Privacy Policy

We are committed to protecting your privacy

This privacy policy applies to the website https://www.rimskivrelec.si It defines the principles for the processing and storage of personal data provided by users in connection with their use of the services offered by Rimski vrelec d.o.o.

 

Controller of Personal Data

The controller of personal data collected on this website is Rimski vrelec d.o.o., Pri Brančurniku 20, 2391 Prevalje, registration number: 8628572000, VAT ID: SI68537697.

We are committed to respecting your privacy and processing your personal data securely and in accordance with the legislation governing personal data protection (Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act – ZVOP-1). The data obtained is used exclusively for purposes related to our business operations.

 

Processor of Personal Data

We cooperate with external service providers who act as our personal data processors. On our behalf, they process data for the purpose of obtaining reservations, providing analytical and marketing services, improving services and user experience, etc.

We use the Web Booking Engine fidelityhotel.net by MAIS Informacijski sistemi d.d. to capture and process direct online reservations for stays at our accommodation. MAIS Informacijski sistemi d.d. cooperates and has confirmed its compliance with the EU-U.S. Privacy Shield Framework. More about MAIS’s privacy policy is available here: (https://www.mais.si/pravilnik-zasebnosti.html)

 

Email Newsletter Software – SENDPULSE

To process newsletter subscriptions and send promotional email newsletters, we use the SendPulse and ZOHO Campaigns software by SendPulse Inc. SendPulse Inc. stores our data in the EU and the USA and has confirmed its compliance with the EU GDPR. More about SendPulse’s privacy policy is available here: (https://sendpulse.com/legal/pp)

 

How Do We Collect Your Personal Data?

We handle your data with the highest possible level of care. All personal data obtained from website users is private and confidential.

We collect personal data through the reservation form, where the user enters all personal information relevant for the reservation and for the provision of the requested service.

We also collect personal data provided by users when completing the newsletter subscription form.

We physically collect a guest’s personal data upon check-in at the hotel reception.

In addition to personal data provided through the above methods, this website uses technology that collects certain technical data, such as the user’s IP address. The user’s IP address is recorded when subscribing to the newsletter (and serves only as proof that the user personally completed the subscription).

In all other cases, we do not link IP addresses to individuals, and each website user remains anonymous. Anonymous data about your use of our website is collected through cookies and similar technologies. More information about how we use these technologies to collect information about you can be found in our Cookie Policy.

What Personal Data Is Collected?

In the reservation form, we collect:

First name, last name, telephone number, email address, and country of the user;

Company details (if the reservation is made on behalf of a company);

Credit card details (type of credit card, cardholder’s name, credit card number, expiration date);

Guest stay details, including arrival and departure dates, type of service, selection of special offers, special requests and preferences;

An optional subscription to our promotional newsletter by ticking an empty checkbox.

In the newsletter subscription form, we collect the user’s first name, last name, email address, selected language, date and time of subscription, and IP address.

When submitting an event inquiry, we collect all data related to the event (contact details such as first name, last name, email address, company name and address, event start and end time, duration of the event, number of participants, possible accommodation needs, and requested services).

Upon hotel check-in at the reception, we collect the guest’s first and last name, country, date of birth, type of identification document, and identification number.

 

Purpose of Processing Personal Data

All data obtained through the reservation form is used to process your reservation and to communicate regarding the provision of our services; this includes transactional emails necessary to carry out the business agreement concluded through the reservation between us and the recipient of our services (the guest).

The email address obtained via the newsletter subscription form or by ticking the newsletter subscription checkbox in the reservation form is used to send promotional material about our offers through the SendPulse email marketing system. The first name and selected language collected in the same form are used to personalize the newsletter experience.

Data obtained through the event inquiry form is used to prepare offers for events, meetings, or conferences at our hotel.

Personal data collected during hotel check-in at the reception is processed to ensure compliance with our legal obligations.

 

Legal Basis for Processing Personal Data

Reservation form: Fulfillment of the controller’s legal obligations

Newsletter subscription: Personal consent

Offer inquiry: Fulfillment of the controller’s contractual obligations

Reception check-in: Fulfillment of contractual obligations and legal obligations of the controller

 

Retention Period of Personal Data

Personal data may be stored for as long as necessary to fulfill the purposes for which it was collected or until the individual withdraws consent. Upon the user’s written withdrawal of consent, the data will be deleted.

 

Your Rights

You may withdraw your consent at any time, request access to, correction of, restriction of processing, or deletion of your personal data, or lodge a complaint regarding the processing of your data by notifying us in writing by post at Rimski vrelec d.o.o., Pri Brančurniku 20, 2391 Prevalje, or by email at hotel@rimskivrelec.si.

If our response does not meet your expectations, you have the right to submit a request or complaint to the competent supervisory authority, the Information Commissioner of the Republic of Slovenia.

 

Our Contact Details

The controller of your personal data is Rimski vrelec d.o.o., Pri Brančurniku 20, 2391 Prevalje, registration number: 8628572000, VAT ID: SI68537697.

If you have questions about how we process your personal data or if you wish to exercise any of the rights provided by this privacy policy, please contact us at hotel@rimskivrelec.si.

Validity

This privacy policy is effective as of January 2026. This document may be amended without prior notice.