General Terms
The General Terms and Conditions govern the use and purchase of the website www.aleszehelj.com Please read the general terms and conditions and our privacy policy, which relates to your privacy and personal data. By using the website, the user accepts and agrees to all provisions on the website, which are the property of Aleš Žehelj The user undertakes to use the website legally, in accordance with its purpose.
Â
Intellectual Property RightsÂ
The provider is the owner or official authorized distributor of all products and services listed on www.aleszehelj.com and other products and services owned or distributed by Aleš Žehelj. The entire website content, regardless of its format, is protected by copyright. All copyrights are held by the provider and Aleš Žehelj.
Aleš Žehelj is not responsible for any property damage or injuries. All programs are carried out at your own risk, and we assume no liability in the event of injury. Participation is voluntary, and by engaging with the content, you acknowledge full responsibility for your actions. Before starting any program, consult your physician, physical therapist, or certified trainer.
The general terms of business of the website www.aleszehelj.com are in accordance with the Consumer Protection Act (ZVPot), the recommendations of the Chamber of Commerce and Industry of Slovenia, and international e-commerce codes.
www.aleszehelj.com is an online platform operated by Aleš Žehelj, hereafter referred to as the Provider. These terms apply to all products and services purchased through www.aleszehelj.com.
These terms govern the operation of the online store, user rights, and the business relationship between the provider and the customer.
Prohibited Sharing of Products or Programs -Â It is strictly forbidden to share products or programs. Your username and password are intended exclusively for you as the buyer. If these are shared, it constitutes a violation. The penalty for sharing programs will be determined by the Constitutional Court in Ljubljana or through an agreement between the client and the program provider.
Use is limited to one user and three devices.
Â
Online Store
Users may make purchases through the website accessible at www.aleszehelj.com and other websites owned by Aleš Žehelj.
These Terms and Conditions are an integral part of the contractual relationship between the provider and the buyer—namely, a sales contract.
By registering on the website or placing an order via the platform, the user confirms that they understand and accept these Terms and Conditions.
Information found on the website (product descriptions, images, etc.) is approximate. We reserve the right to make minor changes to product descriptions without notifying the user.
Products on the website are informational and may change without notice.
Â
Availability of Information
The Provider commits to always providing the customer with the following information:
Company identity (name, registered office, registration number)
Contact details enabling quick and effective communication (email)
Essential characteristics of products or services
All prices must be clearly and unambiguously defined, including whether taxes are included
Payment method and method of product/service deliver
Validity period of the offer
Withdrawal period and conditions for contract cancellation
Providing contact details for complaints procedureÂ
Â
Prices and Taxes
All prices are listed in EUR and include value-added tax (VAT).
Â
Order Cancellation
Once the user places an order, they receive a confirmation email acknowledging the receipt of the order. The user has the right to cancel the order before receiving an email notification from the provider that the product has been shipped or the service has been fulfilled.
To cancel an order, the user must send an email to the provider. The cancellation request must include the user's full name, address, order number, and order date. The subject line of the email must be: ORDER CANCELLATION and the name of the buyer.
Â
Withdrawal from the Contract and Returns
If the user is not satisfied with the purchased product or service, they have the right to notify the provider in writing within 8 days of receiving the product or service that they are withdrawing from the contract (the withdrawal period begins on the day the product or service is received).
Although not mandatory, providing a reason for withdrawal is appreciated.
If the product is returned, Aleš Žehelj has 30 business days to refund the purchase price.
Upon refund, the user will lose access to the product or service.
Â
Prices and Payment Methods
Due to the nature of online business, the offerings on the aleszehelj.com platform are frequently and rapidly updated and may change at any time.
Prices are valid at the time the order is placed and do not have pre-defined validity.
Prices apply under the conditions and with the payment methods stated on the website.
If the price of a product or service changes during order processing, the provider will inform the customer. The provider will make every reasonable effort to offer the lower price or find a mutually satisfactory solution.
The sales contract between the provider and the buyer is concluded the moment the provider confirms the order (the buyer receives an email containing the product or access details). From that moment, all prices and other terms are fixed and apply to both parties.
If you experience access or download issues, please contact the provider (Aleš Žehelj), who will ensure you receive your purchased product or service.
