Privacy
1. Controller and contact
The controller of the website and of data related to direct enquiries for Koča Kamrica Velika planina uses the following contact details: Velika Planina 67, 1242 Stahovica, Slovenia; +386 31 580 470; [email protected]. Before production publication, the registered identity of the accommodation service provider must be aligned with the provider's valid registration data.
2. Data we may process
Depending on how the website is used, we may process contact and booking information provided by the visitor, such as name, email address, telephone number, requested dates, number of guests and message content. When the website is used, the technical infrastructure may also process device information, IP address, access time, requested page and similar security log data. Google Analytics is used only in accordance with the user's choice in the privacy settings.
3. Purposes and legal bases
We process data from direct enquiries and reservations in order to answer an enquiry, prepare an offer, conclude and perform the agreed accommodation service; the legal basis is taking steps at the request of the data subject before entering into a contract or performance of a contract. Data that must be retained because of tax, accounting, tourism or other statutory obligations is processed to comply with a legal obligation. Limited technical log data may be processed for the security and reliable operation of the website on the basis of legitimate interests. Analytics measurement with Google Analytics is based on consent.
4. Google Analytics and Consent Mode
The website uses Google Analytics 4 with Measurement ID G-WZE1L7WD24 and Google Consent Mode v2 in advanced mode. By default analytics_storage, ad_storage, ad_user_data and ad_personalization are set to denied. When analytics_storage=denied, Google Analytics does not read or write its own analytics cookies, but Google's Consent Mode mechanism may send cookieless pings for measurement and modelling. Google states that, as part of normal HTTP/browser communication, such pings may include information such as the user agent, screen resolution and IP address; Google Analytics states that it does not store or log IP addresses. If the visitor allows analytics, analytics_storage changes to granted, while advertising signals on this website remain denied. Consent is voluntary and can later be changed in the cookie settings.
5. Recipients and processors
To the extent necessary for their purpose, data may be accessible to providers of hosting, technical maintenance, email and other services that support operation of the website and communication with guests. Where analytics is allowed, Google is the analytics service provider. When a visitor voluntarily opens Booking.com or makes a reservation there, Booking.com processes the data under its own rules and in its own role.
6. Transfers to third countries
Some information infrastructure providers may also process data outside the European Economic Area. Where such a transfer is relevant, it must be based on a valid mechanism under the GDPR, for example an adequacy decision or appropriate safeguards such as standard contractual clauses. Details of transfers by an individual external provider are set out in that provider's privacy information.
7. Retention periods
Enquiry data is retained only for as long as necessary for communication and a possible reservation and is then deleted or restricted unless another lawful basis for retention exists. Data connected with a concluded reservation, invoices and statutory records is retained for the periods required by applicable law or for as long as necessary to establish, exercise or defend legal claims. Analytics cookies have the periods stated on the Cookies page; the visitor's consent or refusal is stored in the browser in order to respect that choice.
8. Individual rights
Subject to the conditions of the GDPR, an individual may request access to personal data, rectification or erasure, restriction of processing and data portability, and may object to processing where the legal basis is legitimate interests. Where processing is based on consent, consent may be withdrawn at any time; withdrawal does not affect the lawfulness of processing carried out before withdrawal. Requests may be sent to [email protected].
9. Complaint to the supervisory authority
If an individual believes that personal data is being processed contrary to the applicable rules, a complaint may be lodged with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, telephone 01 230 97 30, email [email protected].
10. Security and minimisation
We use reasonable organisational and technical measures to limit unauthorised access, loss or misuse of data and process only data that is necessary for a defined purpose. Visitors are asked not to send sensitive personal data by email when it is not necessary for a reservation.
11. Children's data
The website is not intended to independently collect children's personal data for marketing or profiling. Where children's data is necessary for the lawful performance of an accommodation service or mandatory records, it is processed only to the necessary extent and on an appropriate legal basis.
12. Privacy contact
For questions or to exercise rights concerning personal data, email [email protected] or call +386 31 580 470.