Privacy Statement (EU)

Last updated on October 22, 2026.

This privacy statement applies to citizens and legal permanent residents of the European Economic Area and Switzerland. In it, we explain what we do with the data we obtain about you via our websites, https://insightful3.com, the Relayguide page https://relayguide.si and Mitja Kravos's page https://mitjakravos.com (together: “our websites”). We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:

  • we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
  • we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
  • we first request your explicit consent to process your personal data in cases requiring your consent;
  • we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
  • we respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us.

1. Purpose, data and retention period

We process personal information for the following purposes (click to expand):

1.1 Contact – by email or phone

For this purpose we use the following data:

  • A first and last name
  • An email address or phone number
  • Professional or employment-related information
  • Anything else you choose to tell us in your message or call

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We retain this data until the service is terminated.

1.2 Booking a meeting

“Book a meeting”, and “Book a conversation” on Mitja Kravos's page, open our booking calendars on Google's website (Google Calendar, part of our Google Workspace). The booking pages themselves are not part of our websites.

For this purpose we use the following data:

  • A first and last name
  • An email address
  • The time you choose and anything you add to the booking

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We retain this data until the service is terminated.

1.3 The self-check on Mitja Kravos's page

The self-check at mitjakravos.com/self-check (in Slovenian at mitjakravos.com/sl/samoocena) scores your answers in your browser; they are not sent anywhere. Only when you ask for your next moves and the full report, by entering your name and email address, are your details sent to us: you receive the report by email, and Mitja Kravos receives a copy.

For this purpose we use the following data:

  • A first and last name
  • An email address
  • Your answers to the ten questions and your result

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

Nothing is stored on the website. The report and Mitja's copy exist only as emails; Mitja deletes his copy after 24 months at the latest, or earlier at your request.

1.4 The owner self-check on insightful3.com

The owner self-check at insightful3.com/owner-check scores your answers in your browser; they are not sent anywhere. Only when you ask for your next moves and the full report, by entering your name and email address, are your details sent to us: you receive the report by email, and Insightful3 receives a copy.

For this purpose we use the following data:

  • A first and last name
  • An email address
  • Your answers to the ten statements and your result

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

Nothing is stored on the website. The report and our copy exist only as emails; we delete our copy after 24 months at the latest, or earlier at your request.

1.5 Registering for Mitja Kravos's webinar

When you register for the webinar at mitjakravos.com/webinar, your registration is sent to our web server and kept there. You receive a confirmation by email with the date, the join link and a calendar invite, and Mitja Kravos receives a notice of your registration. The webinar takes place on Google Meet, part of our Google Workspace. If Mitja would like to use the slow process you describe in the live redesign, he asks you first and keeps it anonymous.

For this purpose we use the following data:

  • A first and last name
  • An email address
  • Your company, your role and the size of the company
  • How your company uses AI today, and the slow process you describe, if you do
  • Whether you want the recording and occasional notes from Mitja
  • Where you came from, if the link you followed says so (for example LinkedIn), and when you registered
  • When you join the webinar: the name you join with and, if you switch them on, your camera and microphone

The basis on which we may process these data is:

For the registration, the emails about the webinar and preparing it: your request to take part (Article 6(1)(b) GDPR). For the recording and the occasional notes: your consent, given with the tick on the form (Article 6(1)(a) GDPR). You can withdraw it at any time by replying to one of the notes or writing to us; the notes then stop, and the rest of your registration stays as it is.

The webinar is recorded. If you switch on your camera or microphone, or write in the chat, that may be part of the recording; you can take part with both switched off. After the webinar the page may show the recording; its video player loads from the video service only when you press play.

Retention period

We delete registrations, and Mitja's notices of them, 12 months after the webinar at the latest, or earlier at your request. If you asked for the recording and notes, we keep your name and email address for them until you withdraw your consent.

1.6 Visiting our websites

To show you a page, our web server has to receive your request, which includes your IP address. The server does not keep a record of visits. Only when a request causes an error does it note that error, so that we can keep the websites working and secure.

For this purpose we use the following data:

  • Your IP address, only in the note about an error
  • The date and time of the error
  • The address that was requested

The basis on which we may process these data is:

Our legitimate interest in providing a working and secure website (Article 6(1)(f) GDPR).

Retention period

Notes about errors are deleted automatically after 14 days at the latest.

2. Cookies and statistics

Our websites use no cookies and store nothing in your browser. On all our websites we count visits with OpenPanel, on a statistics server that Primož Cigoj runs for us (analytics.primo.sh, hosted by Hetzner in Germany). From each visit it keeps the page, where the visit came from, which links to other websites were followed, the country, and the type of device and browser. It does not store your IP address: visits are counted with an identifier that changes every day and cannot be traced back to you. The basis is our legitimate interest in understanding how the website is used (Article 6(1)(f) GDPR).

Apart from the statistics, our websites load nothing from other companies: the fonts and images come from our own server. For more information, please refer to our Cookie Policy.

3. Who processes data on our behalf

We work with the following processors, under a data processing agreement:

  • Hetzner Online GmbH (Germany) hosts our websites, on servers in Germany.
  • Primož Cigoj runs our statistics server (OpenPanel) at Hetzner in Germany. Requests to it pass through the network of Cloudflare, Inc., which may process them in the United States under the EU-US Data Privacy Framework.
  • Google Ireland Limited provides our email, booking calendar and video calls (Google Workspace). When you email us, book a meeting, ask for a self-check report, or register for or join the webinar, the data is stored or processed there.

4. Disclosure practices

We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.

If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.

5. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorized access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed. Our websites are only available over an encrypted connection (HTTPS).

6. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website, such as LinkedIn. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.

7. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

8. Accessing and modifying your data

If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. You have the following rights:

  • You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
  • Right of access: You have the right to access your personal data that is known to us.
  • Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
  • If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
  • Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
  • Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.

Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.

9. Submitting a complaint

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the data protection authority. In Slovenia this is the Information Commissioner (Informacijski pooblaščenec, www.ip-rs.si).

10. Contact details

Insightful3, Mitja Kravos s.p.
Kašeljska cesta 150A, Ljubljana
Slovenia
Email: privacy@insightful3.com
Phone: +386 41 451 922