Legal notice and cookies

This Personal Data Protection Policy (hereinafter referred to as the "Policy") applies to each individual whose personal data is processed by Jasna Chalet Resort d.o.o..

Jasna Chalet Resort d.o.o., as the controller of your personal data, has drawn up this Policy in order to implement the principle of fair and transparent processing, which enables the individual to obtain all relevant information relating to his or her personal data in one place.

At Jasna Chalet Resort d.o.o. we respect your privacy and will use your personal data only for the purposes set out in this Policy. We will carefully protect your personal data in accordance with the legislation governing the protection of personal data (in particular EU Regulation 2016/679 (hereinafter referred to as the "GDPR") and the Personal Data Protection Act - ZVOP-1) and other internal acts of Jasna Chalet Resort d.o.o.. governing the protection of personal data.

Controller of personal data

The data controller is Jasna Chalet Resort d.o.o. Lepena 29, 5232 SOČA. If you would like more information or have further questions regarding the protection of your personal data, please contact us atinfo@jasnaresort.com.

Types of personal data and purposes of processing

Jasna Chalet Resort d.o.o. collects and processes personal data on the basis of the data subjects' consent and/or for the purposes of the performance of contracts and pre-contractual measures.

Processing based on consent

The processing of personal data may be based on the individual's specific consent, which allows Jasna Chalet Resort d.o.o. to use his/her personal data for the purposes specified in the consent, namely to carry out marketing activities, such as informing about offers, news and benefits, to send magazines, brochures and other promotional material about the offer of Jasna Chalet Resort d.o.o., its affiliated companies and its business partners.

On the basis of consent, Jasna Chalet Resort d.o.o. collects and processes the following personal data:
- from individuals who are consumers: first name, last name, email address, telephone number, country of residence. We need the country of residence in order to send you notifications in the most appropriate language version;
- from non-consumer individuals (company representatives): name, surname, email address and telephone number.

We will keep you informed via the contact details we obtain from you.

Consent is given for the purposes specified in the consent and is valid until revoked. Once the individual withdraws his or her consent in part or in full, we will no longer use his or her data for the purposes for which he or she has withdrawn it. If the individual wishes to withdraw consent, he or she may contact us atinfo@jasnaresort.com. An individual can always "opt-out" of receiving individual communications through the communication channel through which he or she received a particular communication. The link to unsubscribe or information on how to unsubscribe can be found in the communication. We will record the individual's request to opt-out in our system and will start to implement it immediately or, at the latest, 15 days after receipt.

In the event that the data subject does not give consent to the purposes of processing of personal data listed above, gives consent in part or withdraws consent (in part), Jasna Chalet Resort d.o.o. will only inform such data subject in the cases and to the extent of the consent given or in the ways permitted by applicable law.

The conclusion of a contract for the purchase of products and arrangements and/or for the reservation of Jasna Chalet Resort apartments is not conditional upon consent to the performance of marketing activities. Consent is given voluntarily and if the individual decides not to give consent or subsequently withdraws it, this shall in no way diminish his/her rights under the contract and shall not constitute an additional cost or aggravating circumstance for him/her.

Jasna Chalet Resort d.o.o. will process personal data on the basis of the consent of the data subject in accordance with the last consent received from the data subject, regardless of the communication channel through which the data subject gave the consent.

Processing on the basis of a contract

Jasna Chalet Resort d.o.o. collects and processes personal data of individuals on the basis of a contract concluded for (i) the purchase of products and arrangements as defined in the General Terms and Conditions and (ii) the reservation of Jasna Chalet Resort apartments.

(iii) Jasna Chalet Resort d.o.o. further collects and processes personal data of individuals on the basis of contracts concluded with its business partners. On the basis of these contracts, Jasna Chalet Resort d.o.o. collects the personal data of those individuals which are in any way necessary for the performance of the contract.

The personal data collected on this basis is necessary for the purposes of the performance of the contracts concluded (for the purpose of the provision of the services and/or products referred to above) and the pre-contractual measures. If the above personal data is not provided or the data subject does not consent to its processing, the conclusion of the above contracts will not be possible and the contracts already concluded will be withdrawn from.

(i) For the purpose of the performance of the contract for the purchase of products and arrangements, Jasna Chalet Resort d.o.o. collects and processes the following personal data: first name, last name, email address, telephone number, country of residence, language preferences.

(ii) For the purposes of the Jasna Chalet Resort apartment reservation contract, Jasna Chalet Resort d.o.o. collects and processes the following personal data from the individual: first name, last name, email address, telephone number, address, country of residence, language preferences.

(iii) For the purpose of the performance of the contract with its business partners, Jasna Chalet Resort d.o.o. collects the following personal data as a rule: name, surname, e-mail address, telephone number. On the basis of these contracts, Jasna Chalet Resort d.o.o. may also collect other personal data that are specified in the individual contract and are necessary for the performance of this contract.

Jasna Chalet Resort d.o.o. does not collect payment card numbers and other information relating to payment cards provided by the customer via the www.jasnaresort.com website. This data is collected exclusively by payment card payment providers.

Users of personal data

The users of personal data are employees of Jasna Chalet Resort d.o.o. from the sales, marketing and IT sectors and contractual processors who are obliged to protect the personal data of individuals in accordance with the law on the basis of employment legislation, personal data processing contracts, confidentiality agreements, etc.

More detailed information on the categories of users and contractual processors can be obtained on request frominfo@jasnaresort.com.

Contractual processing of personal data

We may entrust other persons (contractual processors) with specific tasks relating to the personal data of individuals. The contractual processors may process the entrusted data exclusively on behalf of the provider, within the limits of the provider's authorisation (in a written contract or other legal act) and in accordance with the purposes defined in this Policy.

Transfers of personal data to third countries

Jasna Chalet Resort d.o.o. does not transfer the personal data collected to third countries, except when we send you emails via the MailChimp online platform. Personal data is stored in this online platform for the purpose of sending messages to facilitate the performance of a contract (first name, last name, e-mail, telephone number, country), sending notifications of special offers and news for business users (first name, last name, e-mail, telephone number, company) and sending notifications of special offers and news for individuals (first name, last name, e-mail, telephone number, country).
In its General Terms of Use and Privacy Policy, the MailChimp online platform ensures compliance with the rules of the GDPR and confirms that it has obtained a certificate of compliance with the EU-U.S. Privacy Shield Framework (EU-U.S. Privacy Shield Framework). The latter can be verified by consulting the Privacy Shield compliance certificate holder registry maintained by the U.S. Department of Commerce and available at https://www.privacyshield.gov/list.

Protection of personal data

To ensure the protection of personal data, Jasna Chalet Resort d.o.o. implements all necessary legal, organisational and appropriate logistical and technical procedures and measures, either on the basis of its own internal acts or through its contractual partners, so that:

• protect premises, equipment and system software, including I/O units;
• protect the application software used to process personal data;
• prevent unauthorised access to personal data in the course of their transmission, including transmission by telecommunications means and networks;
• provide an effective means of blocking, destroying, erasing or anonymising personal data;
• allows the subsequent identification of when personal data have been used and entered in the database and by whom, for the period for which the data are stored.

Retention period of personal data

The period of retention of personal data depends on the basis of the processing and the purpose of the processing of each category of personal data. Personal data shall be kept only for as long as is necessary to achieve the purpose for which they were collected or further processed. Personal data shall be erased, destroyed, blocked or anonymised after the purpose of the processing has been fulfilled, unless there is another legal basis or if necessary for the establishment, exercise or defence of legal claims.

We retain personal data processed on the basis of a contract for the period necessary for the performance of the contract and for 5 years after its termination, except in cases where there is a dispute between us and the data subject in relation to the contract, in which case we retain the data for 5 years after the final judgment or arbitral award or settlement, or, if there has been no dispute, for 5 years from the date of amicable settlement of the dispute. Invoices shall be kept for 10 years after the end of the year to which the invoice relates in accordance with the law governing value added tax.

Personal data obtained on the basis of consent for the purpose of carrying out marketing activities will be stored until the consent is withdrawn.

Individual rights

If the data subject wishes to obtain information on all the purposes for which his or her personal data are used by Jasna Chalet Resort d.o.o., he or she may do so by exercising the right of access. Jasna Chalet Resort d.o.o. will provide him or her with a detailed list of all the processing of his or her personal data and the legal basis for such processing.

Jasna Chalet Resort d.o.o. ensures that individuals whose personal data it processes are able to exercise their rights, in particular the right of access to personal data and the right to rectification or erasure of personal data, as well as the right to object. The data subject may make a request in a manner which permits identification (e.g. by means of an oral request on the record at the registered office of Jasna Chalet Resort d.o.o., or by sending a written request to Jasna Chalet Resort d.o.o., Lepena 29, 5232 SOČA. A copy of the personal data processed or the information requested must be provided to the individual free of charge. We may charge a reasonable fee for additional copies requested by the individual, taking into account administrative costs. However, where the individual's requests are manifestly unfounded or excessive, in particular because they are repetitive, we may (1) charge a reasonable fee, taking into account the administrative costs of providing the information or communication or taking the action requested, or (2) refuse to act on the request.

