AK - Alliance Knot d.o.o.
AK - ALLIANCE KNOT, dejavnosti v vodnem prometu, d.o.o.
Pristaniška ulica 2, 6000 Koper, Slovenija
- VAT ID
- SI18758878
- Registration number
- 3954749000
- Registry authority
- Okrožno sodišče Koper
Controller and contact
The company identified below is the data controller. For privacy enquiries or to exercise your rights, write to the contact email with the subject “Personal data” or to the company’s postal address.
Enquiries and advice
We process your name, email, message and selected products, plus your phone number and company if provided. We use them to respond, advise and prepare a quotation. The basis is taking steps at your request before entering into a contract (GDPR Article 6(1)(b)). Required fields are needed to handle your enquiry; other details are optional. Acknowledging the notice is not consent to marketing.
When you contact info@carpex.si, we process your email address, name, message, attachments and technical delivery details. The mailbox runs on Mailcow hosted at Netcup; authorised company staff access it through the private Inbox application. Messages are used to handle your enquiry, quotation, order or request, without automatically enrolling you in marketing. The legal basis is GDPR Article 6(1)(b) for pre-contractual and contractual requests, or Article 6(1)(f) for ordinary business communication. Article 6(1)(c) applies to legally required procedures. Retention periods are set out below.
Orders and invoices
When you purchase, we process contact and delivery details, ordered products, payment status, and company and tax details where needed. The legal bases are performance of a contract (GDPR Article 6(1)(b)) and accounting and tax obligations (Article 6(1)(c)). We do not collect payment card details; payment is by bank transfer. We email an order confirmation and pro forma invoice and, for an agreed monthly rental, documents for individual periods. We retain sending status and technical message identifiers to investigate delivery and resolve errors. The recipient’s email provider receives the content and attachments needed for delivery.
Website security
To protect forms from abuse, we use time-limited request records and a hashed identifier of the request source. Administrator logins and changes to orders and products are logged for security and traceability. The basis is our legitimate interest in secure operation (GDPR Article 6(1)(f)). We do not profile you or make solely automated decisions with legal effects.
Recipients and processors
Authorised staff and contracted service providers access data only as needed to deliver the service. Hosting is provided by netcup GmbH; network delivery and website protection are provided by Cloudflare, Inc. Web requests pass through Cloudflare, including IP addresses, browser technical data and submitted form content. When the accounting integration is enabled, order and invoice data are sent to MetaKocka. We do not sell data or use it for advertising profiles.
Data transfers
This website does not send forms to advertising or translation networks. Fonts, photos and videos are served under our domains through Cloudflare. Cloudflare uses a global network, so processing may also take place outside the EEA, including in the United States. Cloudflare’s Data Processing Addendum (DPA) provides for appropriate standard contractual clauses and additional safeguards for restricted transfers. The DPA is linked below; you can request information about the safeguards used, or a copy of them, at info@carpex.si.
Retention periods
Enquiries that do not lead to a contract are kept for up to 12 months from receipt, unless longer retention is needed for an open dispute or at your request. The same period applies to related email correspondence, reviewed by authorised staff. Contractual records are kept for the relationship and applicable limitation periods; invoices are generally retained for 10 years after the end of the relevant year. Expired login sessions and temporary request limits are cleared regularly. CARPEX application backups rotate within 30 days; after restoration, expired data is deleted again.
Your rights
Under the GDPR you may request access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests. Rights are not absolute; legally required invoices cannot be deleted early. If processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.
Response and complaint
We normally respond within one month. Complex requests may take up to two additional months, with notice given in the first month. We verify identity only as necessary. You may complain to the Slovenian Information Commissioner (www.ip-rs.si) or the competent supervisory authority in your country of habitual residence.
Local storage
Details of essential cookies, the bag and other browser data are on the Cookies and local storage page. We currently use no analytics, advertising trackers or newsletter sign-up.
The websites carpex.si, sinyal.carpex.si and shoop.carpex.si are operated by AK - Alliance Knot d.o.o. CARPEX and Sinyal are presentation catalogues with enquiries; the cart and ordering are on shoop.carpex.si. The same controller handles the data. The cart is stored only in the shop’s browser storage.
Slovenian Information Commissioner · AZOP · Cloudflare DPA
Contact us for further information. Let’s talk