This privacy policy governs the collection, storage and processing of personal data that we, as Apartments Galunder, collect from you when you enter your personal data for the purpose of making a reservation or enquiry, when you contact us via the online contact form and when you sign up for our newsletter.

Controller

The controller of personal data within the meaning of the EU General Data Protection Regulation and the applicable law governing the protection of personal data – GDPR is:

Apartmaji Galunder
Maistrova ulica 17, 9241 Veržej, Slovenia
Phone: +386 31 607 201 | +386 41 228 300
E-mail: info@apartmaji-galunder.si

 

Personal data and purpose of use

  1. If you wish to make a reservation or enquiry on our website, you must enter your name, address, email address and telephone number in the online form. The data is used for the sole purpose of confirming the reservation.
  2. If you wish to contact us via the online contact form in the “Contact” menu, you must enter your name and email address in the online form. The data is used solely for the purpose of communicating with you by email, at your own initiative.
  3. Accommodation providers in the Republic of Slovenia are required by law to register guests and keep a guest register(http://evem.gov.si/info/podpogoji/drugiPogoj/14172/prikaziDrugiPogoj/). Upon the arrival of guests, each accommodation establishment owner (or a person authorised by him) is obliged to register each person staying at the accommodation establishment via the eTourism application on the AJPES website. The data to be provided are name and surname, date of birth, nationality and form and number of the identity document. This information is also recorded in the guest book, which the operator can access on the AJPES website and keeps in hard copy.

The Controller respects your privacy and is committed to collecting, storing and processing your personal data carefully and in accordance with the applicable data protection regulations. As there are certain links in the Apartments Galunder online information system to other, external websites that are not directly linked to Apartments Galunder, the operator accepts no responsibility for the data protection of these websites.

In order to prevent unauthorised access to or disclosure of the data collected, to preserve the accuracy of the personal data and to ensure their appropriate use, the controller shall apply appropriate technical and organisational procedures to safeguard the data it collects. However, the controller cannot completely rule out the possibility of data misuse, as the internet is an unpredictable medium, despite security measures and secure communication protocols.

Consent and retention period for personal data

By providing his or her personal data in the above cases, the data subject has given his or her clear and unambiguous consent to the storage and processing of the data. Processing in this way is lawful under Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR).

  1. Consent to the processing of personal data in the case of a reservation or enquiry made on the Apartmaji Galunder website is given by clicking on the “Confirm reservation” or “Send enquiry” button.

If the booking is confirmed, the data obtained will be stored until the date of departure. On that date, the data subject is asked to give his or her written consent to further processing of the data. If it refuses to do so, the data obtained will be deleted.
However, in the case of an enquiry where the actual confirmation of the booking does not take place, the data collected is stored for the duration of the communication with the individual and is deleted as soon as the individual declines the booking.

  1. Consent to the processing of personal data in the event that an individual contacts us via the online form in the “Contact” menu is given by checking the “Submit” button.

In this case, the data obtained will be kept for the duration of the communication with the individual, or longer if the content of the communication so requires.
The data obtained will be deleted after the communication with the individual has been completed or at a later date if the content of the communication so requires.

  1. Consent to the processing of personal data for the purposes of registering a person staying at the accommodation establishment and keeping the guest register is given by presenting the individual’s identity document for inspection.

The data collected will be kept until the end of the current calendar year and for one (1) calendar year thereafter(https://www.ip-rs.si/vop/caz-hrambe-op-v-evidenci-hotelskih-gostov-3064/). After this period, the electronic guest book shall be deleted and the physical guest book shall be destroyed.

 

Your rights

In accordance with the provisions of the EU General Data Protection Regulation (GDPR), you have the right of access to your personal data, the right to rectification, the right to erasure, the right to data portability, the right to request the restriction of the processing of personal data and the right to object.

To exercise all your rights or to obtain further information, please submit your application by ordinary post to Apartmaji Galunder, Maistrova ulica 17, 9241 Veržej, Slovenia.
or by email to info@apartmaji-galunder.si. We will consider and respond to your application in accordance with the GDPR.

If you believe that your rights or data protection rules have been violated, you can complain to the competent national authority:
Information Commissioner of the Republic of Slovenia (Zaloška 59, 1000 Ljubljana, phone: 01 230 97 30, fax: 01 230 97 78, e-mail: gp@ip-rs.si).