PRIVACY POLICY
1. General Provisions
HOTEL PROJECT GROUP d.o.o. (hereinafter referred to as the “Company”, “we”) respects your privacy and undertakes to process personal data responsibly and in accordance with applicable legislation, including the General Data Protection Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), the Personal Data Protection Act (ZVOP-2), and other applicable regulations of the Republic of Slovenia. This Privacy Policy describes what data we collect, for what purposes, how we protect it, and what your rights are. Please read it carefully before using our website.
2. Data Controller
The controller of personal data provided through our website is: HOTEL PROJECT GROUP, razvoj in upravljanje hotelov, d.o.o., Address: Linhartova cesta 13, 1000 Ljubljana, Slovenia, Registration Number (Matična številka): 8933847000, Tax Number (Davčna številka): 96203536, Contact Phone: +386 51 230 693, Email: info @ hotel-project-group.eu (*remove the spaces).
3. What Data We Collect and Why
We collect personal data in two cases: when you provide it to us, and automatically when you visit our website.
3.1. Data You Provide to Us
When filling out the contact form on our website or when contacting us by email, we may request the following information: first and last name, company name and position, email address, phone number. This data is used exclusively for processing your inquiry, business communication, and for sending information about our services if you have given your consent. The legal basis for processing is the performance of a contract or pre-contractual relations (Article 6(1)(b) GDPR) or your consent (Article 6(1)(a) GDPR). We do not collect or process special categories of personal data (e.g., regarding racial origin, political opinions, health, etc.) without your explicit consent, unless required by law.
3.2. Automatically Collected Data
When you visit our website, we may automatically collect technical information and data about your behaviour to analyse interest in our services and improve the website. This includes: IP address (used to identify your company), browser type and version, operating system, date and time of access, pages you visit and time spent on the site (via cookies and similar technologies). The legal basis for collecting this data is our legitimate interest (Article 6(1)(f) GDPR) in understanding our audience, improving our website and services. We do not use this data to identify specific individuals.
3.3. Cookies
Our website uses cookies to ensure its proper functioning and to collect anonymous statistics to improve the user experience. We use the following categories of cookies: Strictly Necessary – ensure the operation of the website and do not require your consent; Analytical – collect anonymous information about visits (e.g., Google Analytics). These cookies are set only with your consent. You can manage cookie settings in the banner that appears when you first visit the site, or at any time through your browser settings. You may also withdraw your consent at any time. Disabling certain types of cookies may affect the functionality of the website.
4. Legal Bases for Processing
We process your data on the legal bases defined in Article 6(1) GDPR: (a) Consent – for sending marketing materials. You may withdraw your consent at any time; (b) Performance of a Contract – to communicate with you regarding your inquiry; (f) Legitimate Interest – for analysing site behaviour, improving our services, and ensuring the security of our website.
5. How Long We Keep Your Data
We retain your personal data only as long as necessary to fulfil the purposes for which they were collected, or for the period prescribed by the legislation of the Republic of Slovenia (e.g., to comply with accounting record-keeping requirements – up to 10 years). Data collected on the basis of consent is stored until such consent is withdrawn.
6. Data Transfer to Third Parties
We do not transfer your personal data to third parties without your explicit consent, except when necessary to comply with legal requirements or to provide you with the requested services. In some cases, we may use trusted service providers (e.g., for website hosting) who process data strictly on our behalf and in accordance with GDPR requirements.
7. Data Protection
We take all necessary technical and organisational measures to protect your data from unauthorised access, loss, destruction, or disclosure. Access to data is limited to authorised employees of the Company who need it to perform their duties.
8. Your Rights
Under the GDPR and Slovenian legislation, you have the following rights: Right of Access (Article 15 GDPR) – you may request information about what data we process; Right to Rectification (Article 16 GDPR) – you may request correction of inaccurate or incomplete data; Right to Erasure (Article 17 GDPR) – you may request deletion of your data when there are no legal grounds for processing; Right to Restriction of Processing (Article 18 GDPR) – you may request restriction of processing of your data; Right to Object (Article 21 GDPR) – you may object to the processing of data in cases and on grounds specified in this article; Right to Data Portability (Article 20 GDPR) – you may receive your data in a structured, machine-readable format; Right to Withdraw Consent (Article 7(3) GDPR) – if you have given consent to processing, you may withdraw it at any time without retroactive effect. To exercise these rights, please contact us by email at: info @ hotel-project-group.eu (*remove the spaces). We will respond to your request without undue delay and no later than one month from receipt. If we are unable to fulfil your request, we will inform you of the reason.
9. Automated Decisions and Profiling
We do not make decisions that have legal effects on you or similarly significantly affect you based solely on automated data processing, including profiling (Article 22 GDPR).
10. Changes to the Privacy Policy
We may periodically review and update this Privacy Policy. Any changes take effect upon publication on this page. If changes are significant, we may notify you via our website or by email.
11. Complaints and Supervisory Authority
If you believe that our processing of your personal data violates the law, you have the right to lodge a complaint with the supervisory authority of the Republic of Slovenia: Informacijski pooblaščenec (Information Commissioner), Website: www.ip-rs.si.
12. Contact Information
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
HOTEL PROJECT GROUP d.o.o.
Email: info @ hotel-project-group.eu (*remove the spaces)
Phone: +386 51 230 693
Address: Linhartova cesta 13, 1000 Ljubljana, Slovenia.