Payment Methods:
On the aleszehelj.com platform, the provider offers the following payment methods:
-
All major credit cards
-
PayPal
-
 Stripe
-
Â
Direct bank transfer (contact me for details)
The provider issues an invoice on a durable medium, itemizing costs and including instructions on how to withdraw from a purchase and return a product, if applicable.
The sales contract (order) is stored electronically on the provider’s server and is available to the buyer at any time in their user profile (My Profile).
The provider issues invoices via email.
Â
Guarantee
The provider sells high-quality products and services and offers a 100% satisfaction guarantee (or more, depending on the product). If the user is not satisfied with a product, they may request a full refund within 14 days of purchase.
Â
Disclaimer
The provider does not guarantee the accuracy or correctness of the content published on the website. The user bears all responsibility for relying on the published content.
The provider may disable the website or access to it due to technical issues, maintenance, or other reasons.
Use of the content and advice provided in the products is at the user's own risk. In the event of injury or other health issues, the provider assumes no liability. The provider is not responsible for any viruses on your device or physical damage to your equipment during program use.
 Â
Privacy Policy in Accordance with GDPR
The data controller respects applicable legislation governing personal data protection and operates in accordance with relevant national laws, including the General Data Protection Regulation (Regulation (EU) 2016/679 – “GDPR”).
In the event of changes to data protection laws or sector-specific regulations, it may be necessary to update the relevant provisions. You will be notified of any such updates here. In the case of conflicting provisions, the hierarchy of legal acts will apply.
This Privacy Policy in accordance with GDPR governs the following areas:
-
contact details of the data controller and the designated data protection officer
-
purposes and legal bases for processing different types of personal data, including profiling
-
data recipients, contractual processing, and data transfers to third countries
-
retention periods of various categories of personal data
-
data security measures
-
user rights regarding personal data
-
the procedure for exercising these rights
-
the right to lodge a complaint related to data processing
All personal data you provide will be treated confidentially and used solely for the purpose for which it was submitted. If the need arises to process your data for any other purpose, we will contact you and request your explicit consent beforehand.
The controller will process personal data only for the purposes for which it was collected and will not process it in a manner incompatible with those purposes. Only data necessary for achieving the stated purpose will be collected.
Â
GDPR Principles
In processing personal data, the controller follows the general principles of Article 5 of the GDPR. Personal data may only be collected for specific, explicit, and legitimate purposes. The controller ensures that personal data:
-
is processed lawfully, fairly, and transparently in relation to the data subject, and not further processed in a manner incompatible with these purposes;
-
is accurate, relevant, and limited to what is necessary for the purposes for which it is processed;
-
is stored in a form which permits identification only as long as necessary or as required by law;
-
is processed in a way that ensures appropriate security and confidentiality, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.
Personal data may not be further processed in a way that is incompatible with the original purpose unless required by applicable regulations.
Â
Categories of Personal Data Users
The controller does not provide personal data to any processors or third parties, and no third party has access to the personal data collected by the controller.
Â
Legal Basis and Purpose of Data Processing
The purpose of collecting personal data from individuals and their children is outlined in the table below (original table omitted in this translation).
The legal basis for collecting and processing personal data is primarily Article 6(1)(a) of the GDPR – the individual’s explicit consent. By using our platform, the individual explicitly agrees that their data will be processed solely for the purposes they have consented to, as stated for each specific data point. Consent for the processing of personal data is voluntary and may be withdrawn at any time (this includes account deletion, which automatically counts as consent withdrawal).
If an individual does not provide the mandatory personal data marked with an asterisk (*) or if they withdraw consent, the controller cannot fulfill the intended purpose of data collection, such as registering for a class or responding to an inquiry.
Personal data processing may also be required for the execution of services or for implementing pre-contractual measures (e.g., consulting or legal negotiations before ordering services).
In the case of cookies, processing is based on legitimate interests pursued by the controller or a third party, provided those interests are not overridden by the data subject’s rights and freedoms. The processing in this case serves the controller’s interest in maintaining a high standard of service and customer satisfaction. If the controller is unsure whether to collect specific data, they will consult with an expert. Fundamental rights and freedoms will always be considered in relation to the controller’s interest in processing data.
Â
Methods of Personal Data Collection
The types of personal data are categorized (table not included here) and primarily serve to ensure higher-quality, personalized service delivery.
Contact data is used for sending marketing content, service-related communication, and notifications of changes to the privacy policy and terms.
