GDPR · ZVOP-2
Privacy Policy
Last updated: 2026-07-27
1. Data controller
The controller of personal data is Astro Karta (Slovenija). For privacy questions write to zasebnost@astrokarta.eu.
2. What data we process
- Portal: first name, last name, email, password hash (if set), zodiac sign, horoscope frequency preference, optional saved birth details and partner for matching, consent date.
- Horoscope subscription: email, sign, frequency, consent date.
- Reports (birth chart, palm): birth details or palm image hash are encoded in a signed link (token) and are not stored permanently on the server. Birth charts cannot be downloaded, printed, or saved: they are available for browser viewing only.
- PDF email requests (palm reading): email and report link (until deletion).
- Payments: processed by Stripe or PayPal; we do not store card details.
- Visit statistics (Google Analytics): anonymized page-visit data (e.g. pages viewed, device, country), only with your cookie consent.
- Advertising (Google AdSense): data for showing ads and measuring performance (may include device/cookie identifiers), only with “Accept all” consent. Processor: Google Ireland Limited.
3. Purposes and legal bases (GDPR Article 6)
- Performance of the service (Art. 6(1)(b)): horoscope, birth chart, palm reading, relationship compatibility, portal access.
- Consent (Art. 6(1)(a)): portal registration, email subscription, sending a report by email, Google Analytics, Google AdSense ads.
- Legitimate interest (Art. 6(1)(f)): technical security, anonymized visit statistics (without personal data, from 1 Jan 2027).
4. Data retention
We keep data while you use the service or until you exercise the right to erasure. Subscriptions and portal profiles are deleted on a forget-me request. Email report requests are deleted together with the user’s other data.
5. Portal and access security
Portal access uses a password and/or a one-time email confirmation link (valid 24 hours). After login a secure session cookie is created (HttpOnly, Secure, SameSite=Strict). Passwords are stored as a cryptographic hash (scrypt), never in plain text. GDPR export and erasure (Forget me) require an additional 6-digit code from email and CAPTCHA (Cloudflare Turnstile).
In your portal profile you can save horoscope preferences and birth details (and a partner for matching) so you do not have to refill forms. You can delete this data anytime with Forget me in the profile. Full astrology reports in URL tokens are not a permanent server database.
6. Your rights
Under GDPR and ZVOP-2 you have the following rights:
- Access: download a copy of your data (in the portal: “Download my data”).
- Rectification: contact us to change your profile.
- Erasure (right to be forgotten): portal button “Forget me” or email the controller.
- Restriction of processing and data portability.
- Objection to processing based on legitimate interest.
- Withdrawal of consent: anytime, without affecting the lawfulness of prior processing.
7. Complaint
If you believe we process data contrary to the law, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia.