The Slovenian Tourist Board is aware of the importance of the right to privacy. To this end, personal data is handled with responsibility and care. When processing data, we observe the provisions of the EU General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2). By taking suitable protective measures, we ensure that unauthorised persons do not access personal data, we protect its confidentiality and integrity, and prevent its loss or unintentional destruction throughout the entire time during which it is being processed.
To attain the above objectives, we, as per Articles 13, 14 and 15 of the EU General Data Protection Regulation (GDPR), inform you of the following:
-
About us
The controller of your personal data is:
Slovenian Tourist Board
Dimičeva ulica 13, 1000 Ljubljana
Registration number: 6889859000
ID for VAT: 93477902
Phone number: +386 1 589 85 50
E-mail: info(at)slovenia.info
Websites: https://www.slovenia.info, https://www.karieravturizmu.si
-
What is personal data?
Personal data is information that can directly or indirectly identify you as an individual, whereby “indirectly” means in combination with other information, e.g. your name, postal address, e-mail address, phone number, or a special identifier.
-
Legal basis for personal data processing
Your personal data is processed in accordance with the EU General Data Protection Regulation (GDPR), the Slovenian Personal Data Protection Act (ZVOP-2) and other regulations governing this field. As the personal data controller, the Slovenian Tourist Board processes certain data exclusively on the basis of your prior consent, while a contract has to be concluded, legal obligations have to be met or the controller’s legal interest has to be established for the processing of certain other data. The details regarding the legal bases for the processing of your data can be found below.
If you visited a fair with us, cooperated with us in a workshop or another event that we organised, or if you carried out a service for us or delivered goods, you are contractually obliged to submit your data. In this case, the data will only be processed to meet the rights and obligations arising from the contract or the order form.
In certain cases, the processing of personal data is a legal obligation. For example, we are obliged to submit personal data of prize game winners to the Financial Administration of the Republic of Slovenia when the value of the prize exceeds the legally determined amount.
Certain personal data may only be processed on the basis of the company’s legal interest when this interest prevails over your fundamental rights and freedoms. Based on the legal interest, we process your data to improve and develop our services, and for technical maintenance of websites, information systems security, confidential data protection, and safety of our employees and the company’s assets. The legal interest regarding processing also includes measures to prevent fraud and criminal behaviour, the resolution of possible disputes and complaints and the protection of legal claims.
When no suitable legal basis is available for the processing of your data, we have to obtain your consent in relation to an individual purpose, which is based on Article 6(1)(a) of the EU General Data Protection Regulation (GDPR). As a result of your consent, we process your personal data, for example, for sending newsletters or implementing prize games.
You have the right to revoke your consent at any time. The revocation of consent does not impact the legality of processing on the basis of the consent before its revocation.
-
Collection, use and storage of personal data
As per the principle of proportionality, we only collect those data on you which are necessary to achieve the purpose of the processing. You can read about the details on the examples of processing your personal data, types of data and purposes of processing below.
If you are an employee of a company which is our current or potential business partner, we process the following data on you: name and surname, name of the legal entity by which you are employed, name of your position of employment, phone number and e-mail address. Your data will be used to contact you with regard to our cooperation.
If you are employed by the company or if you are a representative of the company which applied to our public tender, public call or public procurement, or if you participate in a bid or application to our public tender, public call or public procurement, we process the following data on you: name and surname, position, name of the company, custodian of the contract, position of the custodian of the contract, e-mail address, phone number, data from the ESPD form (https://ejn.gov.si/espd/). Your data will be used to contact you with regard to our cooperation and to verify the meeting of conditions for participation, conditions for (non)exclusion or criteria in an individual public tender, public call or public procurement.
If you are participating in the implementation of the subject of the public tender, public call and public procurement, we process that data on you which is required in the criteria, conditions for cooperation or in the subject of an individual public tender, public call or public procurement (e.g. name and surname, education, work experience, reference projects, certificates, e-mail address, phone number, company). Your data will be used to verify the meeting of conditions for participation, conditions for (non)exclusion or criteria in an individual public tender, public call or public procurement.
In the examples above, your data is processed on the basis of the concluded contract and to meet legal obligations.
By subscribing to our electronic notifications and newsletters, you agree that we send you e.g. the Stories from Slovenia, the Gastronomic Stories from Slovenia and the TTA News. To this end, we process your data, such as name and surname, e-mail address, which notifications or newsletters you want to receive, and the language in which you want to receive notifications or newsletters.