Other personal data is collected only if voluntarily submitted by the user.
In some cases, publicly available personal data (e.g., from business registries or public social media profiles) may be collected. Data may also be collected based on legal claims or unpaid debts.
Â
Types of Data Collected – Email Addresses
The email address is required for sending fitness advice, invoices, newsletters, offers, notifications, and other communication related to the Aleš Žehelj brand.
Address is required for identifying the customer in the case of debt recovery or if documents must be sent by postal mail (e.g., invoices or certificates), and for statistical or analytical purposes.
Full name is required for personal identification.
Warning Regarding Potential Data Sharing Risks
Individuals are advised to carefully consider what data they wish to share (e.g., a child’s date of birth), as there is a potential risk (albeit criminal) of unauthorized system intrusion. In such cases, hackers could misuse the data for purposes inconsistent with our original intentions.
Â
Data Processors
In addition to the controller (and authorized staff), your personal data may be processed by external processors who provide accounting, IT support, or other services. Each such processor is clearly disclosed, and data subjects have the right to object to this in legally permitted cases (note: in most cases, processing is essential for authentication purposes).
The controller has signed a data processing agreement with each processor in accordance with Article 28 of the GDPR. Each processor guarantees sufficient technical and organizational safeguards to protect your data in line with GDPR and relevant data protection legislation.
Â
Foreign Data
It is prohibited to submit data on behalf of another individual. If the data belongs to a minor under 16 years of age, the controller may only receive the personal data with explicit consent from a parent, legal guardian, or authorized representative. You are required to notify the controller if this is the case.
By using our website, you confirm that you are over the age of 16.
Â
Direct Marketing
The controller reserves the right to contact you by email for its own marketing purposes. However, you may withdraw your consent to such communication at any time with immediate effect (ex nunc).
Â
Enabling Third-Party Access to Your Data
The controller may only grant third parties access to personal data to the extent required by court orders, regulatory authorities, or in other legally defined circumstances. If permitted and it does not interfere with crime prevention or investigation, you will be informed about any such data disclosure request beforehand.
Â
International Data Transfers
The controller does not transfer personal data to any international organization or to any data controller or processor based outside the EU or the European Economic Area (EEA).
Â
Data Protection
Your personal data is stored exclusively in electronic form (no physical copies). It is protected by application software that prevents unauthorized access during transmission—including over telecommunications networks. The controller ensures effective mechanisms for blocking, destroying, or deleting data when the processing purpose ends (e.g., upon account deletion or data erasure request). An audit trail is maintained to track who entered, used, transmitted, or processed personal data.
The controller uses the following security measures to prevent unauthorized access, use, or disclosure:
-
locking workspaces and computers to prevent unauthorized access
-
storing data carriers in secure locations
-
preventing access to personal data by maintenance staff, customers, or visitors
-
restricting password use to authorized individuals only
-
controlling data exports by employees
-
monitoring data copies and exports (audit trail)
-
securing and monitoring data transmission over networks
-
revoking access and removing data from former employees and contractors
- Â
Your Rights Under GDPR
According to the GDPR, you have the right to know whether your data is being processed. If so, the controller must allow you to:
-
withdraw your consent (where applicable), using a process as simple as providing consent
-
access your personal data (view, copy, or receive a transcript) (Article 15 GDPR)
-
obtain information about processing purposes, data types, recipients (especially in third countries), retention periods, and your rights (Articles 13 & 15 GDPR)
-
request correction of inaccurate or incomplete data (Article 16 GDPR)
-
request erasure of your data ("right to be forgotten") (Article 17 GDPR)
-
request restriction of processing (Article 18 GDPR)
-
object to processing based on legitimate interest, including profiling, unless the controller demonstrates overriding grounds (Article 21 GDPR)
-
receive your data in a machine-readable format or request direct transfer to another controller (Article 20 GDPR)
You may also assert any other applicable rights in accordance with current legislation.
Â
Right of Access
You have the right to request confirmation whether your personal data is being processed. If it is, you are entitled to access it and receive the following information:
-
the purposes of processing
-
the categories of personal data
-
the recipients or categories of recipients of your data, including those in third countries or international organizations
-
the expected storage duration or the criteria used to determine it
-
the existence of your right to rectification, erasure, or restriction of processing
-
the existence of your right to object to processing
-
the right to lodge a complaint with a supervisory authority
-
the source of data if not collected directly from you
-
the existence of automated decision-making, including profiling, and meaningful information about the logic and effects involved
You will be provided one free copy of your personal data. Additional copies may be subject to a reasonable administrative fee.
