Privacy Policy

Welcome to the NOA website (hereinafter: "website"). At NOA Higher Education Institution, we highly value your privacy and are fully aware of our responsibility in handling your personal data. All personal data provided to us is processed carefully, securely, and in full compliance with the General Data Protection Regulation (GDPR), the Slovenian Personal Data Protection Act (ZVOP-2), and other applicable legislation.

This Privacy Policy informs you about the methods of collection, processing, storage, and protection of your personal data, as well as your rights regarding it.

1. Data Controller

The controller of personal data on this website is:

NOA Higher Education Institution
Gorazdova ulica 20, 1000 Ljubljana, Slovenia
General email: hello@mynoa.com

Data Protection Officer (DPO)
For any questions, requests, or the exercise of your rights regarding personal data protection, you can contact our Data Protection Officer directly:

Email: hello@mynoa.com

We will respond to your privacy inquiries without undue delay.

2. What Personal Data We Collect and Why

We collect your personal data only when you provide it to us voluntarily, or when it is collected automatically upon using our website.

A. Data You Provide Voluntarily

Contact Forms (General Inquiries and Enrolment): When you fill out a contact form on the website, we collect data such as your first name, surname, email address, telephone number, and the content of your message. We process this data solely to respond to your inquiry or to provide you with requested information regarding study programmes.
Registration for Open Days: When registering for online or physical Open Days, we collect your first name, surname, email address, and chosen study programme of interest. We require this data to organise the event and send links to the online broadcast.
Booking Individual Consultation Sessions (1-on-1): When you book an appointment for an individual consultation through our calendar, we collect your name, email address, chosen time slot, and any questions you may have. This data is processed for the purpose of carrying out and confirming personal advisory sessions.
Legal basis: Your explicit consent (Article 6(1)(a) of the GDPR) or taking steps at your request prior to entering into a study contract (Article 6(1)(b) of the GDPR).

B. Data Collected Automatically (Technical Data and Cookies)
When you visit our website, certain technical data is recorded automatically via the Wix platform and analytical tools:

IP address (in anonymised form)
Date and time of access
Type and version of web browser
Operating system used
Browsing history on our website (pages viewed, session duration)

Legal basis: Our legitimate interest in ensuring the secure and smooth operation of the website and improving user experience (Article 6(1)(f) of the GDPR). For analytical and marketing purposes, we process this data solely based on your consent to the use of optional cookies.

3. Cookies

Our website uses cookies to ensure optimal functionality, analyse traffic, and tailor content.

Strictly Necessary (Technical) Cookies: These cookies are essential for the proper functioning of the website, security, and enabling basic functions (e.g., page navigation, session maintenance). As they are necessary, they are loaded automatically, and your consent is not required.
Analytical Cookies (e.g. Google Analytics): These help us understand how visitors use the website, allowing us to improve navigation and content. They are loaded only if you agree to them via the cookie banner.
Functional and Marketing Cookies: These enable advanced functionalities (e.g. displaying video content) or tailoring advertisements on other platforms (e.g. social media networks). These are also loaded exclusively with your consent.

You can change or revoke your cookie settings at any time by clicking on the "Cookie Settings" link at the bottom of our website or through your web browser settings.

A more detailed list of all cookies used, their purposes, and retention periods is available in our separate Cookie Policy.

4. How Long We Retain Your Data

We retain your personal data only for as long as necessary to achieve the purpose for which it was collected:

Data from contact forms and inquiries is retained until the end of communication or for a maximum of 1 year after the last contact, unless study enrolment occurs (in which case data is processed in accordance with regulations on keeping student records).
Data for Open Days registrations and 1-on-1 consultations is retained until the completion of the event or for a maximum of 6 months after the event, for the purpose of sending feedback requests.
Analytical data and data collected via cookies is retained in accordance with the periods specified for each individual cookie (typically from a few days up to a maximum of 2 years).

After the retention period expires, your data is securely and permanently deleted or anonymised.

5. Who Has Access to Your Data?

We do not sell, rent, or disclose your personal data to unauthorised third parties. Access to your data is strictly limited to:

Authorized employees at NOA Higher Education Institution for communication and service delivery needs.
Trusted contractual processors who perform technical services for us (e.g., website hosting provider Wix Studio, external website maintainers, analytics tool providers), who are legally bound to strict data protection in accordance with the GDPR.

Certain service providers (such as Wix or Google) may process data in countries outside the European Economic Area (EEA). In such cases, transfers take place exclusively under appropriate safeguards (e.g. the use of Standard Contractual Clauses approved by the European Commission).

6. Security of Your Data

At NOA Higher Education Institution, we implement appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, or alteration. Our website uses a secure connection with SSL (Secure Sockets Layer) encryption, ensuring safe data transfer between your browser and our server. Access to personal data is restricted solely to authorised personnel bound by confidentiality.

7. Your Rights Under the GDPR

In accordance with applicable legislation, you have the following rights regarding your personal data:

Right of access: You may request confirmation as to whether your personal data is being processed, and obtain a copy of this data.
Right to rectification: You may request the immediate correction of inaccurate or incomplete personal data.
Right to erasure ("right to be forgotten"): Under certain conditions, you may request that we permanently delete your data from our databases.
Right to restriction of processing: You may request that we temporarily restrict the processing of your data (e.g. while verifying data accuracy).
Right to data portability: You may receive your personal data in a structured, commonly used, and machine-readable format, and transfer it to another controller.
Right to object: You may object at any time to the processing of your data based on our legitimate interests or used for direct marketing purposes.
Right to withdraw consent: Where processing is based on your consent, you may withdraw this consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please send a written request to our email address: hello@mynoa.com. We will respond to your request without delay, and at the latest within 30 days of receipt.

8. Protection of Minors' Privacy

If you are a minor, please provide personal data only with the consent of your parents or legal guardians. We do not knowingly collect personal data from minors without appropriate consent, and upon discovering any such data, we will delete it immediately.

9. Changes to the Privacy Policy

We may update this Privacy Policy from time to time to comply with technical updates on our website or changes in legislation. Any updates will be published on this page stating the date of the last modification.

Last updated: 12 July 2026