This Privacy Policy applies to users in the European Economic Area (EEA) and Switzerland. It explains which personal data are processed when you use https://www.turizem-koren.com/, for what purposes, and which rights you have. We process personal data only for specified and lawful purposes, limit collection to what is necessary, obtain your consent in advance where processing depends on consent, and apply appropriate safeguards.
Legal jurisdiction: Slovenia. The controller has configured Slovenia as this website’s legal jurisdiction. Personal-data processing is therefore assessed in particular under the GDPR and applicable Slovenian supplementary law, especially ZVOP-2; ZEKom-2 may additionally apply to electronic communications and terminal-equipment technologies.
1. Controller
Dolga vas 5, 8360 Žužemberk, Slowenien
Email: info@turizem-koren.com
Privacy contact: info@turizem-koren.com
2. Contact for privacy enquiries
Privacy contact: info@turizem-koren.com
3. General information about the processing of personal data
We process personal data only for specific, explicit and lawful purposes and only to the extent necessary for each purpose. In particular, we observe the principles of lawfulness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality.
The data actually processed depend on the functions of our website that you use, the services that have been confirmed and the information you voluntarily provide to us. This may include technical connection and access data, online identifiers, device and browser information, usage data, contact details, form submissions, contract and order data, payment information, communications, and cookie and consent information.
Where processing is based on your consent, optional processing begins only after valid consent has been given. Further information about cookies and similar technologies is available in our Cookie Policy.
4. Analytics and statistics
Analytics and statistics services are used only if they are actually confirmed for this website and, where required, the appropriate consent has been given. Currently confirmed providers are shown dynamically.
5. Recipients and processors
The Service Registry identifies in particular the following providers: Google Ireland Limited / YouTube, Google Ireland Limited
6. Transfers of personal data to third countries
- YouTube: Depending on the service, data may also be processed outside the EEA. The provider’s information and safeguards apply.
- Google Maps: Depending on the service, data may also be processed outside the EEA. The provider’s information and safeguards apply.
7. Retention periods
- Contact enquiries and communications: Until the enquiry has been fully handled and thereafter only where retention, warranty or evidentiary obligations apply.
- External media and embedded content: According to the information provided by the relevant external provider; activation can be withdrawn at any time for the future.
8. Legal bases for processing
- Article 6(1)(b) GDPR where the enquiry concerns a contract or pre-contractual steps
- otherwise Article 6(1)(f) GDPR (legitimate interests), subject to necessity and a balancing test.
- Article 6(1)(a) GDPR (consent)
9. Your rights
These rights apply subject to Articles 15 to 22 GDPR and their respective requirements. Requests may be sent to the privacy contact specified in this policy. Where necessary to securely identify a request, the controller may ask for additional information to verify your identity.
- Access to the personal data processed about you
- Rectification of inaccurate data and completion of incomplete data
- Erasure where the legal requirements are met
- Restriction of processing where the legal requirements are met
- Data portability where Article 20 GDPR applies
- Objection where processing is based on Article 6(1)(e) or (f) GDPR
- Withdrawal of consent at any time with effect for the future where processing is based on consent
- Lodging a complaint with a competent data protection supervisory authority if you believe processing is unlawful
10. Withdrawal of consent
11. Complaint to a data protection supervisory authority
Informacijski pooblaščenec Republike Slovenije
Dunajska cesta 22, 1000 Ljubljana, Slovenija
Email: gp.ip@ip-rs.si
https://www.ip-rs.si/
12. Changes to this Privacy Policy
We may update this Privacy Policy if the purposes of processing, functions, services, providers, technical design of the website or legal requirements change. The date of the latest update is shown at the beginning of this document.
Dynamic sections of this policy may reflect confirmed settings and the PPRO Privacy Service Registry. If a confirmed service is removed or rejected, it will no longer be shown in the dynamic sections. Manually edited legal pages or manually managed content are not automatically overwritten where they are marked as manually edited in PPRO Privacy.