Privacy Statement

1. Data Controller and Contact

The data controller for the Slovenian Education Network portal (SIO) is:

Arnes (Academic and Research Network of Slovenia)
Tehnološki park 18, SI-1000 Ljubljana
Email: podpora@arnes.si | Website: www.arnes.si

For questions about the SIO portal: podpora@sio.si

2. Personal Data We Collect

User Account and Profile

When you sign in via the Arnes AAI system (single sign-on), we receive your basic identification data (first name, last name, email address, username, and date of birth). You may also voluntarily add a profile description and picture.

Event Registrations

When registering for training or an event, we collect: full name, email address, and the name of your organisation or institution. For certain training events, date of birth is also collected.

Newsletter (Izovice)

When subscribing to the Izovice newsletter, we collect: email address and, optionally, first name.

AI Chatbot

Conversation content is saved only with your explicit consent. Saving conversations and allowing their use for model improvement are separate settings managed in your profile (My SIO).

Comments and Published Content

When publishing a post or comment, author data shown alongside the content is stored.

Technical Data

IP addresses are logged in server log files for security purposes. Portal traffic is measured anonymously, without cookies (see section 6).

3. Purposes and Legal Bases of Processing

Providing portal services (GDPR Art. 6(1)(b) — contract): account maintenance, event registrations, issuing certificates, access to content.
Izovice newsletter (GDPR Art. 6(1)(a) — consent): sending the newsletter. Consent may be withdrawn at any time via the unsubscribe link.
Chatbot (GDPR Art. 6(1)(a) — consent): saving conversation history and optional model improvement.
Security and fraud prevention (GDPR Art. 6(1)(f) — legitimate interest): log files, protection against unauthorised access.
Anonymous traffic statistics (GDPR Art. 6(1)(f) — legitimate interest): cookieless, no identification of individuals possible.

4. Retention Periods

User account data: until account deletion.
Event registrations and certificates: 5 years after completion (accounting obligation).
Newsletter: until unsubscription.
Chatbot conversations: until consent is withdrawn or account is deleted.
Server log records (IP addresses): maximum 90 days.

5. Sharing Data with Third Parties

Your personal data is not sold. We work with the following processors to deliver portal services:

skupnost.sio.si (Moodle) — operator Arnes; upon event registration, a Moodle learning-environment account is created or updated.
Arnes Analitika (Matomo) — server gov.si/analitika; anonymous visitor statistics. Tracking runs cookieless, with no identification of individuals.
Google reCAPTCHA v2 — protection against automated form submissions; Google processes technical device/session data. See Google’s Privacy Policy.
MailPoet — newsletter delivery; subscriber email addresses are stored on our own servers (self-hosted); data is not transferred to third-party cloud services.

6. Cookies and Tracking Technologies

Necessary and Functional Cookies

Cookie	Set by	Purpose	Duration
`pll_language`	Polylang (sio.si)	Saves the chosen interface language	1 year
`wordpress_logged_in_`, `wordpress_sec_`	WordPress (sio.si)	Maintains the login session (logged-in users only)	Session / 14 days
`wp-settings-*`	WordPress (sio.si)	Admin interface preferences	1 year
`SimpleSAMLSessionID`, `SimpleSAMLAuthToken`, `PHPSESSID`	SimpleSAMLphp / Arnes AAI	Single sign-on (SSO) session	Session
`cookie_notice_accepted`	Cookie Notice (sio.si)	Stores your cookie consent choice	~30 days

Third-party Cookies (Conditional)

Cookie	Set by	Purpose	Duration
`_GRECAPTCHA`	Google (gstatic.com)	Bot protection (reCAPTCHA v2) — only set on pages with forms	~6 months
`MoodleSession`	skupnost.sio.si	Learning-environment session after SSO sign-in	Session

Analytics (Cookieless)

The SIO portal uses Matomo (Arnes Analitika, gov.si server) for anonymous visitor measurement. Matomo is configured in cookieless mode — it sets no tracking cookies and cannot identify individual visitors.

Browser Storage (Not Cookies)

sio_chatbot_{id} (sessionStorage): chatbot assistant state for the duration of the visit; saved only with your consent; cleared when the tab is closed.
sio_user_tour_seen… (localStorage): flag indicating you have viewed the onboarding tour; contains no personal data; persists until browser cache is cleared.

7. Your Rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, objection, and data portability. You also have the right to withdraw consent and to lodge a complaint with the supervisory authority (Information Commissioner of the Republic of Slovenia).

To submit a request for data export or erasure, use the form: Privacy Policy and GDPR Request.

8. Machine Translation of Content

Part of the portal content is automatically translated by artificial intelligence. SIO accepts no responsibility for the quality or accuracy of such translations. Translated content is marked accordingly. More information: AI Translation Disclaimer.