Privacy Policy

Last Updated: 15th January 2026

Introduction

mordavelix.top d.o.o. ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website mordavelix.top and use our fitness community platform engagement tools.

Data Controller

The data controller for the purposes of the General Data Protection Regulation (GDPR) is:

• Company: mordavelix.top d.o.o.
• Address: Slovenska cesta 41, 1058 Ljubljana, Slovenia
• Registration Number: 1478523695
• VAT Number: SI14963258
• Email: [email protected]
• Phone: +386 12998261

Data Collection

We collect data we need to provide our services and improve your experience. The personal data we collect may include:

• Contact Information: Name, email address, phone number, company name, and postal address
• Technical Information: IP address, browser type, device information, operating system, and referring URLs
• Usage Data: Information about how you use our website and services, including pages visited, time spent, and interaction patterns
• Communication Data: Records of correspondence when you contact us through our website, email, or phone
• Marketing Data: Your preferences for receiving marketing communications and your communication history with us

How We Use Your Information

We use the collected information for various purposes related to our fitness community platform services. How we use your data depends on the legal basis for processing:

Legitimate Business Interests

• Providing and maintaining our fitness community engagement tools
• Improving our platform services and developing new features
• Analysing website usage to enhance user experience
• Preventing fraud and ensuring platform security

Contractual Necessity

• Processing service requests and managing client accounts
• Delivering customer support and technical assistance
• Processing payments and managing billing
• Fulfilling our obligations under service agreements

Consent-Based Processing

• Sending marketing communications about our services
• Personalising content and advertisements
• Using analytics and advertising cookies

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• Service Providers: We may share information with trusted third-party service providers who assist in operating our website and providing services
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with any merger, acquisition, or sale of company assets
• Consent: When you have given explicit consent for specific sharing purposes

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules or certification schemes

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Our data retention periods are based on:

• Client Data: Retained for the duration of our business relationship plus 7 years for accounting and legal purposes
• Marketing Data: Retained until you withdraw consent or for 3 years from last engagement
• Website Analytics: Typically retained for 26 months in accordance with Google Analytics default settings
• Legal Obligations: Some data may be retained longer to comply with legal requirements

Your Rights

Under the GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data in a structured format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for consent-based processing at any time

To exercise any of these rights, please contact us using the details provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication procedures
• Staff training on data protection and security
• Incident response and breach notification procedures

Third-Party Services

Our website may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to third-party websites or services. We recommend reviewing the privacy policies of any third-party services you use.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we may provide additional notice through email or prominent website notices.

Contact Information

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or need to contact us regarding privacy matters, please reach out using the following contact information:

• Email: [email protected]
• Phone: +386 12998261
• Post: mordavelix.top d.o.o., Slovenska cesta 41, 1058 Ljubljana, Slovenia

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe we have processed your personal data unlawfully. In Slovenia, the relevant supervisory authority is:

• Information Commissioner of Slovenia
• Dunajska cesta 22, 1000 Ljubljana, Slovenia
• Website: www.ip-rs.si

This Privacy Policy is governed by Slovenian law and the General Data Protection Regulation (GDPR).