The Public Institute of Ljubljana Tourism, Krekov trg 10, 1000 Ljubljana, Slovenia (hereinafter referred to as “Ljubljana Tourism”), respects your privacy and the protection of your personal information. We are aware of the responsibility of personal information management of the visitors to the Ljubljana Tourism websites and every individual who reveals personal information upon contact (hereinafter: “Users”). We undertake to use the personal information of the users solely for the purposes which are defined in this Privacy Policy.
Your personal information is protected with due diligence and in pursuant to the General Data Protection Regulation – GDPR (Regulation (EU) 2016/679 of the EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC) (hereinafter: GDPR) and any other legal regulation from the field of personal information protection.
The Ljubljana Tourism collects and processes the following personal information considering the consent of individuals:
- data included in some of the cookies. More on cookies and how to manage them is available at theCookies.
- Name, surname and e-mail address. (Only in case of a prize campaign, if necessary. Terms and conditions and the purpose of such data for an individual prize campaign are issued separately.)
The Ljubljana Tourism collects solely the personal information which are necessary to achieve a certain objective.
The data is processed by the Ljubljana Tourism based on the consent and with the purpose for which the consent was submitted. The individual whose information we have can at all times revoke the submitted consent for each individual purpose separately; the process is simple and accessible.
The Ljubljana Tourism uses personal information for:
- online advertising and social networks,
- any other purposes with which you specifically agree by collaborating with the Ljubljana Tourism.
For data analysis and sending e-mails, we use online tools, such as Google Analytics, Facebook and MailChimp etc., which guarantee their General Terms and Conditions of Use and Privacy Policy are in accordance with the General Data Protection Regulation (GDPR) and confirm that they have acquired the compliance certificate with the privacy shield (EU-U.S. Privacy Shield Framework). We do not use personal information in the Google Analytics tools, only anonymous data and masked IP addresses.
Your personal information is also processed when requested by the law. An example of such processing is the treatment of your personal information for the needs of judicial and administrative procedures.
Your personal information is accessed solely by the employees of the Ljubljana Tourism company and the processors of personal information, who have been indirectly authorised. The authorised person for the protection of personal information at the Public Institute of Tourism Ljubljana (javni zavod Turizem Ljubljana) is Katja Hrvatin Rakar, available at the following e-mail katja.hrvatin@visitljubljana.si.
The Ljubljana Tourism collaborates with the advertising agency F2 d.o.o., Poljanska cesta 6, 1000 Ljubljana, Slovenia, for the intention of processing and storing personal information. The Ljubljana Tourism shall never disclose your personal information to unauthorised third parties.
The personal information you have trusted us based on your personal and explicit consent and forwarded by collaborating in a prize campaign, by sending us an e-mail or in any other way, is stored pursuant to the storage deadlines, which are published in each general terms and conditions of the prize campaigns or until cancellation. The consent for collecting and processing personal information can be cancelled at all times. The cancellation of the consent does not affect the legality of the collecting and gathering data prior to the cancellation of the consent. All other information within the contractual collaboration is stored pursuant to the valid legislation.
Personal information is stored digitally. Our computer systems are protected with technical and organisational measures, preventing unintentional or illegal destruction, loss, change or unauthorised disclosure or access to your personal information.
The archived information is stored on safe servers until your cancellation, and no longer than the maximum storage period.
Your Rights
We gladly inform you of your rights as an “individual” from the General Data Protection Regulation (GDPR). As an individual, you have the following rights arising from the personal information protection and pursuant to the General Data Protection Regulation:
- Right of access by the data subject (Paragraph 1 and 2 of Article 15 of the GDPR)
- Right to rectification (Article 16 of the GDPR) or Right to erasure (Article 17 of the GDPR)
- Right to restriction of processing (Article 18 of the GDPR)
- Right to data portability (Article 20 of the GDPR)
- Right to object (Article 20 of the GDPR)
- Right to withdraw (Paragraph 3 of Article 7 of the GDPR)
- Right to lodge a complaint with a supervisory authority (Article 77 of the GDPR)
Right of access by the data subject
You have the right to obtain confirmation whether Ljubljana Tourism is processing your personal information, and if affirmative, you have the right of access to your personal information and the following information regarding the processing of personal information:
- the purpose of processing,
- types of personal information,
- users or user categories which had been or will be disclosed your personal information, especially users in third countries or international organisations,
- when possible, the estimated period of archiving the personal information,
- the existence of the right to request a change or deletion of personal information from the processor or a limitation of the treatment of the personal information regarding the user from which the personal information arises, or the existence of the right to refuse such treatment,
- the right to lodge a complaint with a supervisory authority,
- when the personal information is not collected from the user, all available information regarding the source,
- the existence of an automated decision making, including designing profiles and reasonable information on its purpose, as well as meaning and foreseen consequences of such processing for the user.
