PRIVACY POLICY

The website www.discover-socavalley.com is managed by Discover Soča Tours – Miha Lapanja s.p., Kanisnka vas 8, 5230 Bovec (hereinafter: DST; also derivatives of “we”).

This privacy policy explains in detail how we use the personal data you provide us when you use the website and when ordering services provided by DST.

WHAT IS PERSONAL DATA

Personal data is information that directly or indirectly identifies you as an individual, where “indirect” means in combination with other information, e.g. with your name, mailing address, email address, telephone number, identification number, location information or other identifiers.

WHAT PERSONAL DATA WE COLLECT

If you are only a visitor to the DST website, we only collect data about you through the use of cookies. If you are a user of DST services (e.g. you have signed up for a tour organized by DST), we also collect other personal data about you that we need to perform the services you have ordered. These personal data are:

• name and surname;
• contact e-mail address;
• contact phone number;
• data for issuing invoices (name and surname, address and postal code and tax number of the legal entity).

HOW DO WE USE (PROCESS) YOUR PERSONAL DATA?

All provided personal data is treated confidentially and is used only for the purpose for which it was provided. DST takes data security very seriously. We use an appropriate level of security and have established reasonable physical, electronic and administrative measures to protect the collected data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure of personal data or from unauthorized access to personal data that has been transferred, stored or otherwise processed. Our information protection policies and procedures are closely aligned with widely accepted international standards and are regularly reviewed and updated as necessary to comply with our business needs, changes in technology and regulatory requirements. Access to your personal data is permitted only to staff, service providers who need this data for business reasons (business “need-to-know”) or those who need it to perform their work.

In the event of a personal data breach, DST will follow all relevant data breach regulations.

If you have ordered the DST service, personal data is collected and processed for the conclusion and implementation of the contract, i.e. to ensure the ordered services and inform about additional details of said services, possible changes, additional details, instructions for using the services or to provide working materials for DST services that are of an educational nature.

In the case of ordering a paid service based on tax regulations, we obtain and process your address and the tax number of legal entities and independent entrepreneurs for the correct issuance of the invoice.

In the case of an order for DST e-news (the so-called newsletter), we process your provided e-mail address and name on the basis of consent for the purpose of general information about all DST services and summaries of news, articles and trainings published on the DST website.

From receiving e-news or you can unsubscribe at any time from receiving notifications about DST services by clicking on the link in the messages you receive or by writing to us at: [email protected].

DST undertakes not to sell, lend or in any other way pass on the data that you provide via the websites or in any other way to third parties, except in the cases listed below and unless the regulations dictate otherwise.

DST will only disclose your personal data to the listed third parties under the conditions set out below, whereby DST will ensure that your personal data will be processed, protected and transferred in accordance with applicable regulations:

External service providers

If necessary, we will authorize other companies and individuals to perform certain tasks that contribute to our services. For example, we may pass on personal data to contractors to host our database and applications, for data processing services or to send information you have requested, to provide support services, etc. We will forward this type of data to external service providers or make them available only to the extent required for a specific purpose. This data will not be used for any other purpose. External DST service providers are contractually obliged to respect the confidentiality of your personal data.

Business transfers

In connection with any reorganization, status transformation, sale or any other transfer of assets (under the collective name “business transfers”), we will transfer the data to a reasonable extent and as necessary for the business transfer, namely on the condition that the receiving party undertakes to respecting your personal data in accordance with the applicable regulations on the protection of personal data. We will continue to maintain the confidentiality of all personal information and notify affected users before personal information becomes subject to a different privacy policy.

Public bodies

We will disclose your personal data to public authorities only in cases where this is required by national legislation or European Union law. DST will e.g. responded to the requests of courts, law enforcement authorities and other state authorities, which may also include state authorities of another EU member state.

LEGITIMATE INTEREST

On the basis of a legitimate interest, we use your personal data to detect and prevent fraudulent use and abuse of services or subscriptions to them, further within the framework of ensuring the stable operation of our system and services, as well as for the purposes of implementing information security measures, meeting requirements related to the quality of services and detecting technical failure of systems and services.

Based on a legitimate interest, we also use your personal data for the purposes of possible executions, judicial and extrajudicial recovery.

YOUR RIGHTS REGARDING YOUR PERSONAL INFORMATION

Individuals can request from DST access to personal data, correction, deletion or restriction of the processing of your personal data, you have the right to object to the processing and portability of your personal data.

The right to be informed: you always have the right to be informed whether personal data is being processed in relation to you and, if so, access to personal data and the following information: (a) purposes of processing; (b) the types of personal data concerned; (c) users or categories of users to whom personal data has been or will be disclosed; (d) the intended period of retention of personal data or, if this is not possible, the criteria used to determine this period; (e) where personal data is not collected from you all available information regarding its source.

Right to rectification: you have the right to correct inaccurate personal data relating to you and, taking into account the purposes of the processing, the right to complete incomplete personal data.

Right to erasure: You have the right to have your personal data erased when one of the following reasons applies:

(a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; (b) when you revoke the consent on the basis of which the processing takes place and when there is no other legal basis for the processing; (c) when you object to the processing and there are no overriding legal grounds for their processing; (d) personal data has been processed unlawfully.

