Legal Notice and Cookies

This Personal Data Protection Policy (hereinafter referred to as the "Policy") applies to every individual whose personal data is processed by Jasna Chalet Resort d.o.o..

As the controller of your personal data, Jasna Chalet Resort d.o.o. has prepared this Policy to ensure fair and transparent processing, enabling individuals to obtain all relevant information regarding their personal data in one place.

At Jasna Chalet Resort d.o.o., we respect your privacy and will use your personal data exclusively for the purposes stated in this Policy. We will carefully protect your personal data in accordance with legislation governing personal data protection (especially EU Regulation 2016/679 (hereinafter referred to as "GDPR") and the Personal Data Protection Act – ZVOP-1) and other internal acts of Jasna Chalet Resort d.o.o. that regulate the field of personal data protection.

Personal Data Controller

The personal data controller is Jasna Chalet Resort d.o.o., Lepena 29, 5232 SOČA. If you would like more information or have additional questions regarding the protection of your personal data, you can contact us at info@jasnaresort.com.

Types of Personal Data and Purposes of Processing

Jasna Chalet Resort d.o.o. collects and processes personal data based on the consent of the individuals to whom the personal data relates, and/or for the purposes of performing contracts and pre-contractual measures.

Processing Based on Consent

The processing of personal data may be based on the specific consent of the individual, which allows Jasna Chalet Resort d.o.o. to use their personal data for the purposes defined in the consent, namely for carrying out marketing activities such as informing about offers, news, and benefits, and for sending magazines, brochures, and other promotional material about the offers of Jasna Chalet Resort d.o.o., its associated companies, and its business partners.

Based on consent, Jasna Chalet Resort d.o.o. collects and processes the following personal data:
– from individuals who are consumers: name, surname, email address, phone number, country of residence. We need the country of residence data to send you notifications in the most appropriate language version;
– from individuals who are not consumers (representatives of economic entities): name, surname, email address, and phone number.

We will inform you via the contact details we obtain from you.

Consent is given for the purposes defined in the consent and is valid until revoked. When an individual partially or fully revokes their consent, their data will no longer be used for the purposes for which the revocation was made. If an individual wishes to revoke consent, they can write to us at info@jasnaresort.com. An individual can always "unsubscribe" from receiving specific messages via the communication channel through which they received a particular message. A link to unsubscribe or information on how to unsubscribe is included in the message. We will record the individual's request for revocation in our system and begin implementing it immediately or no later than 15 days after receipt.

If an individual does not provide consent for the aforementioned personal data processing purposes, provides it partially, or (partially) revokes consent, Jasna Chalet Resort d.o.o. will only inform such an individual in cases and to the extent of the given consent, or in ways permitted by applicable law.

The conclusion of a contract for the purchase of products and packages and/or for the reservation of Jasna Chalet Resort apartments is not conditional upon providing consent for marketing activities. Providing consent is voluntary, and if an individual decides not to provide it or later revokes it, this in no way diminishes their rights arising from the contract and does not entail additional costs or aggravating circumstances for them.

Jasna Chalet Resort d.o.o. will process personal data based on the individual's consent in accordance with the last received consent from the individual, regardless of the communication channel through which the individual provided consent.

Processing Based on Contract

Jasna Chalet Resort d.o.o. collects and processes personal data of individuals based on a concluded contract for (i) the purchase of products and arrangements, as defined by the General Terms and Conditions, and (ii) the reservation of Jasna Chalet Resort apartments.

(iii) Jasna Chalet Resort d.o.o. further collects and processes personal data of individuals based on concluded contracts with its business partners. Based on these contracts, Jasna Chalet Resort d.o.o. collects personal data of those individuals who are in any way necessary for the performance of the contract.

Personal data collected on this basis is necessary for the performance of concluded contracts (for the purpose of providing the above-mentioned services and/or products) and for pre-contractual measures. If the aforementioned personal data is not provided, or if the individual to whom it relates does not agree to its processing, the conclusion of the said contracts will not be possible, and we will withdraw from already concluded contracts.

(i) For the purpose of performing the contract for the purchase of products and arrangements, Jasna Chalet Resort d.o.o. collects and processes the following personal data: name, surname, email address, phone number, country of residence, language settings.

