Notice on the protection of personal data
The RKS Debeli rtič Health Resort respects your privacy and undertakes to handle your personal data responsibly, lawfully and transparently, in accordance with the EU General Data Protection Regulation (GDPR) and the Personal Data Protection Act (ZVOP-2).
Controller of personal data
RED CROSS OF SLOVENIA – Debeli rtič Health Resort
Mirje 19
1000 Ljubljana
phone: +386 1 24 14 300
fax: +386 1 24 14 344
E-mail: rdeci.kriz@rks.si
Data Protection Officer: Nuška Jerman, MA
Purpose of data processing
- We collect and process personal data only for specified, explicit and legitimate purposes, such as:
- responding to your enquiries or reservations,
- informing you about the resort’s services (with your consent),
- keeping guest records in accordance with the law,
- improving the user experience on our website (e.g. by using cookies).
Legal basis for processing
We process your personal data on the basis of:
- your consent (e.g. to receive our newsletter),
- a contractual relationship (e.g. when booking services),
- legitimate interest (e.g. to ensure the security of the website),
- legal obligations (e.g. to keep a guest book, to account for VAT).
Data retention
We only retain data for as long as is necessary to fulfil the purpose for which it was collected or as long as required by law.
Transmission of data
We will not pass on your personal data to third parties, except where this is necessary for the provision of services (e.g. an external provider of a booking system) or where required by law.
Your rights
You have the right to:
- request access to your personal data,
- request the rectification or erasure of your data,
- request restriction of processing,
- object to processing,
- withdraw consent at any time, if consent has been given,
- lodge a complaint with the Information Commissioner of the Republic of Slovenia.
Contact
If you have any questions or wish to exercise your rights, please contact us at:
E-mail: zdravilisce.debelirtic@gmail.
