1. About the Privacy Policy
The purpose of the Privacy Policy of Hotel Lonca (hereinafter referred to as the "Privacy Policy") is to inform users of the services of Hotel Lonca and other individuals (hereinafter also referred to as "individuals") about the purposes and basis for processing personal data by Hotel Lonca, Kapucinski trg 9, 4220 Škofja Loka (hereinafter referred to as the "Company"), and about the rights of individuals in this area.
The Company pays special attention to the security of your personal data. All personal data provided is treated confidentially and used only for the purpose for which it was provided. We handle your personal data with the utmost care, in compliance with applicable legislation and the highest standards of handling. The security of your personal data is ensured through appropriate organizational measures, work procedures, advanced technological solutions, and external experts, aiming for the most effective protection of your personal data. We use an appropriate level of protection and reasonable physical, electronic, and administrative measures to safeguard the collected data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data that has been transmitted, stored, or otherwise processed.
This Privacy Policy also clarifies the consent you have provided for the processing of your personal data.
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, GDPR), this Privacy Policy includes the following information:
- contact information of the Company,
- purposes, legal bases, and types of processing of different types of personal data,
- retention periods for different types of personal data,
- rights of individuals regarding personal data processing,
- the right to file a complaint regarding personal data processing,
- validity of the Privacy Policy.
2. Personal Data Collected by the Company
If you are merely a visitor to our website, we only collect data through the use of cookies. If you are a service user or subscriber of the Company's services, we collect other personal data needed to perform the services you have ordered or used. This personal data includes:
- Name and surname,
- Contact email address,
- Contact phone number,
- IP address,
- Data for issuing a proposal based on your inquiry (your address, tax number).
3. Data Controller
The data controller for personal data processed in accordance with this Privacy Policy is Hotel Lonca, Kapucinski trg 9, 4220 Škofja Loka.
4. Categories of Individuals Whose Data is Processed
This Privacy Policy applies to all who have ordered and/or use our services, or submitted an inquiry, as well as those who visit our website.
5. Purposes and Legal Bases for Data Processing
5.1 Processing Based on Contract
The Company processes your personal data to fulfill contractual rights and obligations for purposes such as: identifying the individual, preparing offers, concluding contracts, providing ordered services, notifying about changes, additional details, and usage instructions, resolving potential technical issues, complaints, or objections, billing for services, and other purposes necessary for executing or concluding a contractual relationship between the Company and the individual.
For invoicing services, based on tax regulations, we collect and process your address for proper invoice issuance.
5.2 Processing Based on Law
Based on legitimate interests, we use your personal data for detecting and preventing fraudulent use and misuse of services, ensuring stable and secure operation of our systems and services, implementing IT security measures, meeting service quality requirements, and detecting technical malfunctions of systems and services.
We may also process personal data for enforcement, court, and extrajudicial recovery purposes under legitimate interests.
In case of suspected misuse, the Company may process data about individuals in an appropriate and proportionate scope to identify and prevent possible fraud or abuse and may share this data with other service providers, business partners, police, prosecution, or other competent authorities. For preventing future abuses, data about the history of detected abuses may be retained for five years after the end of the business relationship.
5.3 Processing Based on Consent
Processing can also be based on your consent provided to the Company.
For example, consent may relate to informing you about offers, benefits, and service improvements. Such notifications aim to adapt the services to your needs and preferences. You can withdraw your consent at any time in accordance with the Privacy Policy.
Your latest provided consent remains valid unless revoked.
6. Restrictions on Sharing Personal Data
The Company may delegate certain tasks contributing to our services to other companies or individuals. In such cases, carefully selected external processors may access personal data, bound by a data processing agreement or equivalent arrangement.
Personal data may also be shared with competent state authorities based on a justified legal request.
7. Retention Period for Personal Data
The retention period is determined based on the category of individual data. Data is kept no longer than necessary to achieve its purpose or to comply with statutory requirements.
8. Rights of Individuals Regarding Data Processing
You have the right to:
(i) Access data,
(ii) Rectification,
(iii) Erasure ("Right to be forgotten"),
(iv) Restrict processing,
(v) Data portability,
(vi) Object to processing.