(ii) For the purpose of performing the contract for the reservation of Jasna Chalet Resort apartments, Jasna Chalet Resort d.o.o. collects and processes the following personal data from the individual: name, surname, email address, phone number, address, country of residence, language settings.

(iii) For the purpose of performing contracts with its business partners, Jasna Chalet Resort d.o.o. typically collects the following personal data: name, surname, email address, phone number. Based on these contracts, Jasna Chalet Resort d.o.o. may also collect other personal data specified in the individual contract and necessary for its performance.

Jasna Chalet Resort d.o.o. does not collect credit card numbers or other payment card data that the buyer submits via the websites www.jasnaresort.com. This data is collected exclusively by payment card providers.

Users of Personal Data

Users of personal data are employees of Jasna Chalet Resort d.o.o. from the sales, marketing, and IT sectors, as well as contractual processors who are obliged to protect individuals' personal data in accordance with legislation, based on labor law legislation, personal data processing contracts, confidential data protection contracts, and similar agreements.

More detailed information about user categories and contractual processors can be obtained upon request at info@jasnaresort.com.

Contractual Processing of Personal Data

Individual tasks related to individuals' personal data may be entrusted to other persons (contractual processors). Contractual processors may process the entrusted data exclusively on behalf of the provider, within the scope of the provider's authorization (in a written contract or other legal act) and in accordance with the purposes defined in this Policy.

Transfer of Personal Data to Third Countries

Jasna Chalet Resort d.o.o. does not transfer collected personal data to third countries, except when we send you emails via the MailChimp online platform. This online platform stores personal data for sending messages intended to facilitate contract fulfillment (name, surname, email, phone number, country), sending notifications about special offers and news for business users (name, surname, email, phone number, company), and sending notifications about special offers and news for individuals (name, surname, email, phone number, country).
The MailChimp online platform, in its General Terms of Use and Privacy Policy, ensures compliance with GDPR rules and confirms that it has obtained a certificate of compliance with the EU-U.S. Privacy Shield Framework. This can be verified in the list of Privacy Shield Framework participants maintained by the U.S. Department of Commerce and accessible at https://www.privacyshield.gov/list.

Protection of Personal Data

To ensure the protection of personal data, Jasna Chalet Resort d.o.o. implements all necessary legal, organizational, and appropriate logistical-technical procedures and measures, either independently based on internal acts or through its contractual partners, so that:

• premises, equipment, and system software, including input-output units, are protected;
• application software used for processing personal data is protected;
• unauthorized access to personal data during its transfer, including transfer via telecommunication means and networks, is prevented;
• an effective method for blocking, destroying, deleting, or anonymizing personal data is ensured;
• it is possible to subsequently determine when individual personal data was used and entered into the database and by whom, for the period during which the individual data is stored.

Personal Data Retention Period

The personal data retention period depends on the legal basis for processing and the purpose of processing each category of personal data. Personal data is stored only for as long as necessary to achieve the purpose for which it was collected or further processed. After the processing purpose has been fulfilled, personal data is deleted, destroyed, blocked, or anonymized, unless there is another legal basis or if it is necessary for the assertion, exercise, or defense of legal claims.

Personal data processed on the basis of a contract is stored for the period necessary for the execution of the contract and for an additional 5 years after its termination, except in cases where a dispute arises between us and the individual to whom the personal data relates concerning the contract; in such a case, we store the data for an additional 5 years after the finality of a court or arbitration decision or settlement, or, if there was no court dispute, 5 years from the date of amicable resolution of the dispute. Invoices are stored for an additional 10 years after the end of the year to which the invoice relates, in accordance with the law governing value-added tax.

Personal data obtained based on consent for marketing activities is stored until the consent is revoked.

Individual Rights

If an individual wishes to obtain information about all purposes for which Jasna Chalet Resort d.o.o. uses their personal data, they can request this by exercising their right of access. Jasna Chalet Resort d.o.o. will provide them with a precise list of all processing activities of their personal data and their legal basis.

Jasna Chalet Resort d.o.o. ensures that individuals whose personal data it processes have the opportunity to exercise their rights, especially the right to access personal data, and to rectify or erase personal data, as well as the right to object. An individual can submit a request in a manner that allows for their identification (e.g., an oral request recorded at the Jasna Chalet Resort d.o.o. headquarters, or a written request to Jasna Chalet Resort d.o.o., Lepena 29, 5232 SOČA). A copy of the personal data being processed or the requested information must be provided to the individual free of charge. For additional copies requested by the individual, we may charge a reasonable fee based on administrative costs. However, if an individual's requests are clearly unfounded or excessive, especially due to their repetitive nature, we may (1) charge a reasonable fee, taking into account the administrative costs of providing the information or communication or taking the requested action, or (2) refuse to act on the request.