Â
Right to Erasure ("Right to Be Forgotten")
You have the right to request the erasure of your personal data without undue delay, and the controller is obliged to erase your data in the following cases:
-
the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
-
you withdraw the consent on which the processing is based, and there is no other legal ground for processing;
-
you object to the processing based on the controller's legitimate interest, and there are no overriding legitimate grounds;
-
you object to the processing for direct marketing purposes;
-
the personal data has been unlawfully processed;
-
the data must be erased to comply with a legal obligation under EU or national law.
- Â
Right to Restriction of Processing
You have the right to request restriction of processing where one of the following applies:
-
you contest the accuracy of the data (processing will be restricted while the controller verifies its accuracy);
-
the processing is unlawful and you oppose the erasure of the data and request restriction instead;
-
the controller no longer needs the data for processing, but you require it for the establishment, exercise, or defense of legal claims;
-
you have objected to processing, pending verification of whether the controller’s legitimate grounds override yours.
- Â
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit those data to another controller without hindrance, where:
-
the processing is based on your consent or a contract, and
-
the processing is carried out by automated means.
- Â
Right to Object
Based on your specific situation, you may object at any time to the processing of your personal data if it is based on the controller’s legitimate interest or that of a third party. The controller will no longer process your data unless compelling legitimate grounds are demonstrated that override your interests, rights, and freedoms, or if processing is necessary for the establishment, exercise, or defense of legal claims.
Where personal data is processed for direct marketing purposes, you have the right to object at any time to such processing, including profiling related to direct marketing.
If direct marketing is based on consent, you may exercise your right to object by withdrawing your consent.
Â
Exercising Your Rights
Some exceptions may apply when exercising your rights, particularly to protect the public interest (e.g., crime prevention or investigation), the controller’s interests (e.g., confidentiality), or the rights and freedoms of others.
Please note that the controller may require proof of your identity and full details of your request before it can be processed.
Once your request is received, you will receive a response without undue delay and no later than one month from receipt. In complex cases or where many requests are received, this deadline may be extended by two additional months. You will be informed if such an extension applies.
For any inquiries, requests, or to exercise your data protection rights, you can contact us at: [email protected]
If you are dissatisfied with how your data is processed or how your request was handled, you have the right to lodge a complaint with the Slovenian Information Commissioner:
-
Address: Dunajska 22, 1000 Ljubljana
-
Email: [email protected]
-
Phone: +386 (0)1 230 97 30
-
Website: www.ip-rs.si
Cookies
Cookies are small text files that most websites store on the devices used to access the internet. They are used to recognize devices and customize the browsing experience. Cookie storage is managed entirely by your browser, which allows you to limit or disable cookie use. Cookies are not harmful and always time-limited.
Although cookies are not new, new regulations now require website visitors to be informed and give consent for their use.
Cookies are essential for providing user-friendly online services. They enable faster and easier interaction between the user and the website by remembering user preferences, saving time, and making browsing more efficient.
Examples of cookie use:
-
customizing content display based on previous visits
-
saving settings and preferences
-
keeping users logged in
-
adapting display to the user’s device (e.g., mobile, tablet)
-
tracking site visits for performance analytics
-
enabling secure and smooth functionality of services like online banking or shopping
We use the Kajabi platform, which also uses its own cookies. You can read more about them at www.kajabi.com.
Â
Server Logs and Usage
Each time you visit the website, the server automatically stores a log file (e.g., your IP address, browser version, visited subpage, time and duration of visit). This data helps us ensure secure and stable site performance.
These cookies store your usage data and simplify future access by recognizing your computer and avoiding repetitive data entry. The data is processed to generate website visit statistics and to ensure system security.
Most browsers are set to accept cookies automatically, but you can disable or restrict them. You can also delete cookies from your device at any time.
Users who subscribe to any online program receive links to video players hosted on Vimeo, YouTube, or Wistia via email (sent through the MailChimp platform). After fulfilling subscription conditions, users receive a link via MailChimp. When the link is first accessed, a cookie with a key is stored in the database. The system checks the IP address on each new login and updates the database accordingly, limiting storage to 10 IP records per user for misuse prevention. No usernames or passwords are required for this access.