Based on your request, the Ljubljana Tourism shall guarantee you one free-of-charge copy of your personal information under treatment. Any additional copies of the information you would request, are charged a reasonable fee considering the administrative costs by the Ljubljana Tourism.
Right to rectification
You have the right to request to rectify inaccurate personal information on your behalf without any unnecessary delay. Regarding the intentions of processing, you have the right to supplement the incomplete personal information, including a submission of additional declaration.
Right to erasure (‘right to be forgotten’)
You have the right to obtain from the controller the erasure of personal data concerning you without undue delay, and the Ljubljana Tourism shall have the obligation to erase personal data without undue delay in the following examples:
- the personal information is no longer necessary in relation to the purposes for which they were collected or otherwise processed,
- when you withdraw the consent on which the processing is based, and where there is no other legal ground for the processing,
- when you object to the processing pursuant to legal interest of the controller and there are no overriding legitimate grounds for the processing,
- when you refuse the processing for the needs of direct advertising,
- when the personal information has to be erased for compliance with a legal obligation in the European Union or Slovenian law.
When the Ljubljana Tourism has made your personal data public in accordance with their Policy, they are obligated to take reasonable steps, including technical measures, to inform controllers which are processing the personal information that you have requested the erasure of any links to, or copies of, the personal information.
Right to restriction of processing
You have the right to obtain from the Ljubljana Tourism restriction of processing, where one of the following applies:
- the accuracy of the personal information is contested by yourself, for a period enabling the controller to verify the accuracy of the personal data,
- the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead,
- the Ljubljana Tourism no longer needs the personal data for the purposes of the processing, but they are required by yourself for the establishment, exercise or defence of legal claims,
- you have lodged a complaint regarding the processing until it is verified whether the legitimate grounds of the controller override yours.
Right to data portability
You have the right to receive the personal data concerning yourself in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller without hindrance, where:
- the processing is based on a consent or a contract and
- the processing is carried out by automated means.
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data, which is based on legal interests of the Ljubljana Tourism or a third party. The Ljubljana Tourism shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing, which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. Where personal information is processed for direct advertising, you have the right to object at any time to processing of personal data, which includes profiling to the extent that it is related to such direct advertising. If direct advertising is based on the consent, the right to object can be executed by revoking such consent.
You can execute any of the rights according to the General Data Protection Regulation at all times in writing. The Ljubljana Tourism can request additional information to confirm your identity for the needs of appropriate identification in case of execution of your rights arising from personal information; the controller can refuse taking any actions pursuant to this Chapter solely if they provide proof they cannot successfully identify you.
Where your requests arising from this Chapter are manifestly unfounded or excessive, in particular because of their repetitive character, the Ljubljana Tourism may either:
- charge a reasonable fee considering the administrative costs of providing the information or communication or taking the action requested, or
- refuse to act on the request.
Your requests can be forwarded to the info@visitljubljana.si or in writing at Turizem Ljubljana, Krekov trg 10, 1000 Ljubljana, Slovenia.
Right to lodge a complaint with a supervisory authority
Your compliant regarding the personal information processing can be forwarded to info@visitljubljana.si or via postal service to Turizem Ljubljana, Krekov trg 10, 1000 Ljubljana, Slovenia.
You have the right to submit a complaint directly at the Information Commissioner office if you believe the processing of your personal information is in breach of the Slovenian regulation and the EU regulations of personal information protection.
The Privacy Policy is valid until 25 May 2018, and it can be altered and supplemented at all times.
