Skip to content

Privacy Policy

Last updated: October 2026

This policy explains how we handle your personal data when you use this website. It is written in line with the EU General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).

1. Data controller

ONEDRONE, sodobne tehnologije, d.o.o., Stegne 21C, 1000 Ljubljana, Slovenia. Registration number: 6227902000. VAT number: SI88522253. Email: info@onedrone.si. ("OneDrone", "we", "us").

We have not appointed a data protection officer, as we are not required to. For any privacy question, write to info@onedrone.si.

2. What data we collect

Bulk order form. Number of units, who you are buying as, ship-to country, timeline, full name, email address, phone number (optional), company or institution name, your message (optional) and your privacy consent.

Parts compatibility check. Name, email address, what you are building, firmware (ArduPilot or PX4), your parts list and your privacy consent.

Inquiry form. Name, email address, privacy consent and, if you continue, who you are buying as, number of units, ship-to country, timeline, company name, vehicle type, carrier board, the flight controller you are replacing, firmware and parts list.

Technical data sent with each form. The page address, browser type, campaign parameters (utm_source, utm_medium, utm_campaign, utm_content), ad click identifiers (fbclid, gclid) and a one-way hashed IP address used only to stop spam and abuse.

Emails. If you email us, we receive your email address and whatever you write.

Cookies. With your consent, cookies and similar technologies measure visits and advertising results. See our Cookie Policy.

Please do not send us sensitive data (for example health data). We do not need it and do not knowingly collect it.

3. Why we use it and on what legal basis

  • To answer your request, check your parts and prepare an offer - steps taken at your request before a contract (Art. 6(1)(b) GDPR).
  • To send you one reminder if you started an inquiry and did not finish it - our legitimate interest in answering requests you started (Art. 6(1)(f) GDPR). You can object at any time.
  • To protect our forms from spam, fraud and abuse - legitimate interest (Art. 6(1)(f) GDPR).
  • To measure and improve our advertising - only with your consent (Art. 6(1)(a) GDPR).
  • To keep business and tax records if you become a customer - legal obligation (Art. 6(1)(c) GDPR).
  • To establish, exercise or defend legal claims - legitimate interest (Art. 6(1)(f) GDPR).

We do not sell your data. We do not use it for automated decisions that have legal or similarly significant effects on you.

4. Advertising measurement

Only if you accept marketing cookies, and when you send a form, a hashed (SHA-256) version of your email, name and country is shared with Meta and Google so they can match the conversion to an ad. Hashing turns the data into a code that cannot be read directly. Without your consent, no such data is shared.

5. Who receives your data

We share data only with service providers that work for us under a data processing agreement and only as far as needed:

  • Apollo Digital - our marketing agency, which runs this website for us.
  • Supabase - secure database hosting for form submissions.
  • Resend - delivery of notification and reminder emails.
  • Meta Platforms Ireland Ltd. and Google Ireland Ltd. - advertising measurement, only with your consent.
  • Website hosting and content delivery providers that serve this site.

We may also share data with authorities or courts where the law requires it.

6. Transfers outside the EU

Some providers, or their sub-processors, may process data in the United States or other countries outside the European Economic Area. In those cases we rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses, together with additional safeguards where needed. You can ask us for a copy of these safeguards.

7. How long we keep it

  • Requests that do not lead to an order - up to 2 years after our last contact, then deleted.
  • Requests that lead to an order - as long as the business relationship lasts, plus the periods required by tax and accounting law.
  • Hashed IP addresses for spam protection - only as long as needed for that purpose.
  • Cookie consent - 12 months, after which we ask again.

8. How we protect it

We use encrypted connections (HTTPS), access controls so that only authorised people can see submissions, spam protection on every form, and providers that apply recognised security standards. No system is completely secure, but we take reasonable technical and organisational measures to protect your data.

9. Your rights

Under GDPR you have the right to:

  • access the data we hold about you and get a copy;
  • have incorrect data corrected;
  • have your data deleted;
  • restrict how we use your data;
  • object to processing based on our legitimate interest;
  • receive your data in a common, machine-readable format (data portability);
  • withdraw your consent at any time, without affecting processing done before. For cookies, use "Cookie settings" in the footer.

To use any of these rights, email info@onedrone.si. We reply within one month. We may ask you to confirm your identity first.

You can also complain to the Slovenian supervisory authority: Informacijski pooblaščenec, Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si, or to the authority in your EU country of residence.

10. Is providing data required?

No. Sending a form is voluntary. Without your name and email address we cannot answer your request.

11. Children

This website is not aimed at children under 16. We do not knowingly collect their data. If you think a child has sent us data, contact us and we will delete it.

12. Links to other websites

This website links to other websites, such as the OneDrone online store, CubePilot, ArduPilot and PX4. Their own privacy policies apply there. Purchases in the OneDrone store are covered by the store's privacy policy.

13. Changes to this policy

We may update this policy when our services or the law change. The current version is always on this page, with its "Last updated" date.

14. Contact

For any question about your data, email info@onedrone.si or write to ONEDRONE, sodobne tehnologije, d.o.o., Stegne 21C, 1000 Ljubljana, Slovenia.