For more information about cookies and how to disable them, visit:
http://www.allaboutcookies.org
Â
Kajabi Platform Usage Rules
For the purposes of e-communication and business operations on the websites www.aleszehelj.com, Aleš Žehelj uses the Kajabi platform for subscribers of products and services. By signing up on the website and platform, you agree that Kajabi may manage your personal data. Under Kajabi’s terms of use and privacy policy—and in line with this Privacy Policy—you consent to the transfer of your data to Kajabi, the service provider.
The controller ensures that Kajabi maintains an equivalent level of data protection required by EU and local regulations, especially through signed Standard Contractual Clauses (SCCs), unless otherwise specified.
Kajabi guarantees GDPR compliance in its Terms of Use and Privacy Policy and confirms certification under the EU-U.S. Privacy Shield Framework. You can read Kajabi’s Privacy Policy at:
👉 https://legal.kajabi.com
Google Analytics
This website uses Google Analytics, a service provided by Google Inc. (“Google”). Google Analytics uses cookies—text files placed on your device—to help analyze how visitors use the website (e.g., number of visitors, time spent on specific pages, etc.).
These data are processed in anonymized form (IP addresses are shortened and cannot be linked to individual identities) and are used solely for statistical purposes to improve the website experience. The basis for data collection is the controller’s legitimate interest in improving its online services.
Data collected via Google Analytics is processed separately from other data and is not merged with any personal user information. By using our site, you consent to Google processing your data in the manner and for the purposes outlined above.
The controller has disabled any additional data sharing with Google or third-party services.
To disable Google Analytics features in your browser, you can install the opt-out add-on provided by Google:
👉 https://tools.google.com/dlpage/gaoptout?hl=en
Additional information:
👉 https://support.google.com/analytics/answer/6004245?hl=en-GB
👉 https://support.google.com/analytics/answer/181881?hl=en
👉 https://myaccount.google.com/?pli=1
E-Business and Data Storage
While it is widely acknowledged that 100% protection against cyberattacks cannot be guaranteed in online environments, the controller maintains physical, electronic, and procedural safeguards to protect your data in line with applicable data protection standards.
These safeguards include:
-
strictly limited staff access to data on a need-to-know basis
-
encrypted data transmission
-
sensitive data (e.g., credit card details) stored in encrypted form by certified payment processors
-
firewalls and constant monitoring of IT systems for intrusions
-
secure server infrastructure (own or partners’) for all stored data
-
adherence to internal data access policies and procedures
Business Documentation
The controller reserves the right to process business documentation data that is not, by itself, personal data but serves as proof of business agreements or negotiations. This includes business correspondence, copyright agreements or payout contracts, invoices, service referrals, quote requests or responses, customer IDs, order or contract numbers, complaints, and claims.
For statistical purposes, the controller also reserves the right to collect information such as how the customer discovered the controller and whether the customer has participated in similar training before.
Data Retention Period
All personal data is collected, processed, and stored in accordance with applicable personal data protection laws. Generally, your personal data will be stored until you withdraw consent or for as long as necessary to fulfill the purpose for which it was collected—or until any legal or contractual retention periods expire.
The retention period depends on the type of data, the reason it was collected, and any applicable legal or operational requirements.
Key factors for determining retention periods include:
-
the duration of our relationship with you,
-
legal obligations we must comply with, and
-
whether it is advisable to retain data due to ongoing or potential legal claims, litigation, or regulatory inquiries.
If a claim is being investigated against the controller, they may retain relevant data for as long as it is needed to defend or pursue the claim until any legal time limits expire.
According to the VAT Act, invoices for the supply of goods or services in Slovenia must be stored for 10 years after the year to which they relate.
 Â
Destruction of Data
Upon expiration of the retention period or upon withdrawal of consent, data is permanently and irreversibly deleted or destroyed in such a way that its contents can no longer be reconstructed or reused.
Â
Amendments
The controller reserves the right to occasionally update this Privacy Policy to reflect changes in data processing practices, technology, regulations, or best practices. You are encouraged to review the most recent version of this Policy before submitting any personal data.
Continued use of the website or services following changes to the Privacy Policy constitutes your agreement to those changes.
The Terms of Service and GDPR policy were last updated on May 10, 2025.