Personal data protection

 

Privacy protection

When you access our site, your browser downloads some information on our web server. The reasons for this transfer are technical, but it is also necessary because you can access the information you want. In order to ensure the security of our information system, we automatically collect information on your IP address, the date and time of access, the time zone difference compared to Greenwich time (GMT), the content of the request (specific page), the access status i.e. the HTTP status code, the amount of data downloaded, the web page requesting access and your browser (the browser software operating system version, language settings). Without giving us at least your IP address, which will be recorded in the online log, you cannot use our site.

We collect the above data to ensure the security of the network and information, in order to prevent accidental, illegal or harmful acts. The processing is therefore necessary for our legitimate interests and is based on Article 6 (f) of the General Data Protection Regulation (GDPR).

Personal data will be kept in the online log for up to 6 months, then we will delete the information if we do not have another legitimate reason for further processing.

Contacts

The personal data manager is: PRS Gostilna in mesnica Malovec Valter Mmalovec S.P.., Kraška cesta 30A, 6215 Divača, Slovenia, telephone: +386 (0) 5 76 33 333, e-mail: info@hotel-malovec.si. The collected personal data will be processed by our employees and our personnel who perform tasks in ensuring the functioning of the web pages.

Right to access data

You have the right to check whether we collect personal information, and, in this case, you also have the right to access this information.

If, as an individual, you wish to check whether we collect personal information, you can request it in writing by e-mail or in writing by post.

Right to cancel (“right to forget”)

You have the right to obtain the cancellation of personal data relating to you without undue delay and we, as responsible, we have the obligation, without undue delay, to delete your personal data in the following cases:

Cancellation is not performed if processing of personal data is necessary:

  • you oppose the processing of data (see the right to object),
  • personal data have been processed illegally,
  • personal data must be deleted to meet regulatory requirements,
  • to meet the legal obligations of processing on the basis of regulations,
  • to apply, implement or defend legal reimbursements.

If as individuals you want us to delete your personal information, you can request it in writing by e-mail or in writing by post. You can exercise the right to cancel only in the limited cases listed above.

Right of rectification

You have the right, without undue delay, to request the correction of your inaccurate personal data.

In conformity with the treatment, you have the right to complete incomplete personal information, including the submission of an additional declaration.

If as individuals you wish to have your personal data corrected, you can request it in writing by e-mail or in writing by post.

Right to limit processing

You have the right to request limited treatment of your personal data in case of:

If you request a restriction for the reasons listed, your data can only be stored, and all other processing methods can only be performed:

  • if you contest the accuracy of the data, for a period that allows us to verify the accuracy of personal data,
  • if the processing is illegal and you are opposed to the deletion of personal data, and instead request restrictions on their use,
  • when we no longer need your personal data for processing purposes, but you need it to apply, implement or defend legal reimbursements,
  • if an objection regarding treatment has been submitted until it is established, or our legitimate reasons are beyond your reasoning,
  • with your consent,
  • to apply, implement or defend legal reimbursements,
  • for the protection of the rights of another natural or legal person, or
  • in case the Union or a Member State shows a notable public interest.

Before canceling (i.e. terminating) the restrictions on processing personal data we must provide you with a notification of the revocation of the restriction.

If we have rejected your request for data cancellation, or you just want to limit the processing of your personal data, you can request the limitation of your personal data in writing by e-mail or by post. It is possible to exercise the right to limit the processing of data only in the limited cases listed above.

Right to download data

You can download the data you have provided and that we have collected during your use of the service. You can request data in a transferable form personally at our office.

Right of appeal to the supervisory authority

Without prejudice to any other administrative or judicial remedy, you are entitled to lodge a complaint with the Supervisory Authority, in particular in the Member State where you are resident, where your place of work is located or where the alleged infringement occured, if you think that the processing of personal data in relation to you violates the General Data Protection Regulation.

The supervisory authority with which the complaint was submitted will inform the state of affairs and the decision on the complaint, including the possibility of a legal remedy pursuant to Article 78 of the General Data Protection Regulation.

As a subject of data, you have the right to file a complaint with:

Republika Slovenija (Republic of Slovenia), Informacijski pooblaščenec (Information Commissioner), Zaloška 59, 1000 Ljubljana, Slovenia, telephone: +386 (0) 1 230 97 30, e-mail: gp.ip@ip-rs.si .

The Information Commissioner will inform you of the status of the matter and his decision on the appeal in accordance with the regulations.

Personal data processors

The web hosting is provided by our processor.

Sharing of personal data

We will not transfer personal data to third parties or third countries, except in cases provided by law, which refers in particular to cases where information is requested by authorized persons or bodies.