Thank you for entrusting us with your personal information. We assure you that we work with them very carefully and process them in accordance with the applicable personal data protection legislation (EU Regulation 2016/679 (GDPR) and the Personal Data Protection Act – ZVOP-1). We explain which of your personal data we process for which purposes in the sections that follow.
The Personal Data Controller is Mestni pristan gostinstvo in turizem d.o.o., Jurčičev trg 1, 1000 Ljubljana.
We only use the data provided for purposes related to our business operations.
We collect your personal data for the purpose of making a reservation via the online contact form, online reservation, phone, or in person at the reception. Article 6/I (b) of the General Regulation on the Protection of Personal Data provides the legal basis for the processing of personal data for the purpose of facilitating the provision or use of services.
For this purpose, we process the following personal data:
We require your invoice data in order to pay contractual obligations. A contract for accommodation or use of services serves is the legal basis – Article 6/I (b) of the General Data Protection Regulation. Due to the Value Added Tax Act, the Prevention of Money Laundering and Terrorist Financing Act, the Payment Services, Services for Issuing Electronic Money and Payment Systems Act, and the Tax Procedure Act – Article 6/I (c) of the General Data Protection Regulation, we must also keep personal data for invoicing purposes.
For this purpose, we process the service payer data, including payment card data (if you provided it to us); card type, name on the card, card number, expiration date, CVC code);ž
We process the personal data that you provide to us in this case for the purpose of the specifics of the stay, which are carried out before and during the stay. In the event of a complaint, you should also provide us with additional information. A contract for accommodation or use of services serves as the legal basis – Article 6/I (b) of the General Data Protection Regulation.
Visitors can use the mobile app to order services, communicate special requests, and view the invoice for their stay. The user accepts the general terms and conditions by installing the application on their mobile phone, thereby concluding a contract. The contract and Article 6/I (b) of the General Data Protection Regulation serve as the legal basis for the processing of personal data by the application.
The application processes the following data: first and last name, e-mail address, guest orders (items and prices).
Direct marketing is carried out using the e-mail address you provided to us when you signed the accommodation contract. In this way, we provide you with notifications about promotions and special offers. Article 6/I (f) of the General Data Protection Regulation provides the legal basis for sending an invitation to your e-mail address. You have the right to object to such processing by following the instructions in the footer of each such message or by sending an email to firstname.lastname@example.org.
The controller collaborates with external contractual service providers (contractual personal data processors) that exclusively process data on their behalf. The controller and personal data processors defined their mutual relationships and obligations with a written contract. The contractual processor is registered to perform personal data processing activities entrusted to them and to provide personal data processing services only within the scope of their authority. Processors are not permitted to share personal data for their own or foreign purposes or to pass them on to third parties or countries. Cooperation with external contracted service providers is used to enable reservations and payments for reservations, to support analytical and marketing services, to improve our services and user experience, etc.
Personal data may be disclosed to law-enforcement authorities and other governmental authorities if required by law or if strictly necessary to prevent, detect, or prosecute criminal offenses and fraud.
Personal data of an individual are processed and stored in accordance with the legal basis or for the duration of the purpose for which they were collected or further processed.
a) Reservations and stay: 5 years after the end of the contractual relationship
b) Payment arrangements: 10 years from the issuance of the invoice
c) Specifics of the stay and resolving complaints: 2 years
d) Mobile application (service order, feedback): after the guest leaves and the invoice is settled, all personal data is deleted
e) Direct marketing: after the service advertised with direct marketing has ben provided
Individuals have a number of rights with regard to personal data. Mestni pristan gostinstvo in turizem d.o.o. verifies the identity of the person inquiring about their rights before exercising their right. An individual can submit a request regarding their rights in writing to Mestni pristan gostinstvo in turizem d.o.o., Jurčičev trg 1, 1000 Ljubljana, or to the e-mail address email@example.com.
In relation to your personal data, we provide you with:
Similarly, any data subject has the right to file a direct complaint with the Information Commissioner if they believe that the processing of their personal data violates the applicable law.
If you have any questions about personal data protection, please contact firstname.lastname@example.org
This policy is published at www.zlataladjica.com and is valid from 01.06.2021.
Suggested text: Visitor comments may be checked through an automated spam detection service.
Hotel Zlata Ladjica
Jurčičev trg 1