The website www.discover-socavalley.com is managed by Discover Soča Tours – Miha Lapanja s.p., Kanisnka vas 8, 5230 Bovec (hereinafter: DST; also derivatives of “we”).
WHAT IS PERSONAL DATA
Personal data is information that directly or indirectly identifies you as an individual, where “indirect” means in combination with other information, e.g. with your name, mailing address, email address, telephone number, identification number, location information or other identifiers.
WHAT PERSONAL DATA WE COLLECT
HOW DO WE USE (PROCESS) YOUR PERSONAL DATA?
All provided personal data is treated confidentially and is used only for the purpose for which it was provided. DST takes data security very seriously. We use an appropriate level of security and have established reasonable physical, electronic and administrative measures to protect the collected data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure of personal data or from unauthorized access to personal data that has been transferred, stored or otherwise processed. Our information protection policies and procedures are closely aligned with widely accepted international standards and are regularly reviewed and updated as necessary to comply with our business needs, changes in technology and regulatory requirements. Access to your personal data is permitted only to staff, service providers who need this data for business reasons (business “need-to-know”) or those who need it to perform their work.
In the event of a personal data breach, DST will follow all relevant data breach regulations.
If you have ordered the DST service, personal data is collected and processed for the conclusion and implementation of the contract, i.e. to ensure the ordered services and inform about additional details of said services, possible changes, additional details, instructions for using the services or to provide working materials for DST services that are of an educational nature.
In the case of ordering a paid service based on tax regulations, we obtain and process your address and the tax number of legal entities and independent entrepreneurs for the correct issuance of the invoice.
In the case of an order for DST e-news (the so-called newsletter), we process your provided e-mail address and name on the basis of consent for the purpose of general information about all DST services and summaries of news, articles and trainings published on the DST website.
From receiving e-news or you can unsubscribe at any time from receiving notifications about DST services by clicking on the link in the messages you receive or by writing to us at: [email protected].
DST undertakes not to sell, lend or in any other way pass on the data that you provide via the websites or in any other way to third parties, except in the cases listed below and unless the regulations dictate otherwise.
DST will only disclose your personal data to the listed third parties under the conditions set out below, whereby DST will ensure that your personal data will be processed, protected and transferred in accordance with applicable regulations:
External service providers
If necessary, we will authorize other companies and individuals to perform certain tasks that contribute to our services. For example, we may pass on personal data to contractors to host our database and applications, for data processing services or to send information you have requested, to provide support services, etc. We will forward this type of data to external service providers or make them available only to the extent required for a specific purpose. This data will not be used for any other purpose. External DST service providers are contractually obliged to respect the confidentiality of your personal data.
We will disclose your personal data to public authorities only in cases where this is required by national legislation or European Union law. DST will e.g. responded to the requests of courts, law enforcement authorities and other state authorities, which may also include state authorities of another EU member state.
On the basis of a legitimate interest, we use your personal data to detect and prevent fraudulent use and abuse of services or subscriptions to them, further within the framework of ensuring the stable operation of our system and services, as well as for the purposes of implementing information security measures, meeting requirements related to the quality of services and detecting technical failure of systems and services.
Based on a legitimate interest, we also use your personal data for the purposes of possible executions, judicial and extrajudicial recovery.
YOUR RIGHTS REGARDING YOUR PERSONAL INFORMATION
Individuals can request from DST access to personal data, correction, deletion or restriction of the processing of your personal data, you have the right to object to the processing and portability of your personal data.
The right to be informed: you always have the right to be informed whether personal data is being processed in relation to you and, if so, access to personal data and the following information: (a) purposes of processing; (b) the types of personal data concerned; (c) users or categories of users to whom personal data has been or will be disclosed; (d) the intended period of retention of personal data or, if this is not possible, the criteria used to determine this period; (e) where personal data is not collected from you all available information regarding its source.
Right to rectification: you have the right to correct inaccurate personal data relating to you and, taking into account the purposes of the processing, the right to complete incomplete personal data.
