The collected data will be protected in accordance with ZVOP-1, ZVOP-2 (harmonized with the last second reading in April 2018, will be adjusted with the adoption of ZVOP-2), and GDPR.
Identity and contact details of the operator
The controller of personal data within the meaning of the EU General Data Protection Regulation and the applicable law governing the protection of personal data – the GDPR is:
Name: Sweet Stay, Polonca Gašperič s.p.
Address: Cesta na Brdo 2, SI-1000 Ljubljana
Phone: +386 31 378 515
Personal data and the purpose of their processing
When a visitor to the website wishes to make a reservation on the website, he must enter the name and surname, e-mail address, telephone number, and country of residence in the online form. The data is used exclusively for the purpose of confirming the reservation.
When a visitor to the website wishes to contact us via the online contact form in the “Contact” menu, he must enter his name and e-mail address in the online form. The data is used exclusively for the purpose of communicating with the visitor via e-mail, on the visitor’s own initiative.
Providers of accommodation activities in the Republic of Slovenia are obliged by law to register guests and keep a guest book: (http://evem.gov.si/info/podpogoji/drugiPogoj/14172/prikaziDrugiPogoj/). Upon the arrival of the guests, each owner of the accommodation facility (or a person authorized by him) is obliged to register every person who will be staying in the accommodation facility via the eTourism application on the AJPES website. The information to be provided is the name and surname, date of birth, citizenship, gender, and the form and number of the identity document. This information is simultaneously recorded in the guest book, to which the manager has access on the AJPES website and at the same time keeps it in electronic form.
The controller respects your privacy and is obliged to act carefully and in accordance with the applicable personal data protection regulations when collecting, storing, and processing personal data. As there are certain links in the Sweet Stay Apartments online information system to other, external websites that are not directly linked to Sweet Stay Apartments, the operator does not assume any responsibility for the data protection of these websites.
In order to prevent unauthorized access to or disclosure of the data obtained, to maintain the accuracy of personal data, and to ensure their proper use, the controller shall use appropriate technical and organizational procedures to protect the data it collects. However, the operator cannot completely rule out possible misuse of data, as the Internet is an unpredictable medium, despite security measures and secure communication protocols.
Consent and retention period of personal data
The individual who provided his personal data in the above cases has given his clear and unambiguous consent to the storage and processing of data. The processing is thus lawful under Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR).
Consent to the processing of personal data in the case of a reservation on the Sweet Stay Apartments website is given by clicking on the “Book now” button. In case of booking confirmation, the obtained data will be kept until the date of departure.
Consent for the processing of personal data in the event that individuals contact us via the online form in the “Contact” menu is given by confirming the “Submit” button. In this case, the obtained data is stored during the communication with the individual, but it can also be kept longer if the content of the communication so requires. The obtained data are deleted after the completion of communication with the individual or later if required by the content of the communication.
Consent for the processing of personal data for the purposes of registration of a person residing in the accommodation establishment and keeping a guest book is given by presenting the personal document of the individual for inspection. The data obtained shall be kept until the end of the current calendar year and for the next one (1) calendar year (https://www.ip-rs.si/vop/caz-hrambe-op-v-evidenci-hotelskih-gostov-3064/). After this period, the guestbook in electronic form is deleted and the guestbook in electronic form is destroyed.
In accordance with the provisions of the EU General Data Protection Regulation (GDPR), you have the right to access your personal data, the right to rectification, the right to erasure, the right to transferability, the right to request a restriction on personal data and the right to object.
When exercising all your rights or obtaining additional information, submit an application by regular mail to: Sweet Stay, Polonca Gašperič sp, Cesta na Brdo 2, SI-1000 Ljubljana or by e-mail to: firstname.lastname@example.org . We will process and respond to your application in accordance with the GDPR.
If you believe that your rights or regulations on the protection of personal data have been violated, you can complain to the competent state authority:
Information Commissioner of the Republic of Slovenia (Zaloška 59, 1000 Ljubljana, telephone: 01 230 97 30, fax: 01 230 97 78, e-mail: email@example.com).