If you wrote to us by regular mail or if we sent you something by post, we process the following data on you: name and surname, address and postal code. Your data is processed in order to keep a record of received and sent mail.
In the examples above, we process your data on the basis of your consent.
If you attended a fair, a workshop or another event that we organised, we process the following data on you: name and surname, e-mail address, function, position, phone number, company, and interest (what service does the company offer/what service does the company inquire after). Your data is processed in order to carry out a fair, a workshop or another event, to contact you relating to the event and to keep a record about the participants.
If you have expressed an interest to attend study trips for foreign journalists and other foreign media to Slovenia, we process the following data about you: name and surname, date of birth, gender, town, country, phone number, e-mail address, field of interest, social media profile, the medium you represent, data on the medium, data necessary for the organisation of a study trip (knowledge of the English language, driving licence, whether you have been to Slovenia before, whether you have already written about Slovenia, references). Your data is processed in order to carry out a study trip, to contact you with regard to the study trip and to keep a record about the participants.
Your data may be forwarded to partner or marketing agencies in cooperation with whom we organise business events, and to the organisers of fairs and workshops and partners who participate in the implementation of the study trip and are mentioned in the study trip programme.
In the examples above, we process your data on the basis of your consent.
If you are a member of the Council of the Slovenian Tourist Board, we process the following data about you: name and surname, address of the organisation, function/position, postal address, contact, business phone number, phone number of the secretariat, mobile phone number, e-mail address, statement on the (non)receipt of the meeting fee, ID for VAT, person liable for VAT, personal account number, bank, date, signature, data on the attendance at the Council session, data from the Decision of the Government of the Republic of Slovenia on being appointed to the Board’s Council.
If you are a member of a commission participating in public procurement procedures, in which the estimated value of an individual order is equal or higher than EUR 100,000 exclusive of VAT, we process the following data on you: name and surname, address, ID for VAT, PIN, start date of performing the function of commission member.
If you are a member of the Council of Experts of the Slovenian Tourist Board and other bodies of the Slovenian Tourist Board, we process the following data on you: name and surname, company and function.
Your data is processed in order to carry out the rights and obligations of the members of the Council of the Slovenian Tourist Board and the implementation of tasks of members of the Council of Experts of the Slovenian Tourist Board, members of committees and other bodies of the Slovenian Tourist Board.
In the examples above, we process your data on the basis of your consent and to meet legal obligations.
If you are a journalist or a photographer, we process the following data on you: name and surname, medium (radio, television, newspaper publishing house, etc.), business or mobile phone number, business e-mail address, name and address of the medium, e-mail address. Your data is processed to inform you about our activities (press releases, invitations to events) and submit responses to journalists’ questions, forward press releases and invitations to press conferences, participate in project activities related to specific projects or campaigns, and distribute printed materials.
In the examples above, we process your data on the basis of your consent and public interest.
If you gave your consent on our websites to use your data for marketing purposes, we process the following data about you: name and surname, name and address of the company/organisation, job title, e-mail address, mobile and/or landline phone number, place and date, and content of the consent.
If you gave your consent to use your data for marketing purposes during an event we organised abroad in cooperation with a partner agency, we process the following data on you: e-mail address, name and surname, gender, job title, company/organisation, country, town, street, postal code, website, field of interest, phone number, mobile phone number, notes, possible consent to receive newsletters, possible consent to share contacts, and information on visiting the event.
Your data is processed in order to send professional messages and invitations to events, to provide information about the organisation’s activities and promotional messages for processing, to respond to questions, improve our services in the field of marketing content, to improve marketing content and communication with users, to forward advice, useful information and news about services and updates, to provide information about new services and ensure service quality.
Your data may be forwarded to partner or marketing agencies in cooperation with whom we organise business events, and to the organisers of fairs and workshops and partners who participate in the implementation of the study trip and are mentioned in the study trip programme.
Subject to your prior consent, your data may be transferred to a third country, i.e. to the organisers of fairs, events, tourist workshops and event attendees.
In the examples above, we process your data on the basis of your consent.
If you participated in a prize game, the data you submitted will be processed exclusively for the purpose of implementing the prize game (verification of meeting the conditions, contacting of winners and publication of winners). If the value of the prize exceeds the legally determined amount, we will require your tax identification number as per the tax legislation, which will then be submitted to the Financial Administration of the Republic of Slovenia. Participation in a prize game is voluntary and with participation you agree to personal data processing for the purposes provided above. You can revoke your consent at any time. If you fail to submit the data or if you revoke consent, you cannot participate in the prize game.
In the examples above, we process your data on the basis of your consent.
