Who operates the website
ARHAR INŽENIRING Logatec, d.o.o.
Vodovodna cesta 7, 1370 Logatec, Slovenia
E-mail: info@arhar.eu
Phone: +386 31 469 109
When your consent is required
Cookies are small records that a website stores in the browser. Local storage, session storage and browser databases work similarly. The rules also apply to these technologies, not only to files named “cookie”.
We comply with Article 225 of the Electronic Communications Act (ZEKom-2). Consent is not required for storage or access that is necessary for the transmission of a message or for a function you explicitly request. For other purposes, we obtain it in advance. If personal data are processed in doing so, the General Data Protection Regulation (GDPR) and ZVOP-2.
Scrolling the page, closing the notice or continuing to browse do not imply consent. Access to descriptions, images, catalogues and contact details is not conditional on permission for analytics or advertising.
Storage for basic operation
The following server cookie is used on the ice cream website. It is intended for connection security.
YouTube videos – only with your permission
We host the preview images ourselves. Clicking the video opens an explanation and the options “Allow this video” and “Do not allow”. Before confirmation, the YouTube player is not loaded. This choice is separate from closing the privacy notice, protecting the contact form and using the AI guide.
YouTube is provided by Google Ireland Limited in Ireland. After permission is granted, it receives the IP address, technical data about the device, connection and viewing, and may use cookies and other storage for player operation and measurement. We use youtube-nocookie.com, which does not exclude data processing. Processing outside the EEA is also possible. Google Privacy Policy.
The permission applies to this viewing. You can revoke it by closing the video or via the option “Revoke permission for videos” in the privacy settings. We remove the player from the page; this does not delete data already received by Google or storage on your device. We will ask you again for the next viewing.
Guide, contact and animations
The machine selector, filters, animations and contact helper do not create cookies and do not use local storage or tab storage. Selections apply while the open page is in use. Closing the privacy notice is not saved as tracking permission.
When you transfer your selection from the guide to contact, the summary is passed in the part of the link after the # character. This part is not sent to the server when the page is requested, but it may remain in the browser history or in a shared link. After security verification and your submission, the contact form sends the enquiry directly to the ARHAR server. Depending on its settings, the browser may retain entered fields or copied text. More details are in the privacy notice.
Contact form protection — Cloudflare Turnstile
The contact form uses Cloudflare Turnstile in Managed mode to prevent automated spam submissions. When the protected form loads, the browser connects to Cloudflare. Technical data is checked, including IP address, browser and connection data, and the form domain. Our server verifies the response before sending the message.
We do not send Cloudflare the content of the enquiry, name, company or entered email address. Server-side verification forwards only the security token and service key. The protection is not an analytics or advertising tool. In this setup, the pre-clearance option is not enabled.
To prevent abuse, we also use rate limits and technical submission logs. These contain hashed markers, counters and sending status; they do not contain the enquiry text. Rate-limit windows last up to one day, and logs for preventing duplicate submissions are usually cleared after two days. Different criteria from the privacy notice apply to the retention of sent email.
The provider is Cloudflare, Inc., USA. ARHAR processes technical data on the basis of its legitimate interest in securing the form and preventing abuse (Article 6(1)(f) GDPR). You may also contact us directly by email or telephone. This legal basis is separate from the rules on device access: the exception under Article 225 of ZEKom-2 applies only to an essential security function, not to analytics or advertising.
Cloudflare acts as a processor when providing protection for ARHAR, and as an independent controller when improving bot detection under its own notice. Data may be processed outside the EEA, including in the USA. Cloudflare identifies the EU–US Data Privacy Framework for US transfers, and standard contractual clauses with additional measures where necessary for other relevant transfers or as a fallback. You may request information about, or a copy of, the relevant safeguards from us.
Cloudflare retention is separate from the ARHAR periods stated above: the provider limits it according to necessity for the stated purposes, legal obligations and dispute resolution. Its notice does not specify one uniform number of days for all Turnstile data. Its Turnstile addendum and privacy policy explain roles, transfers, retention and rights.
Microsoft Clarity analytics – only with your permission
To improve navigation, we use Microsoft Clarity, which loads only after you choose "Allow analytics". It records visited pages, time, clicks, scrolling and technical browser/device data, and uses them to create heatmaps and session replays. Microsoft also receives the IP address when connecting. Identifiers are pseudonymous; this is not a visitor directory, and we do not link the data with enquiries.
The legal basis is your prior consent under Article 6(1)(a) GDPR and Article 225 of ZEKom-2. Without it, we do not load the Clarity script, not even in cookieless measurement mode. Consent for video, newsletters or submitting a question does not apply to analytics. You can change your choice via "Privacy settings" in the footer.
We do not record contact pages, logged-in administrators or addresses with additional parameters. We also mask forms and the entire chat from capture. Clarity does not receive names or email addresses as our visitor identifiers. We send advertising consent as rejected; we do not include links to Microsoft Ads, Google Ads, Google Analytics, Meta Pixel or LinkedIn Insight Tag.
arhar_analytics_consent_v1: local storage on the site's domain, up to 180 days. It stores consent or refusal, time and notice version so that we can respect your choice. It is created only when a choice is made. After consent, Clarity uses _clck (up to 1 year, browser recognition on this site) and _clsk (up to 1 day, linking page views into a session). When consent is withdrawn, we remove them. We cannot delete third-party cookies; you can remove data from Microsoft domains in your browser settings.
Analytics and external content
We include Microsoft Clarity only after you choose "Allow analytics". Google Analytics, advertising trackers, Google reCAPTCHA and automatically loaded YouTube videos are not included. Images, previews, short dessert videos, design animations and catalogues from our collection are loaded from our website.
YouTube loads only when you select “I allow this video” in a separate window. Choosing “I do not allow” closes the window without loading the player. Permission applies to that individual viewing and is not saved for future videos. Details about external videos.
The manufacturer’s page, external catalogue or map opens only when you select its link. The destination page is governed by its operator’s rules and choices.
How to delete data in your browser
You can remove cookies and website data in your browser settings for the arhar.eu domain. If you also want to remove the links to the summary of your selection, delete the relevant entries in your browsing history. This does not delete e-mail you have already sent, or a draft in your e-mail programme.
Instructions can be found in your browser help under “Cookies” or “Website data”. Changing browser or device does not transfer your choices from one device to another. Blocking essential cookies may affect the operation of connection protection.
Temporary storage of the AI conversation
The AI guide to your use uses the current tab storage, separate from the machine selector: arhar_ice_helper_v1 keeps the conversation and window state for up to two hours from the last use, arhar_ice_inquiry_handoff_v1 and the question for your transfer to the contact for up to ten minutes. The transfer is removed when taken over. The records are intended for conversation operation, not analytics or advertising.
In privacy settings, select “Delete AI conversation”. Read more about the connection with OpenAI, limitations and deletion in the AI guide notice.
Your rights and contact
For questions about cookies and data protection, write to us at info@arhar.eu. Where we process your personal data, under the conditions of the GDPR you may request access, rectification, erasure or restriction of processing, exercise portability and objection rights, and withdraw consent. You may lodge a complaint with the Information Commissioner of the Republic of Slovenia. More information on other processing is in the personal data protection notice.
Notice updates
We update this notice when the actual purposes, providers or operation of the website change. A change to the notice does not replace consent where this is required.