Right to erasure: You have the right to have your personal data erased when one of the following reasons applies:
(a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; (b) when you revoke the consent on the basis of which the processing takes place and when there is no other legal basis for the processing; (c) when you object to the processing and there are no overriding legal grounds for their processing; (d) personal data has been processed unlawfully.
Right to restriction of processing: You have the right to obtain that we restrict the processing of your personal data when one of the following cases applies:
(a) when you dispute the accuracy of the data, namely for a period that allows us to verify the accuracy of the personal data; (b) the processing is illegal, and you object to the deletion of personal data and instead request the restriction of their use; (c) we no longer need your personal data for processing purposes, but you need them to assert, exercise or defend legal claims; (d) if you have objected to processing based on DST’s legitimate interests, until it is verified that our legitimate reasons override your reasons.
When the processing of your personal data has been restricted in accordance with the previous paragraph, such personal data, with the exception of their storage, is processed only with your consent, or for the assertion, implementation or defense of legal claims or for the protection of the rights of another natural or legal person.
We are obliged to inform you before canceling the restriction on the processing of your personal data.
The right to data portability: you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, and the right to transmit this data to another controller when the processing is based on your consent or the processing is carried out by automated means. At your request, when technically feasible, personal data may be transferred directly to another controller.
Right to object: When we process your data on the basis of a legitimate interest for marketing purposes, you can object to such processing at any time.
The right to file a complaint with the Information Commissioner: if we do not decide on your request within the legal deadline or if we reject your request, you have the option of filing a complaint with the Information Commissioner.
ACCESSING AND CORRECTING YOUR PERSONAL INFORMATION AND EXERCISE OTHER RIGHTS
As a user of the DST website or subscriber of DST services, you have the right to check whether DST is processing personal data about you and to access the personal data that we keep about you or are processed (in this case, we will forward them to you in the form of a machine-readable PDF document). You can always request that inaccurate personal data about you be corrected. If you believe that there is no longer a justified reason for further use or inform us about the processing of your personal data, but we may not delete certain personal data that we collect on the basis of the Value Added Tax Act. You also have the right to restrict the use of your personal data in cases where you dispute the accuracy of the personal data, when you assess that the processing is illegal but you do not want deletion, and when the personal data is no longer necessary for the purpose of the processing but you need it to enforce legal claims. In the case of ordering e-newsletters, you have the right to object to the processing of your personal data
In order to possibly exercise your described rights, please send us your request in writing, via email to the address: [email protected]. The responsible person will respond to your request within the prescribed period of 1 month. In case of complexity and a large number of requests, we can extend the deadline by a maximum of two additional months, of which you will be informed.
DST keeps personal data received from you until you unsubscribe from the e-newsletter (withdrawal of consent). DST conducts an audit of existing e-newsletter subscribers once a year, and if you have not opened or read none of your e-newsletters, we will send you an e-mail to renew your consent (e-newsletter subscription) with a 14-day period, otherwise we will delete your personal data and stop sending you e-newsletters.
DST keeps data related to the services provided for one month after the end of the service. After this time, we delete them, unless the law stipulates otherwise. Based on the provisions of the tax regulations, e.g. MP is obliged to keep the accounts containing the personal data of the customer of DST services for 10 years after the service has been provided.
DST will also not delete the data it needs to provide proof that it has deleted data about a person (the so-called audit trail) and to keep records of people who do not want DST to contact them in the future. These data are e-mail address and first and last name.
What is a cookie?
Our website can place a so-called “cookie” in your computer’s browser. Cookies are small text files that give us information about how many times an individual visits our site and what they are interested in during those visits. The cookies themselves do not contain any data that would enable the identification of an individual, but if you provide us with this data yourself, for example by registering, it can be linked to the data stored in the cookie.
You always have the option to accept or reject cookies. Most web browsers automatically accept cookies, which you can change in the settings so that your computer rejects cookies or you receive a warning before a cookie is saved.
For information about cookie settings, click on the name of your browser:
We will not forward the data collected with the help of cookies to third parties.
In Bovec on 1/1/2020