Privacy Policy

Thank you for entrusting us with your personal information. We assure you that we work with them very carefully and process them in accordance with the applicable personal data protection legislation (EU Regulation 2016/679 (GDPR) and the Personal Data Protection Act – ZVOP-1). We explain which of your personal data we process for which purposes in the sections that follow.

1. Personal Data Controller

The Personal Data Controller is Mestni pristan gostinstvo in turizem d.o.o., Jurčičev trg 1, 1000 Ljubljana.

2. Purposes and bases for personal data processing

We only use the data provided for purposes related to our business operations.

a) Accommodation reservations and sleeping arrangements

We collect your personal data for the purpose of making a reservation via the online contact form, online reservation, phone, or in person at the reception. Article 6/I (b) of the General Regulation on the Protection of Personal Data provides the legal basis for the processing of personal data for the purpose of facilitating the provision or use of services.

For this purpose, we process the following personal data:

name and surname, date of birth, address of permanent residence, company, contact e-mail address, contact telephone number, and country;
data on the circumstances under which you are exempt from paying the tourist and promotional tax (disability, children with special needs, persons who voluntarily help eliminate the consequences of natural disasters, members of the Slovenian Police while performing tasks within their competence, temporary employment status accommodation facility continuously for more than 30 days, foreign nationals who are exempt from paying tourist tax under international agreements);
data on the stay (date of arrival and departure, special requirements, preferences regarding services;
event data (name, surname, company, company tax number, e-mail address, telephone, country, time of start and end of the event, duration of the event, number of participants, transaction account of the participant);

b) Arrangements for payment of accommodation or refunds made under this title

We require your invoice data in order to pay contractual obligations. A contract for accommodation or use of services serves is the legal basis – Article 6/I (b) of the General Data Protection Regulation. Due to the Value Added Tax Act, the Prevention of Money Laundering and Terrorist Financing Act, the Payment Services, Services for Issuing Electronic Money and Payment Systems Act, and the Tax Procedure Act – Article 6/I (c) of the General Data Protection Regulation, we must also keep personal data for invoicing purposes.
For this purpose, we process the service payer data, including payment card data (if you provided it to us); card type, name on the card, card number, expiration date, CVC code);ž

c) Arranging the specifics of the stay and resolving complaints

We process the personal data that you provide to us in this case for the purpose of the specifics of the stay, which are carried out before and during the stay. In the event of a complaint, you should also provide us with additional information. A contract for accommodation or use of services serves as the legal basis – Article 6/I (b) of the General Data Protection Regulation.

d) Zlata Ladjica mobile application

Visitors can use the mobile app to order services, communicate special requests, and view the invoice for their stay. The user accepts the general terms and conditions by installing the application on their mobile phone, thereby concluding a contract. The contract and Article 6/I (b) of the General Data Protection Regulation serve as the legal basis for the processing of personal data by the application.
The application processes the following data: first and last name, e-mail address, guest orders (items and prices).

e) Direct marketing

Direct marketing is carried out using the e-mail address you provided to us when you signed the accommodation contract. In this way, we provide you with notifications about promotions and special offers. Article 6/I (f) of the General Data Protection Regulation provides the legal basis for sending an invitation to your e-mail address. You have the right to object to such processing by following the instructions in the footer of each such message or by sending an email to hotel@zlataladjica.com.

f) When visiting the website

We also use cookies and similar technologies to collect data on your use of our website. More information about how we use these technologies to collect data about you can be found in our Cookie policy.

3. Transmission of data to third parties and transmission of data to third countries

The controller collaborates with external contractual service providers (contractual personal data processors) that exclusively process data on their behalf. The controller and personal data processors defined their mutual relationships and obligations with a written contract. The contractual processor is registered to perform personal data processing activities entrusted to them and to provide personal data processing services only within the scope of their authority. Processors are not permitted to share personal data for their own or foreign purposes or to pass them on to third parties or countries. Cooperation with external contracted service providers is used to enable reservations and payments for reservations, to support analytical and marketing services, to improve our services and user experience, etc.

Personal data may be disclosed to law-enforcement authorities and other governmental authorities if required by law or if strictly necessary to prevent, detect, or prosecute criminal offenses and fraud.

4. Storage period of personal data

Personal data of an individual are processed and stored in accordance with the legal basis or for the duration of the purpose for which they were collected or further processed.
a) Reservations and stay: 5 years after the end of the contractual relationship
b) Payment arrangements: 10 years from the issuance of the invoice
c) Specifics of the stay and resolving complaints: 2 years
d) Mobile application (service order, feedback): after the guest leaves and the invoice is settled, all personal data is deleted
e) Direct marketing: after the service advertised with direct marketing has ben provided

5. The rights of individuals relating to the processing of personal data

Individuals have a number of rights with regard to personal data. Mestni pristan gostinstvo in turizem d.o.o. verifies the identity of the person inquiring about their rights before exercising their right. An individual can submit a request regarding their rights in writing to Mestni pristan gostinstvo in turizem d.o.o., Jurčičev trg 1, 1000 Ljubljana, or to the e-mail address hotel@zlataladjica.com.
In relation to your personal data, we provide you with:

the right to know your personal data: you have the right to know about all of your personal data collected in connection with you and their processing, as well as to review its legality;
the right to rectification or to have your personal data completed: we will rectify any inaccurate personal data as soon as possible;
the right to erasure for your personal data: we will erase personal data concerning you without undue delay, to the extent permitted by applicable law (data required to perform the contract you have concluded with us and data required to implement our legal obligations will not be able to be erased, despite your request);
the right to restriction for your personal data: you have the right to request that we restrict the processing of your personal data (when you dispute the accuracy of personal data, when the processing is illegal and in cases where we no longer need your data for processing but you need them to enforce, implement or defend your legal claims);
the right to data portability: upon your request, we will send you your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or we will forward them to another operator if technically feasible. You may only exercise this right if you provided us with personal data with your consent or for the purpose of concluding and fulfilling a contract;
the right to objection: you have the right to object to the processing of your personal data at any time if it is based on our legitimate interests or the legitimate interests of a third party.
Right to lodge a complaint about personal data processing: An individual may send a possible complaint about personal data processing to the controller’s addresses listed in the first article of this policy.

Similarly, any data subject has the right to file a direct complaint with the Information Commissioner if they believe that the processing of their personal data violates the applicable law.
If you have any questions about personal data protection, please contact sales@zlataladjica.com

6. Policy validity

This policy is published at www.zlataladjica.com and is valid from 01.06.2021.

Where we send your data

Suggested text: Visitor comments may be checked through an automated spam detection service.

Manage cookie settings