Updated: 3. 11. 2026

Privacy notice

This notice covers ogledar.si, /ar/ catalogs and embedded viewers, and the business workspace at ct.ogledar.si. The provider identified below controls technical operation and its business relationships. For a product inquiry, the seller named on the product page controls the use of the inquiry to respond; OgledAR provides technical processing and access for that seller.

Data, purposes and legal bases

• Visits and security: IP address, time, requested path, browser information and technical errors to deliver the site, troubleshoot and prevent abuse. The basis is a legitimate interest in secure, reliable operation (GDPR Article 6(1)(f)). IP addresses also support short-lived request rate limits.
• Accounts and customers: email, password hash, role, company membership, login sessions and change audit records to provide the service and manage access. The bases are performance of a contract or pre-contractual steps (6(1)(b)) and legitimate interests in administering business users and protecting accounts (6(1)(f)). Passwords are not stored in plain text.
• Product inquiries: name, email or telephone, message, language and selected product. These are made available to the company offering the product to answer or prepare a quotation (6(1)(b), and 6(1)(f) for business representation). Name and contact are required so the seller can respond; the message is optional. Sending an inquiry does not subscribe you to advertising.
• Published materials: products, photographs, 3D models, videos, translations and metadata uploaded by customers to provide the contracted service. Customers decide what to publish and must have the necessary rights and provide appropriate information to people appearing in their materials.
• Business correspondence and records: contact details, communications and invoice information to respond, perform a contract and meet legal obligations (6(1)(b), (c), and (f) for business contacts).

Statistics without visitor identification

The catalog counts events such as product views, 3D/AR starts and inquiry submissions by product, day and event type. These counters contain no IP address, visitor identifier or individual profile and are not used to identify people. The web server still receives technical information when a request is delivered. Event reporting is disabled for the demonstration iframe on the main landing page.

Recipients and processors

Authorized provider personnel can access data, as can the appropriate seller's authorized users for its inquiries and company data. The application and database are hosted on Oracle Cloud Infrastructure in Frankfurt, Germany. Contracted hosting and business communication providers may also process data, and competent authorities may receive it where required by law. We do not sell personal data.

The public application does not automatically send personal data to generative AI providers. Email, telephone and WhatsApp links are optional; a service you open also applies its own privacy rules. Contact us for information about specific contracted recipients, their locations and any safeguards for transfers outside the EEA. Hosting in the EU does not itself guarantee that every processing operation by external communication services is restricted to the EU.

Retention periods and criteria

The login cookie lasts at most 12 hours unless you sign out earlier. Account data is kept while access is needed for the subscription relationship; data no longer needed after it ends is deleted or anonymized. Business, accounting and evidential records are retained to the extent and for the periods required by applicable law or necessary to establish or defend legal claims.

Inquiries are kept while the seller needs them to answer, prepare a quotation, manage a resulting contract or handle claims. Ask the seller about its specific period; you may also send a deletion request to us. Application web access logs rotate at a size limit of five files of 10 MB per service; this is a storage limit, not a guaranteed number of days. Security notices and incident information are retained while needed to investigate an incident or handle claims. Backups can temporarily contain older data; completed deletion requests must be reapplied after a restoration. Subscription agreements also govern retention of customer materials.

Your rights

Depending on the legal basis and GDPR conditions, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. Where consent is the basis, you can withdraw it for future processing. Contact us below; we may verify your identity to protect your data. We respond within the GDPR period, normally one month. You may complain to the Slovenian Information Commissioner, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si.

We do not use personal data for automated decisions producing legal or similarly significant effects. Models and AI content are not personalized professional advice.