This document describes the manner of collecting, processing, using, and protecting personal data, as well as the use of cookies on the website of Sanja Vrtačič s.p. (hereinafter: the Controller), in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable Slovenian legislation.

DATA CONTROLLER

Sanja Vrtačič s.p.
Address: Tomšičeva ulica 5, 6330 Piran – Pirano
Telephone: 00386 31 579 371
E-mail: info@apartmapirano.si

TYPES OF PERSONAL DATA

The Controller may process the following personal data of guests or website users:

• first and last name,
• permanent or temporary address,
• email address,
• telephone number,
• reservation details (arrival and departure dates, number of guests),
• data required for guest registration in accordance with the law (e.g., information from an identification document),
• payment information (excluding the storage of payment card details),
• IP address and basic technical data when visiting the website.

PURPOSES AND LEGAL BASES FOR PROCESSING

Personal data are processed for the following purposes:

• execution and management of accommodation reservations,
• fulfillment of contractual obligations,
• compliance with legal obligations (e.g., guest registration, tax obligations),
• communication with guests regarding their stay,
• handling complaints and potential disputes,
• ensuring the safety of individuals and property,
• operation and security of the website.

The legal bases for processing personal data are:

• contract (Article 6(1)(b) GDPR),
• legal obligation (Article 6(1)(c) GDPR),
• legitimate interest of the controller (Article 6(1)(f) GDPR),
• consent of the individual, when required (Article 6(1)(a) GDPR).

STORAGE OF PERSONAL DATA

Personal data is stored only for as long as necessary to achieve the purpose for which it was collected, or in accordance with applicable legal retention periods.

After the storage period expires, personal data is deleted, destroyed, or anonymized.

TRANSFER OF PERSONAL DATA

The data controller does not transfer personal data to third parties, except:

when required by law (e.g., police, tax authorities),

to contractual processors who perform specific services on behalf of the controller (e.g., accounting, IT support),

to web service providers, when necessary for the operation of the website.

All processors are obliged to protect personal data and operate in accordance with the GDPR.

PROTECTION OF PERSONAL DATA

The controller uses appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or misuse.

INDIVIDUAL RIGHTS

In accordance with the GDPR, individuals have the following rights:

• the right to access personal data,
• the right to rectify inaccurate data,
• the right to erasure (“right to be forgotten”),
• the right to restriction of processing,
• the right to data portability,
• the right to object to processing,
• the right to withdraw consent at any time, when processing is based on consent.

An individual may submit a request to the controller’s contact details. The controller will respond to the request within the legally prescribed timeframe.

RIGHT TO LODGE A COMPLAINT

In the event of a suspected violation of personal data protection, an individual has the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia.

COOKIES

The website uses cookies to provide a better user experience and ensure proper website functionality.

What are cookies

Cookies are small text files stored on your device when you visit a website. They allow the website to remember your settings and enhance your user experience.

Types of Cookies Used

Necessary cookies – required for the operation of the website and the contact/reservation form.

Functional cookies – allow the website to remember user settings, such as language or login information.

Analytical cookies – collect anonymous data about website usage (e.g., Google Analytics) to improve the user experience.

Purpose of Using Cookies

ensuring the proper functioning of the website,

storing user settings,

analyzing website visits and usage,

improving the user experience.

Managing Cookies

Visitors can change or refuse cookies at any time through their web browser settings. Some website functionalities may not work properly if cookies are disabled.

CHANGES TO THE POLICY

The controller reserves the right to update this policy at any time. Any changes will be published on the website, and the date of the change will be updated.

CONTACT

For questions regarding personal data protection or cookies, you can contact:

Sanja Vrtačič s.p.
E-pošta: info@apartmapirano.si
Telefon: 00386 31 579 371