This Privacy and Cookies Policy apples to users and the Rohrmann apartments and day trips website as well as subpages.

The user is any legal or individual person who uses or visits the www:rohrmann-apart.com website.

By using the website, the user confirms that he/she agrees with the Privacy and Cookies Policy. By continuing to use the website, the user agrees with the changes.

The Privacy and Cookies Policy describes how the personal data and other information provided by the user on the Rohrmann apartments and day trips website is collected and used.

The Policy may occasionally be amended or updated. To be notified about the changes affecting your personal data, we advised you to visit this website on a regular basis.

I. PERSONAL DATA PROTECTION

Users’ personal data is carefully protected in compliance with the legislation governing personal data protection Regulation (EU) 2016/679 (GDPR) and Personal Data Protection Act – ZVOP-1 and the Privacy and Cookie Policy. The data provided is used solely for the purposes related to our business.

The personal data controller

The personal data controller is the company Medikos d.o.o., Brajnikova ulica 49 Ljubljana, Slovenia which owns the Rohrmann apartments and day trips.

The personal data processor

The personal data controller process data solely for the needs of the company Medikos d.o.o., Brajnikova ulica 49 Ljubljana . This procedure serves the purposes of allowing bookings and booking payments, supporting analytical and marketing services, improving the service and user experience etc.

The personal data processors is not allowed to share the personal data for their own or foreign purposes or to transmit the data to third parties or third countries.

The personal data controller may disclose personal data to law enforcement agencies and other government authorities, if this is conditioned by law or if it is strictly necessary for prevention, detection or prosecution of criminal offenses and fraud.

Personal data collection

The types of personal data collected by us include:

• user’s first name, surname, email address, and country;
• credit card details (credit card type, card holder name, credit card number, expiration date);
• the data related to the guest’s stay, including the date of arrival and departure, special requirements, service preferences (including preferences regarding the room, service or other services used);
• event-related data (first name, surname, company, email address, telephone number, country, event start and end time, duration of the event, number of participants);
• the data provided by the user in the questionnaire, including the user’s IP address;
• an email address to be used for sending information about promotions and special offers via an e-newsletter.

All the data received will be used solely for communication regarding the provision of our services, for managing and editing online bookings, for providing customer support and for advertising activities within the framework of legislation.

Personal Data Protection

In order to ensure the protection of personal data, we carry out all the necessary legal, organizational and appropriate logistical-technical procedures and measures.

We make sure unauthorized persons are prevented access to the personal data, the premises, the equipment and the software where the data is stored.

We guarantee an effective way of blocking, disposing of, erasing or anonymizing personal data.

We allow for subsequent determination of when individual items of personal data were used and entered into the database, and who this was done by. This applies to the period during which individual items of data are stored.

Personal Data Retention Period

Individuals’ personal data can be processed and stored in accordance with the lawful basis, i.e. for as long as there is a purpose for its processing and storage, or until the individual’s consent has been withdrawn. Based on the user’s written consent withdrawal, the data is erased. All the personal data retained is part of this Privacy Notice.

Google, as a third-party database, has its own data storage system. You can read more about this in the Third-Party Privacy Policy.

Individual’s rights

In accordance with the applicable legislation governing personal data protection, the individual is entitled to withdraw the given consent at any time, to request access, rectification, restriction of personal data processing or erasure of personal data by informing us about this in writing by mail to Medikos d.o.o., Brajnikova ulica 49 Ljubljana, or by emailing sasa.kos@rohrmann-apart.com. The individual may also make a complaint concerning the processing of his/her personal data and address it to the above address.

The individual may also lodge a complaint concerning the processing of his/her personal data directly with the competent supervisory authority, i.e. the Information Commissioner of the Republic of Slovenia.

Dealing with Violations

In the event of personal data protection violations, we will promptly implement all internal and external measures (technical, organizational) for the protection of individual’s rights and interests. We will inform each of the affected persons, as well as the competent supervisory authority in the Republic of Slovenia about this.individual