in Slovenia

The competent data protection supervisory authority in Slovenia is:

Information Commissioner of the Republic of Slovenia
Dunajska cesta 22
1000 Ljubljana
Slovenia

Website: https://www.ip-rs.si/en/

Email: gp.ip@ip-rs.si

You have the right to lodge a complaint with the Information Commissioner if you believe that the processing of your personal data infringes applicable data protection legislation.

11. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

Access to personal data is limited to persons who need the information for legitimate business purposes.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

12. Automated Decision-Making

We do not use personal data collected through our service enquiry forms to make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business operations, data processing practices or applicable legal requirements.

The latest version will always be published on our website together with the date of the most recent update.

14. Contact

For general enquiries:

Old School Cars d.o.o.
Rakuševa ulica 8
1000 Ljubljana
Slovenia

Email: office@bavarianoldschool.com

For data protection matters:

Data Protection Officer: Mitja Radakovič
Email: garage@bavarianoldschool.com