The individual has the right to access their personal data collected concerning them and to easily exercise this right at reasonable intervals to be informed of the processing and verify its lawfulness (right to be informed).

The individual has the right to obtain confirmation from Jasna Chalet Resort d.o.o. as to whether personal data concerning them is being processed, and where that is the case, access to the personal data and the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipient to whom the personal data have been or will be disclosed, the period for which the personal data will be stored, the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the individual or to object to such processing, the right to lodge a complaint with a supervisory authority, where the personal data are not collected from the individual, any available information as to their source, and the existence of automated decision-making.

The individual whose personal data is concerned has the right to obtain from us without undue delay the rectification of inaccurate personal data concerning them (right to rectification). Taking into account the purposes of the processing, the individual has the right to have incomplete personal data completed. The individual whose personal data is concerned has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format (right to data portability). The individual whose personal data is concerned has the right to obtain from us the erasure of personal data concerning them without undue delay in the following cases: (1) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, (2) the individual withdraws consent on which the processing is based and where there is no other legal ground for the processing, (3) the individual objects to the processing and there are no overriding legitimate grounds for the processing, (4) the personal data have been unlawfully processed, (5) when required by law (right to erasure).

The individual whose personal data is concerned has the right to obtain from us restriction of processing of their personal data where one of the following applies: (1) the accuracy of the personal data is contested by the individual, for a period enabling us to verify the accuracy of the personal data, (2) the processing is unlawful and the individual opposes the erasure of the personal data and requests instead the restriction of their use, (3) we no longer need the personal data for the purposes of the processing, but they are required by the individual for the establishment, exercise or defence of legal claims, (4) the individual has objected to processing pending the verification whether the legitimate grounds of the controller override those of the individual (right to restriction of processing). Where processing of personal data has been restricted in accordance with the above, such personal data shall, with the exception of storage, only be processed with the individual's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person. We will inform the individual before the restriction of processing is lifted.

Without prejudice to any other administrative or judicial remedy, the individual whose personal data is concerned has the right (i) to lodge a complaint with Jasna Chalet Resort d.o.o. via email at info@jasnaresort.com regarding the processing of their personal data, and (ii) to lodge a complaint with a supervisory authority (in Slovenia, this is the Information Commissioner) if they consider that the processing of personal data relating to them infringes personal data protection regulations (right to lodge a complaint with a supervisory authority).

Additional Information When Data Is Not Obtained From the Individual

Personal data not directly obtained from the individual is available from Jasna Chalet Resort d.o.o. upon the individual's request. The individual has the right to obtain all available information regarding their source.

Cookies

Cookies that we place in your browser anonymously collect certain information about your website visit. They enable us to ensure the functionality of all website features, tailor certain content specifically for you, and continuously improve the website by analyzing visits.

• Essential Cookies
  Required cookies enable basic functions such as site navigation and access to specific parts of the website. Without these cookies, the website does not provide full functionality to the user. This category also includes cookies designed to adapt the website's behavior or appearance on subsequent visits, for example, to display it in the selected language.

• Statistics Cookies
  Statistics cookies anonymously collect and report information to website owners. This helps them understand how visitors use the website and, based on this information, improve the user experience.
• Marketing and User Profiling Cookies
  Marketing cookies anonymously collect data about your website visits. Advertisers use them to show you more relevant and interesting ads. They are also used to prevent displaying ads that the user has already seen.

A detailed description of each cookie and its placement time can be found in the following table:

Essential Cookies

Required cookies make the website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Statistics Tracking Cookies

Statistics cookies help website owners understand how visitors use their website by anonymously collecting and reporting information.

Marketing Cookies

Marketing cookies are used to track users across websites. The purpose is to display advertisements that are relevant and engaging for the individual user.

III – Validity

This Privacy and Cookie Policy of Jasna Chalet Resort d.o.o. will be updated as needed, and we will inform you accordingly.

This Policy is published on the Jasna Chalet Resort website and is effective from June 5, 2018.