1.    General 
Onsite produkcija d.o.o.  respects your right of privacy and thus provides the following statement to inform you on the purposes for which your personal data is obtained and used and with your rights with regard to collected data and information on enforcement of your rights. Personal data collected through this website (or as in part of e-correspondence) shall only be used as per below statement – i.e. your personal data will not be sold, loaned or in any other way transmitted to third parties, except in cases stipulated by the law. 

2.    Data Controller 
The controller of your personal data is Onsite produkcija d.o.o., address: Vojkova cesta 58, 1000 Ljubljana, e-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.. Eventual questions regarding processing of your personal data can be reached via: This email address is being protected from spambots. You need JavaScript enabled to view it.

3.    Purpose of data processing and types of personal data 
Personal data gathered will be used solely for provided purpose and will be treated strictly confidential. In case of further requirement for processing of your data, you will be contacted upfront in order to ask you for your consent. 

Website visit: 
On entering our website the log file of the online server automatically saves the information on your visit (e.g. IP number - number which identifies an individual computer or another on-line device, browser version, time of the visit, and the like). This data is processed solely for statistics purposes and possibility of improvement of content and user experience. This data is collected through cookies, which you can read more about on our Cookie Policy. Cookies – depending on its type are installed on ground of your permission, or are collected based on our legitimate interest. Data collected in such manner is not linked to other personal data or its users. Unique identification of individual is not possible solely by use of this data.

Communication with us: 
The website enables direct communication by filling out the contact form on the website in addition to possibility of contacting us per e-mail contacts published on our website. For this purpose, the following data you provide is collected in a voluntary manner:
- e-mail address,
- first name and surname,
- address & country
- phone
- company/organisation
- position/title/rank
- data on requesting requesting a floorplan or requesting attendance to the conference.

Data collected through this website or in another form of communication with us, is collected with the sole purpose of executing our basic activity – organisation and execution of DEFCON 2022 conference, which will take place between 6. - 8. 12. 2022. Data provided will be processed in order to respond to your inquiry (either as an exhibitor or a visitor) and to inform you on the possibilities of your participation and conclusion of the contract for exhibiting/enabling your visit to the conference. Data provided by filling out the participation forms/contract will be used solely to provide contractually agreed services and administrative and managerial part on our side (record keeping, slots allocation, invoicing of the respective fees, etc.).  Data provided in the participation forms/contract can also be used for basic adjusted communication with you through e-mail in order to present you appropriate services and activities, as per your showed interest, on ground of our legitimate interest. Should you wish, not to receive emails from us anymore – you can request so free of charge, by informing us on This email address is being protected from spambots. You need JavaScript enabled to view it..    

4.    Data recipients 
Your personal data will not be transmitted to unauthorised third parties without your consent. Individual tasks regarding your data could be delegated to other persons (e.g. data processors). Processors may process such data solely on our behalf and within the limits of our authorisation (provided in a written contract or another legal act) and in accordance with here listed purposes. Within these statutory powers your personal data may be disclosed to the following data recipients:
-to accounting service providers, law firms and other legal and business consulting services providers;
-to postal service providers, dispatch service providers, providers of file and data carrier destruction services;
-to information technology service providers as part of software repair and maintenance services;
-to the website administrator;
-to cloud computing service providers and e-mail service providers (e.g. Mailchimp and others);
-to customer relations management service providers.

Your personal data shall not be provided or transmitted outside of the European union or the European Economic Area or to an international organisation which does not ensure the appropriate degree of protection. 

5.    Period of storage of personal data 
Collected data will only be stored for the minimum period necessary in order to fulfil the purpose for which individual data was gathered. After lapse of this period, data will be permanently deleted and anonymized in order to disable any identification. In case of contractual relationship, personal data is stored for the period required for implementation of the contract and for the entire statutory period of limitation applicable for contracts concluded in such manner, except in case of a dispute regarding the contractual relationship. Personal data processed based on your consent or a legitimate interest is stored on a permanent basis (for example newsletter), unless withdrawal of consent is provided by the individual. Existence of the purpose of gathered personal data processing will be reviewed in regular intervals. Processing of this personal data will cease in case the purpose has lapsed (newsletter no longer exists) or if provided so per law. Certain data processed for the purpose of performance of contracts (e.g. accounting and tax data), will be kept in accordance with storage period of up to 10 years, without further processing of this data, but solely for purpose of recordkeeping.   

6.    Your rights 
A data subject may at any time demand that to:
- confirm whether or not we process data concerning him/her and enable access to personal data (namely, to review, transcribe or copy such data),
- provide information on processing of these data (purpose of processing, categories of personal data, recipients to which the personal data was/will be disclosed, expected retention period, technical and organisational measures for data protection etc.),
- rectify incorrect personal data associated with the data subject and enable the data subject to complete incomplete personal data,
- erase personal data (e.g. the right to be forgotten),
- restriction of processing,
- object to processing, if data processing is based on our legitimate interest in which case, we will continue with processing of your personal data   only in case if we will demonstrate compelling legitimate grounds for processing which shall prevail over your interests, rights and freedoms. You may object to processing of personal data for purposes of direct marketing without stating any reasons,
- to provide the data in commonly used and machine-readable format or directly transmit them to another controller in which this shall apply only in  case of processing your personal data pursuant to your consent or to a contractual relationship and
- to enable the right to withdraw consent when personal data are processed pursuant to consent in which the withdrawal of consent shall not affect the legality of data processing which carried out until consent withdrawal.

If you suspect that legislation has been violated with the processing of your data, you shall have the right to file a complaint with the Information Commissioner of the Republic of Slovenia, at the address Dunajska cesta 22, 1000 Ljubljana, Slovenia, telephone number: 00 386 (0)1 230 97 30, e-mail address: This email address is being protected from spambots. You need JavaScript enabled to view it.. In accordance with the applicable law other information regarding your personal data, processed by us, will be provided on request, without undue delay and no later than within the statutory deadlines. 

7.    Contact 
Inquiries regarding confidentiality of your data, manner of collecting and processing of data and your requests to exercise rights regarding your data shall be answered at the e-mail address: This email address is being protected from spambots. You need JavaScript enabled to view it.

8.   Amendments 
This statement will be amended, if needed due to actual circumstances and the personal data protection legislation. Please review current version each time you provide your personal data in order to be acquainted with possible changes and amendments. In case of changes which would significantly impact the processing of your personal data, we will inform you in advance and in an appropriate manner (e.g. via e-mail/website).       

In Ljubljana, on 25 October 2021