Right to restriction of processing: You have the right to obtain that we restrict the processing of your personal data when one of the following cases applies:

(a) when you dispute the accuracy of the data, namely for a period that allows us to verify the accuracy of the personal data; (b) the processing is illegal, and you object to the deletion of personal data and instead request the restriction of their use; (c) we no longer need your personal data for processing purposes, but you need them to assert, exercise or defend legal claims; (d) if you have objected to processing based on DST’s legitimate interests, until it is verified that our legitimate reasons override your reasons.

When the processing of your personal data has been restricted in accordance with the previous paragraph, such personal data, with the exception of their storage, is processed only with your consent, or for the assertion, implementation or defense of legal claims or for the protection of the rights of another natural or legal person.

We are obliged to inform you before canceling the restriction on the processing of your personal data.

The right to data portability: you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, and the right to transmit this data to another controller when the processing is based on your consent or the processing is carried out by automated means. At your request, when technically feasible, personal data may be transferred directly to another controller.

Right to object: When we process your data on the basis of a legitimate interest for marketing purposes, you can object to such processing at any time.

The right to file a complaint with the Information Commissioner: if we do not decide on your request within the legal deadline or if we reject your request, you have the option of filing a complaint with the Information Commissioner.

ACCESSING AND CORRECTING YOUR PERSONAL INFORMATION AND EXERCISE OTHER RIGHTS

As a user of the DST website or subscriber of DST services, you have the right to check whether DST is processing personal data about you and to access the personal data that we keep about you or are processed (in this case, we will forward them to you in the form of a machine-readable PDF document). You can always request that inaccurate personal data about you be corrected. If you believe that there is no longer a justified reason for further use or inform us about the processing of your personal data, but we may not delete certain personal data that we collect on the basis of the Value Added Tax Act. You also have the right to restrict the use of your personal data in cases where you dispute the accuracy of the personal data, when you assess that the processing is illegal but you do not want deletion, and when the personal data is no longer necessary for the purpose of the processing but you need it to enforce legal claims. In the case of ordering e-newsletters, you have the right to object to the processing of your personal data

In order to possibly exercise your described rights, please send us your request in writing, via email to the address: [email protected]. The responsible person will respond to your request within the prescribed period of 1 month. In case of complexity and a large number of requests, we can extend the deadline by a maximum of two additional months, of which you will be informed.

STORAGE

DST keeps personal data received from you until you unsubscribe from the e-newsletter (withdrawal of consent). DST conducts an audit of existing e-newsletter subscribers once a year, and if you have not opened or read none of your e-newsletters, we will send you an e-mail to renew your consent (e-newsletter subscription) with a 14-day period, otherwise we will delete your personal data and stop sending you e-newsletters.

DST keeps data related to the services provided for one month after the end of the service. After this time, we delete them, unless the law stipulates otherwise. Based on the provisions of the tax regulations, e.g. MP is obliged to keep the accounts containing the personal data of the customer of DST services for 10 years after the service has been provided.

DST will also not delete the data it needs to provide proof that it has deleted data about a person (the so-called audit trail) and to keep records of people who do not want DST to contact them in the future. These data are e-mail address and first and last name.

COOKIES

The amended Act on Electronic Communications (Official Gazette No. 109/2012; hereinafter ZEKom-1), which entered into force at the beginning of 2013, brought new rules regarding the use of cookies and similar technologies for storing information or accessing information stored on the user’s computer or mobile device. Cookies are nothing new, the law only interfered with the method of informing and consenting website users regarding their use.

What is a cookie?

Our website can place a so-called “cookie” in your computer’s browser. Cookies are small text files that give us information about how many times an individual visits our site and what they are interested in during those visits. The cookies themselves do not contain any data that would enable the identification of an individual, but if you provide us with this data yourself, for example by registering, it can be linked to the data stored in the cookie.

You always have the option to accept or reject cookies. Most web browsers automatically accept cookies, which you can change in the settings so that your computer rejects cookies or you receive a warning before a cookie is saved.

For information about cookie settings, click on the name of your browser:

Firefox

Chrome

Internet Explorer

Opera

Safari

Our website uses cookies so that, exclusively for our own needs, we can distinguish between visitors and count their number and thus improve the performance of the site. For this purpose, we use the most widely used tool Google Analytics. You can read more about Google Analytics cookies by clicking on this link.

Our website also uses cookies that provide you with a better user experience by remembering your login or registration on the website, data entered in online forms, products added to the cart, last viewed products and your consent to the use of cookies.

We will not forward the data collected with the help of cookies to third parties.

PRIVACY POLICY CHANGE

DST reserves the right, at its sole discretion, to change its privacy policy and to update and amend this privacy policy at any time. Therefore, we advise you to review this privacy policy regularly. MP will notify you of changes to these Privacy Rules by e-mail only if they are significant changes that affect the processing of personal data.

CONTACT

If you have any questions about the Privacy Policy or the information we hold about you, please email us at: [email protected].

In Bovec on 1/1/2020