1. Who controls your data
The data controller for this website and for guest data collected in connection with a stay at Mountain Fairytale · Chalet Rogla is Jernej Osole, Maistrova ulica 8, 3000 Celje, Slovenia (registered sobodajalec — see the Imprint for registration details). Contact: +386 70 862 250 / osole@t-1.si.
No Data Protection Officer (DPO) has been appointed. The controller named above is the contact point for all questions and requests relating to personal data.
2. Scope of this policy
This policy covers personal data processed through this website (browsing and booking) and personal data collected in connection with a confirmed stay, including the guest-registration data described in section 3. It does not cover the separate privacy practices of Airbnb or other platforms you may use to find this property.
3. What data we collect
Booking and contact data
- Name, email address, phone number, postal address if provided
- Booking details: dates, number and ages of guests, special requests
- Messages you send us
Payment data
- For bank transfers: the payer name, account details and payment reference needed to match your payment. Card payments are not offered online, so we never receive card numbers.
Guest-registration data (eTurizem)
Slovenian law requires us to collect and report the following for every guest before or at arrival: first and last name, date of birth, gender, nationality, identity document type and number, and arrival/departure dates. We collect this directly through our pre-arrival guest form to fulfil this legal duty. Where the person who made the booking (the booker) provides this data on behalf of other guests staying with them, the source of that data is the booker rather than the co-guest themselves, and the same rights and retention periods described in this policy apply to it.
Website usage data
Technical data collected automatically when you browse this website (such as IP address and pages visited) — see the Cookie policy for what is collected and under what consent rules.
4. Purposes and legal bases
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Processing your booking, taking payment, issuing invoices, answering questions | Booking/contact data, payment data | Performance of a contract (Art. 6(1)(b)) |
| Guest registration and reporting to eTurizem; calculating and remitting tourist tax | Guest-registration data | Compliance with a legal obligation (Art. 6(1)(c)) |
| Basic website security and fraud prevention | Website usage data | Legitimate interest (Art. 6(1)(f)) |
| Non-essential analytics or marketing, if ever added | Cookies/tracking identifiers | Consent (Art. 6(1)(a)) — see Cookie policy |
5. Who we share data with
- AJPES (the Agency of the Republic of Slovenia for Public Legal Records and Related Services), via the eTurizem system — guest-registration data, as legally required
- Police and the Statistical Office of the Republic of Slovenia (SURS), who receive guest and stay statistics through the same eTurizem reporting chain
- Municipality of Zreče, for tourist-tax purposes
- Banks involved in executing your bank transfer
- An accountant, if one is engaged for the Host's tax affairs, bound by professional confidentiality
We do not sell your personal data, and we do not share it with anyone for their own marketing purposes.
6. International transfers
The controller is established in the Republic of Slovenia (see Imprint), within the EU/EEA. Most of the recipients listed above are also located in the EU/EEA. This website, and the online booking system behind it, are delivered with the help of Cloudflare, Inc., a hosting, content-delivery and infrastructure provider headquartered in the United States, which may process personal data (including website usage data and booking data) as part of running the website (Cloudflare Workers / content-delivery network) and the booking system (Cloudflare Workers and its D1 database). Because Cloudflare is headquartered outside the EU/EEA, using it involves a transfer of personal data to a third country, for which we rely on the safeguards recognised under Chapter V GDPR — the EU–US Data Privacy Framework and/or EU Standard Contractual Clauses, as provided for in Cloudflare's data processing terms. Because the controller is established within the EU, a separate EU representative under Article 27 GDPR is not expected to be required; this should be re-confirmed if the processing setup changes.
7. How long we keep data
- Guest-registration (eTurizem) data: kept for the remainder of the calendar year of your stay plus one full further year, then deleted; a written record that the deletion took place is kept for 5 years.
- Booking, invoice and payment records: kept for 10 years after the end of the year they relate to, as required by Slovenian tax law (ZDavP‑2).
- General enquiries that do not lead to a booking: kept only as long as needed to answer them, then deleted, unless you ask us to keep them longer.
8. Your rights
Subject to the conditions set out in GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure (limited, for guest-registration data, by our legal retention obligation in section 7); request restriction of processing; object to processing based on legitimate interest; request portability of data you provided to us; and withdraw consent at any time where processing is based on consent (this does not affect processing carried out before withdrawal). To exercise any of these rights, contact us using the details in section 1.
9. Cookies
See the separate Cookie policy for what cookies and similar technologies this website uses, and how to control them.
10. Automated decisions
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.
11. Changes to this policy
We may update this policy from time to time, for example to reflect a change in the law or in the tools we use. The version published on this website applies from its stated effective date.
12. Contact
For any question about this policy or your personal data: +386 70 862 250 / osole@t-1.si.
13. Right to complain
If you believe your data-protection rights have been infringed, you may lodge a complaint with the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec RS), the supervisory authority for data protection in Slovenia — current contact details at ip-rs.si — or with the supervisory authority in your own EU country of residence.