The data subject shall have the right of access to his or her personal data collected in relation to him or her and to the easy exercise of that right at reasonable intervals in order to obtain information about the processing and to verify its lawfulness (right of access).

The individual has the right to receive from Jasna Chalet Resort d.o.o.. to obtain confirmation as to whether personal data concerning him or her are being processed and, if so, access to personal data and the following information: the purpose of the processing, the types of personal data concerned, the users or categories of user to whom the personal data have been or will be disclosed, the period of retention of the personal data, the existence of the right to request the controller to rectify or erase the personal data or to restrict the processing of the personal data concerning the data subject, or the existence of the right to object to such processing, the right to lodge a complaint with a supervisory authority where the personal data have not been collected from the data subject, any available information concerning their source and the existence of automated decision-making.

The data subject shall have the right to obtain the rectification of inaccurate personal data concerning him or her without undue delay (right of rectification). The data subject shall have the right to have incomplete personal data completed, taking into account the purposes of the processing. The data subject shall have the right to receive personal data concerning him or her, which he or she has in the controller's possession, in a structured, commonly used and machine-readable format (right to data portability). The data subject has the right to obtain the erasure of personal data concerning him or her without undue delay in the following cases: (1) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, (2) the data subject withdraws the consent on the basis of which the processing is carried out and there is no other lawful basis for the processing, (3) the data subject objects to the processing and there are no overriding legitimate grounds for the processing, (4) the personal data have been unlawfully processed, (5) where required to do so by law (right to erasure).

The data subject has the right to obtain the restriction of the processing of his or her personal data where one of the following applies: (1) the data subject contests the accuracy of the data for a period of time which enables us to verify their accuracy, (2) the processing is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of their use, (3) we no longer need the personal data for the purposes of the processing but the data subject needs them for the establishment, exercise or defence of legal claims, (4) the data subject has lodged an objection to processing of the data, pending verification whether the legitimate grounds of the controller override those of the data subject (right to restriction of processing). Where the processing of personal data has been restricted in accordance with the foregoing, such personal data shall, with the exception of their storage, be processed only with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person. We will inform the data subject before revoking the restriction of processing.

Without prejudice to any other legal remedy, the data subject shall have the right (i) to lodge a complaint concerning the processing of personal data concerning him or her with Jasna Chalet Resort d.o.o. via the e-mail addressinfo@jasnaresort.com and (ii) to lodge a complaint with a supervisory authority (in Slovenia, the Information Commissioner) if he or she considers that the processing of personal data concerning him or her infringes the provisions on the protection of personal data (right to lodge a complaint with a supervisory authority).

Additional information where the data is not obtained from the individual

Personal data not directly collected from the data subject shall be made available to Jasna Chalet Resort d.o.o. upon request. The individual has the right to obtain all available information concerning its source.

Cookies

The cookies we place on your browser collect certain information about your visit to the website on an anonymous basis. They enable us to ensure that all of the website's features work, to tailor certain content specifically for you and to continuously improve the website by analysing your visit.

• Strictly necessary cookies
  Strictly necessary cookies enable basic functions such as navigation through the website and access to specific parts of the website. Without these cookies, the website does not provide the user with full functionality. We also include cookies that are used to adapt the behaviour or appearance of the website on subsequent visits, for example to display it in the language of your choice.

• Statistics cookies
  Statistics cookies collect and report information anonymously to website owners. This helps them to understand how visitors use the website and to improve the user experience based on this information.
• Cookies for advertising and user profiling
  Marketing cookies collect information about your visits to websites on an anonymous basis. They are used by advertisers to show you ads that are more relevant and interesting to you. They are also used to prevent you from being shown advertisements that you have already seen.

The exact description of each cookie and the time of its placement can be seen in the following table:

Cookies required

The cookies requested make the website usable by enabling basic functions such as site navigation and access to secure areas of the website. The website does not function properly without these cookies.

Cookies for monitoring statistics

Statistics cookies help website owners understand how visitors use the website by collecting and reporting information anonymously.

Cookies for marketing

Marketing cookies are used to track users through websites. The purpose is to serve ads that are relevant and interesting to the individual user.

III - Validity

We will update this Jasna Chalet Resort d.o.o. Privacy and Cookie Policy as necessary and will notify you accordingly.

This Policy is published on the Jasna Chalet Resort website and is effective from 5 June 2018.