If you visit our websites, the server automatically collects details about your visit, such as the IP address, the type of browser and information on the operating system of the computer or the mobile device, the content views in 10 days and the date of visiting the website of the Slovenian Tourist Board.
You will also notice the term “Cookies” on our websites. More information on cookies can be found on the link, Cookies, which are an integral part of this policy. Cookies are small text files that are saved by most websites onto the devices with which users access the Internet. The saving of cookies is controlled by you, as you can restrict or disable the saving of cookies in the browser you use. Cookies enable the maintenance of fresh and relevant content which is compliant with your interests and the preferences of our users. Based on website traffic statistics, we can evaluate the effectiveness of our website content and, through a combination of advertising cookies, also the relevance of the content and advertisements offered to you on other websites. With the help of cookies, websites remember your preferences, interests and experience, thus saving time, while the browsing of websites becomes more effective and user-friendly.
The data we process is processed on the basis of our legal interest or your consent if you submit it. The settings of cookies can be changed upon every visit at this link, where you can also view the retention periods of cookies.
If you apply for a vacant post, the data you submitted upon the application is processed only for the purpose of selecting the candidates for the post to which you applied. By submitting the application, you agree to the processing of your personal data for this purpose. You can revoke your consent at any time. If you revoke your consent, your data will no longer be processed in the relevant selection procedure.
The data on unsuccessful candidates will be stored until the end of the selection procedure or no more than 30 days after the candidates are informed that they have not been selected.
If you submitted an application for employment which was not advertised, we will store your data until we respond to your application, unless you provide your consent that your application can be stored for longer.
-
Data retention period
Your personal data is stored for the period necessary to achieve the purpose for which the data is processed. After the end of this period, your data is deleted, destroyed, blocked or anonymised.
In some cases, the data retention period is determined by legislation, which is why this data is stored for as long as this is necessary to fulfil legal obligations.
If your data is processed to implement contracts, we store it until the end of the contractual relationship. Based on the legal interest, the data is stored until possible legal claims connected with the contract can be enforced.
The data we process on the basis of your consent is stored until the revocation of the consent or until you request the deletion of your data, whereby the revocation does not impact the legality of processing being implemented before the revocation.
-
Data users
In certain cases, when a suitable legal basis is provided, your data can be disclosed to third persons:
To carry out individual tasks and attain the purposes of processing as stated above, your data can also be disclosed to our contractual data processors, who process your personal data on our behalf and in accordance with our instructions. These include providers of hotel and transportation services, tour guides, business event organisers and co-organisers, data processing and analytics providers, providers of e-mail sending services and marketing automation tools, providers of online advertising solutions, providers of certified storage, external ICT equipment maintenance providers, external maintenance providers of software packages and applications we use, and external website maintenance providers.
In cases determined by regulations, your personal data may be submitted to public authorities, such as the police, courts, tax authorities and others, when this is necessary for the fulfilment of our legal obligations or the implementation of the official tasks of such authorities.
- Transfer of personal data to third countries
If you attended a fair, a workshop or another event that we organised and which took place in third countries, or in certain cases when you gave your consent to use data for marketing purposes, your data may be submitted to third countries (countries outside the European Union or the European Economic Area). In the examples above, your data may be forwarded to the organisers of fairs, workshops or other events held in third countries or the representatives of travel agencies and tour operators in third countries.
In doing so, we will apply the measures compliant with the legislation, which are appropriate to ensure that your personal data remains protected.
In all other cases, your personal data is processed only within the European Union and the European Economic Area.
-
Technical and organisational measures to protect your personal data
The Slovenian Tourist Board takes a very serious approach to data security. A suitable level of protection is used, including reasonable physical, electronic and administrative measures by way of which we protect the data collected from accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access to personal data. We protect the application software used to process personal data. We prevent unauthorised access to personal data during their transfer. We provide an effective method of blocking, destruction, deletion or anonymisation of personal data, and enable subsequent identification of when certain data was entered in the database, used or otherwise processed and by whom.
- Rights relating to personal data processing
In connection with personal data processing, you have the right to access data, the right to correct and supplement incomplete personal data, the right to delete and restrict processing, the right to data portability and the right to object. The request to enforce the aforementioned rights can be submitted to dpo(at)slovenia.info.
You can ask us for a confirmation of whether we process your personal data. You have the right to demand information on whether your personal data is transferred to third countries or international organisations. In connection with the foregoing, you can also demand information on appropriate protective measures as per Article 46 of the EU General Data Protection Regulation.
