Privacy Policy

Thank you for entrusting us with your personal information. We assure you that we work with them very carefully and process them in accordance with the applicable personal data protection legislation (EU Regulation 2016/679 (GDPR) and the Personal Data Protection Act – ZVOP-1). We explain which of your personal data we process for which purposes in the sections that follow.

1. Personal Data Controller

The Personal Data Controller is Active line d.o.o., Podlimbarskega ulica 43, 1000 Ljubljana.

2. Purposes and bases for personal data processing

We only use the data provided for purposes related to our business operations.

a) Accommodation reservations and sleeping arrangements

We collect your personal data for the purpose of making a reservation via the online contact form, online reservation, phone, or in person at the reception. Article 6/I (b) of the General Regulation on the Protection of Personal Data provides the legal basis for the processing of personal data for the purpose of facilitating the provision or use of services.

For this purpose, we process the following personal data:

• name and surname, date of birth, address of permanent residence, company, contact e-mail address, contact telephone number, and country;
• data on the circumstances under which you are exempt from paying the tourist and promotional tax (disability, children with special needs, persons who voluntarily help eliminate the consequences of natural disasters, members of the Slovenian Police while performing tasks within their competence, temporary employment status accommodation facility continuously for more than 30 days, foreign nationals who are exempt from paying tourist tax under international agreements);
• data on the stay (date of arrival and departure, special requirements, preferences regarding services;
• event data (name, surname, company, company tax number, e-mail address, telephone, country, time of start and end of the event, duration of the event, number of participants, transaction account of the participant);

b) Arrangements for payment of accommodation or refunds made under this title

We require your invoice data in order to pay contractual obligations. A contract for accommodation or use of services serves is the legal basis – Article 6/I (b) of the General Data Protection Regulation. Due to the Value Added Tax Act, the Prevention of Money Laundering and Terrorist Financing Act, the Payment Services, Services for Issuing Electronic Money and Payment Systems Act, and the Tax Procedure Act – Article 6/I (c) of the General Data Protection Regulation, we must also keep personal data for invoicing purposes.
For this purpose, we process the service payer data, including payment card data (if you provided it to us); card type, name on the card, card number, expiration date, CVC code);

c) Arranging the specifics of the stay and resolving complaints

We process the personal data that you provide to us in this case for the purpose of the specifics of the stay, which are carried out before and during the stay. In the event of a complaint, you should also provide us with additional information. A contract for accommodation or use of services serves as the legal basis – Article 6/I (b) of the General Data Protection Regulation.

d) Direct marketing

Direct marketing is carried out using the e-mail address you provided to us when you signed the accommodation contract. In this way, we provide you with notifications about promotions and special offers. Article 6/I (f) of the General Data Protection Regulation provides the legal basis for sending an invitation to your e-mail address. You have the right to object to such processing by following the instructions in the footer of each such message or by sending an email to [email protected]

e) Registration of temporary residence in case you are staying with us

We collect your personal data (Information regarding your birth, Sex, nationality, identification document type and number) for the purpose of Registration of temporary residence in case you are staying with us. In order for us to carry out the mandatory legal obligation of daily reporting on guests and overnight stays to AJPES (Agency of the Republic of Slovenia for Public Legal Records and Related Services) and for the purpose of additional protection and restriction of use in case of minors. The legal basis is the Permanent Residence Registration Act in conjunction with Article 6/I(c) of the General Data Protection Regulation.

3. Transmission of data to third parties and transmission of data to third countries

The controller collaborates with external contractual service providers (contractual personal data processors) that exclusively process data on their behalf. The controller and personal data processors defined their mutual relationships and obligations with a written contract. The contractual processor is registered to perform personal data processing activities entrusted to them and to provide personal data processing services only within the scope of their authority. Processors are not permitted to share personal data for their own or foreign purposes or to pass them on to third parties or countries. Cooperation with external contracted service providers is used to enable reservations and payments for reservations, to support analytical and marketing services, to improve our services and user experience, etc.

Personal data may be disclosed to law-enforcement authorities and other governmental authorities if required by law or if strictly necessary to prevent, detect, or prosecute criminal offenses and fraud.

4. Storage period of personal data

Personal data of an individual are processed and stored in accordance with the legal basis or for the duration of the purpose for which they were collected or further processed.
a) Reservations and stay: 5 years after the end of the contractual relationship
b) Payment arrangements: 10 years from the issuance of the invoice
c) Specifics of the stay and resolving complaints: 2 years
d) Direct marketing: after the service advertised with direct marketing has ben provided

5. The rights of individuals relating to the processing of personal data

Individuals have a number of rights with regard to personal data. Active line d.o.o verifies the identity of the person inquiring about their rights before exercising their right. An individual can submit a request regarding their rights in writing to Active line d.o.o., Podlimbarskega ulica 43, 1000 Ljubljana, or to the e-mail address [email protected]
In relation to your personal data, we provide you with:

• the right to know your personal data: you have the right to know about all of your personal data collected in connection with you and their processing, as well as to review its legality;
• the right to rectification or to have your personal data completed: we will rectify any inaccurate personal data as soon as possible;
• the right to erasure for your personal data: we will erase personal data concerning you without undue delay, to the extent permitted by applicable law (data required to perform the contract you have concluded with us and data required to implement our legal obligations will not be able to be erased, despite your request);
• the right to restriction for your personal data: you have the right to request that we restrict the processing of your personal data (when you dispute the accuracy of personal data, when the processing is illegal and in cases where we no longer need your data for processing but you need them to enforce, implement or defend your legal claims);
• the right to data portability: upon your request, we will send you your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or we will forward them to another operator if technically feasible. You may only exercise this right if you provided us with personal data with your consent or for the purpose of concluding and fulfilling a contract;
• the right to objection: you have the right to object to the processing of your personal data at any time if it is based on our legitimate interests or the legitimate interests of a third party.
• Right to lodge a complaint about personal data processing: An individual may send a possible complaint about personal data processing to the controller’s addresses listed in the first article of this policy.

Similarly, any data subject has the right to file a direct complaint with the Information Commissioner if they believe that the processing of their personal data violates the applicable law.
If you have any questions about personal data protection, please contact [email protected]

6. Policy validity

This policy is published at www.greenslo.si and is valid from 20.02.2024.