Privacy notice

Effective from 1 October 2026.

Data controller

The controller of your personal data is Just Grind d.o.o., Pod brezami 5, 1218 Komenda, Slovenia.

For any privacy question, write to us or call:

• Show e-mail
• Show phone
• Contact form

Inquiry form

When you send an inquiry, we process the details you enter: your name, company, e-mail address, phone number (optional), details about your floor, machine, pad, size and area, and your message. We also record the language of the page you sent the form from.

We use the data to answer your inquiry, prepare an offer and arrange any order with you. We also send an automatic confirmation of receipt to your address.

Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) of the General Data Protection Regulation, GDPR) and your consent, given by ticking the box on the form (Article 6(1)(a)). You can withdraw your consent at any time.

Retention: we keep the data for as long as needed to answer your inquiry and for any business relationship that follows from it. If none follows, we delete it once we no longer need it, unless the law (for example accounting and tax rules) requires us to keep it longer.

Recipients: the message is sent by e-mail through the SMTP server of Hostinger, which also hosts the website. Hostinger processes the data as our processor. We do not sell your data or pass it on to third parties for marketing.

To prevent abuse we limit the number of submissions from the same IP address in a short time; for this the IP address is held only in the server’s memory and is not stored.

Spam protection (Cloudflare Turnstile)

The form is protected by Turnstile, a service of Cloudflare, Inc. (USA). When you start filling in the form, Turnstile loads and uses information about your browser and device and your IP address to tell whether a person or a program is filling in the form. The legal basis is our legitimate interest in protecting the form from abuse (Article 6(1)(f) GDPR). Cloudflare participates in the EU-US Data Privacy Framework. More: Turnstile privacy policy.

Cookieless visitor statistics (Umami)

When visitor statistics are switched on, we use Umami, an open-source tool that runs on our own server (analytics.lomby.net), so the data does not go to third-party providers. Umami uses no cookies and does not store your IP address; it records only aggregate data such as the pages visited, the referring page, browser and device type, and country. We cannot identify you from this data. The legal basis is our legitimate interest in improving the website (Article 6(1)(f) GDPR).

Google Analytics (only with your consent)

Only if you allow it in the cookie banner do we also use Google Analytics 4 by Google Ireland Ltd., which uses analytics cookies to measure visits and use of the site in aggregate, such as the pages visited, button clicks and sent inquiries (without the form contents). Before you choose, Google Analytics is not loaded at all. The legal basis is your consent (Article 6(1)(a) GDPR). Google signals for advertising and ad personalisation are switched off, and Google Analytics 4 does not store IP addresses. Google may transfer data to the USA, where it participates in the EU-US Data Privacy Framework.

Your pad pick (sessionStorage)

If you pick a pad in the pad finder or on a product page, the website keeps your pick in your browser’s session storage (sessionStorage) so it can carry it over to the inquiry form. The pick stays in your browser and is deleted when you close the tab; you can also clear it yourself. When you click an inquiry button, the pick (floor type, goal, machine, pad and size) is added to the address of the form page.

Cookies and browser storage

We store essential data without consent, because without it the site cannot work as you requested. We set analytics cookies only once you allow them. You can change or withdraw your consent at any time with the “Cookie settings” button in the footer. When you withdraw it, we delete the analytics cookies.

Server logs

With every visit the server automatically records technical data: IP address, time, requested page, response code, referring page and browser type. We need these to run and secure the website and to detect errors and abuse (legitimate interest, Article 6(1)(f) GDPR). We keep logs only for a short time and then delete them automatically, unless we need them to deal with a security incident.

Your rights

Under the GDPR you have the right:

• to access your personal data and get a copy,
• to have inaccurate data corrected,
• to have your data erased (the “right to be forgotten”),
• to restrict processing,
• to data portability,
• to object to processing based on legitimate interest,
• to withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

To exercise your rights, write to us at the address or e-mail above. We reply without undue delay and within one month at the latest.

If you believe we process your data unlawfully, you can lodge a complaint with the supervisory authority. Our lead authority is the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si. You can also complain to the supervisory authority in the country where you live.

Changes

We may update this notice when we change the website or the services we use. The current version is always published on this page.