You have the right to correct and/or supplement if your personal data that we process is incorrect or incomplete. The personal data controller must carry out the correction immediately.
In certain cases, you have the right to a deletion of your data. This can be attained in the following cases
In connection with the processing of your personal data, you have the right to request the restriction of processing, within the framework of which we temporarily cease the processing of your personal data if:
You have the right to object to the processing of personal data at any time on the basis of reasons linked to your special situation, which is based on points (e) or (f) of paragraph one of Article 6 of the General Data Protection Regulation. The personal data controller shall cease processing personal data referring to you unless compelling legitimate reasons for such processing which override your interests, rights and freedoms can be demonstrated, or for the purposes of enforcement, implementation or defence of legal claims. When personal data is processed for the purposes of direct marketing, you have the right to object to the processing of your personal data for the purposes of such marketing at any time if this is linked to such direct marketing.
When your personal data is processed on the basis of consent or a contract by automated means, you have the right to receive your personal data in a structured, generally applied and machine-readable format and submit it to another personal data controller.
When personal data is processed on the basis of your consent, you also have the right to temporarily or permanently revoke your consent to the processing of personal data at any time without affecting the legality of data processing being implemented on the basis of consent until the revocation.
If you think that the provisions relating to personal data protection are being violated with the processing of personal data, you have the right to file a complaint with the Information Commissioner at Dunajska 22, 1000 Ljubljana; e-mail address: gp.ip@ip-rs.si; phone: +386 1 230 97 30; website: www.ip-rs.si.
-
Further processing of personal data for a purpose other than the purpose for which personal data was collected
Your personal data is not processed for any purpose other than that for which the personal data was collected.
-
Sources of obtaining personal data
In most cases, the data about you which we process was provided by you. If you were invited to a fair, a workshop or another event that we organised, your data may have been provided by your employer, who registered their employees for attendance at the event.
-
Automated decision-making and profiling
In most cases, your data is not subject to automated decision-making.
Your personal data may be subject to automated decision-making, including profiling, when you accept segmentation cookies on our websites. When viewing content, you obtain additional points on the basis of which the system may display and send additional content, measure responses to displayed notifications and content, and follow your activities on the website. Automated decision-making enables faster and more efficient processing of data, particularly when this is necessary to improve the user experience. Profiling may also be applied in this framework, when the decisions on displaying or sending additional content are made based on certain criteria (e.g. content viewing by key words of tourist products, such as “outdoor”, “wellbeing”, etc.), for which the system records higher viewing than for other content types relating to certain profiles in the system.
Automated processing, including profiling, is the basis for decisions that have legal effects in connection with you or have a significant impact on you in a similar manner. If such a decision has legal effects on you or has a significant impact on you in a similar manner, you have the right to demand human intervention, express your position or contest the decision.
-
Data protection officer:
The Slovenian Tourist Board has also appointed a data protection officer. Thus, you can submit all your questions relating to the data processing to the data protection officer at Dimičeva ulica 13, 1000 Ljubljana, or e-mail address: dpo(at)slovenia.info.
-
Enforcement of the data subject’s rights under Articles 13, 14 and 15 of the General Data Protection Regulation
In connection with personal data processing, as stated in point 9, you have the right to access data, the right to correction, the right to deletion (“right to be forgotten”), the right to restrict processing, the right to data portability, the right to objection and the right to file a complaint in connection with personal data processing. If the processing is based on your consent, you have the right to revoke your consent at any time, without affecting the legality of data processing being implemented on the basis of the consent until its revocation. Submit a written or electronic request to enforce the relevant rights to dpo(at)slovenia.info.
In addition to the foregoing, you also have the right to file a complaint relating to personal data processing with the Information Commissioner at Dunajska 22, 1000 Ljubljana; e-mail address: gp.ip(at)ip-rs.si; phone: +386 1 230 97 30; website: www.ip-rs.si.
Pursuant to point (e) of paragraph two of Article 13 of the General Data Protection Regulation, the Slovenian Tourist Board provides information on:
- whether the provision of personal data is a legal or contractual obligation: stated for each purpose of processing your data in point 4;
- whether a person must provide personal data and what the possible consequences are if they fail to do so: if a person fails to provide their data, the Slovenian Tourist Board is unable to implement its obligation relating to the consent (e.g. you will not receive notifications or be able to participate in a prize game).
-
Amendments
Any amendments to the Privacy Policy and Personal Data Protection of the Slovenian Tourist Board will be published at www.slovenia.info.
December 2024
Privacy settings