Skip to content

teloinvadba@gmail.com · +386 70 844 543 · Stegne 33, 1000 Ljubljana

Training by arrangement

Telo in vadba Studio for one-to-one training

Privacy policy

The purpose of this privacy policy is to be clear about how Nejc Kofler s.p. processes personal data. It describes which personal data we collect, the purposes we use it for, the legal basis for the processing, and how long we keep it.

1. Controller

Name: Nejc Kofler s.p.
Registered office: Runkova ulica 10, 1000 Ljubljana
Email: teloinvadba@gmail.com
Telephone: 070 844 543

2. Purposes and legal bases for processing personal data

a. Enquiries and communication

When you contact us by email, telephone or another means, we process your personal data in order to reply to your enquiry, prepare an offer, arrange services, or otherwise communicate with you.

Types of personal data:

  • first and last name;
  • email address;
  • telephone number;
  • the content of the message or enquiry;
  • other data you choose to send us as part of the communication.

Legal basis: Article 6(1)(b) GDPR — steps taken at the request of the person before a contract is concluded.

Retention: until the communication ends, or for at most 3 months after it ends, unless the communication leads to a contract.

b. Providing personal training

To provide personal training we process the personal data of clients that we need to agree, organise and deliver the services ordered, to keep track of the sessions carried out, and to communicate with the client.

Types of personal data:

  • first and last name;
  • contact details;
  • the services or package chosen;
  • appointment times and sessions carried out;
  • training goals and progress;
  • other data needed to deliver the agreed services.

Legal basis: Article 6(1)(b) GDPR — processing necessary to perform a contract or to provide the service ordered.

Retention: for at most 5 years after the contractual relationship ends, unless longer retention is needed to establish, exercise or defend legal claims.

c. Data on health and physical condition

Where it is needed to adapt training safely and appropriately, we may also ask a client about their health or physical condition, injuries, pain, limitations or other circumstances that can affect the training.

Because such information can be health data, and therefore a special category of personal data, we process it only where there is a proper legal basis.

Types of personal data:

  • information on injuries and physical limitations;
  • information on health issues that matter for the training;
  • other information on health or physical condition that the client provides so the training can be adapted.

Legal basis: Article 9(2)(a) GDPR — the person’s explicit consent.

Retention: until consent is withdrawn, or for at most 1 month after the services end, if the data is no longer needed for the purpose for which it was collected.

A person may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before it was withdrawn.

d. Invoicing and accounting duties

We also process clients’ personal data in order to issue invoices, keep business records, and meet tax, accounting and other legal obligations.

Types of personal data:

  • first and last name;
  • address;
  • the service ordered or provided;
  • payment details;
  • other data that an invoice or the accounting records must contain.

Legal basis: Article 6(1)(c) GDPR — compliance with a legal obligation of the controller.

Retention: 10 years after the year in which the invoice was issued.

e. News about the offer

If you sign up for a newsletter or other marketing messages, we will use your contact details to send information about our services, offers, news and other content related to personal training.

Types of personal data:

  • first and last name, if you provide it;
  • email address.

Legal basis: Article 6(1)(a) GDPR — the person’s consent.

You can unsubscribe at any time through the link in a message, or by sending your request to teloinvadba@gmail.com.

Retention: until consent is withdrawn or you unsubscribe.

f. Operation and security of the website

When you visit the website, certain technical data may be processed automatically so that the site can operate securely and reliably.

Types of personal data:

  • IP address;
  • date and time of access;
  • device and browser data;
  • technical data about use of the website.

Legal basis: Article 6(1)(f) GDPR — the controller’s legitimate interest in a secure, stable and effective website.

Retention: at most 6 months from the visit, unless longer retention is needed to deal with a security incident or to pursue legal claims.

The website does not use its own analytics or marketing cookies. Some content or links lead to third-party services such as YouTube, Facebook or Instagram. Those providers may, when you use their services, use cookies or process certain data about users under their own terms and privacy policies.

3. Your rights in relation to personal data

Under the General Data Protection Regulation you have the following rights regarding the processing of your personal data:

  • you may ask whether we process your personal data, and you may request access to it;
  • you may ask for inaccurate data to be corrected or incomplete data to be completed;
  • in the cases set out in the GDPR, you may ask for your personal data to be erased;
  • where processing is based on legitimate interest, you may object to it on grounds relating to your particular situation;
  • in certain cases you may ask for processing of your personal data to be restricted;
  • where processing is based on consent or a contract and is carried out by automated means, you may, under the conditions in the GDPR, ask for your personal data to be provided to you;
  • where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, or if you have questions about how your personal data is processed, you can write to teloinvadba@gmail.com or send a letter to the controller’s address.

If you believe your personal data is not being processed in line with the applicable law, you have the right to lodge a complaint with a supervisory authority. In the Republic of Slovenia the supervisory authority is the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana.

4. Changes to this policy

We aim for this policy to reflect how we actually handle personal data and to stay in line with the applicable law. We may therefore change or supplement it from time to time.

Last updated: 9 October 2026