Privacy Protection

I. VALIDITY, ADOPTION AND APPLICATION OF THE PRIVACY AND COOKIE POLICY

ARTICLE 1

The Privacy and Cookie Policy applies to anyone who, in accordance with the General Terms and Conditions of Business and Use of the Website: kocevsko.com, is considered to be a User and to the entire Website, including its subpages.

The User is any legal or natural person who uses or visits the Website (hereinafter: the User). The Customer is any legal or natural person who, in accordance with the General Terms and Conditions of Business and Use of the Website, concludes one of the contracts (hereinafter: the Customer).

By using the Website, the User agrees with this Privacy and Cookie Policy.

The Provider reserves the right to amend any provision of this Privacy and Cookie Policy at any time without notice. By continuing to use the Website, the User agrees with the amendments.

II. PROTECTION OF PERSONAL DATA OR PRIVACY

ARTICLE 2

The User agrees that for the purposes of its business, the Provider collects and processes the User's personal data which the User provided at the time of registration.

Personal data collected on the Website shall be managed by the Public Institute for Culture and Tourism Kočevje or, in short, the Kočevsko Institute. All data collected on the Website shall be handled in accordance with this Privacy and Cookie Policy, which is publicly available on the Website and is valid from 24 May 2018.

The Provider (Kočevsko Institute) and its Contractual Processor (Innovatif) protect personal data they become acquainted with in the realisation of the relationship between the User and the Provider or in connection with it in accordance with the Personal Data Protection Act.

III. PURPOSE OF COLLECTING PERSONAL DATA

ARTICLE 3

The Provider and the Contractual Processor collect and process the personal data of the User in order to inform the User about the novelties and news related to the tourist activity of the destination Kočevsko.

ARTICLE 4

The Website collects the following personal data:

• name and surname;
• street, city and postcode of the place of residence;
• country of residence;
• e-mail.

When purchasing the services offered on the Website, the following customer data is also collected:

• preferred delivery method (in person or by post);
• possible user notes;
• the number of participants and their age group;
• conducted language:
• place of departure.

When registering on the Website, the following data is also collected:

• nickname;
• e-mail;
• password for access to the application.

In accordance with the General Terms and Conditions of Business and Use of the kocevsko.com Website, the Provider does not collect credit card information, as it is collected exclusively by credit card providers.

IV. MANAGEMENT OF PERSONAL DATA, DURATION OF DATA STORAGE AND THEIR CONTRACTUAL PROCESSING

ARTICLE 5

Data is stored in a database that is managed in accordance with the editorial policy of the Kočevsko Institute and in accordance with the Security Policy of Innovatif, for the duration of the relationship between the User and the Provider and for 5 years after the termination of their relationship. Data entered by the User at the time of registration is stored as long as the User has the status of a registered user and 3 months after the termination of this status.

The User may at any time request in writing the deletion of its data from the database. Data is not stored in the database after deletion. The Provider shall decide on the request within 8 working days. The User submits a request to delete its data by clicking on a link in the received e-mail newsletter to unsubscribe from the list of recipients of messages or by sending a request for deletion to the e-mail address info@kocevsko.com.

ARTICLE 6

Since the issues of contractual processing of personal data between the Provider and the Contractual Processor must be regulated by a written contract, the Provider and the Contractual Processor shall also regulate their mutual relationship with regard to this obligation in writing.

In accordance with the provisions of the ZVOP-1, the User has the right to verify the validity of the protection and processing of personal data. The User must announce its request to inspect the premises and equipment at least 5 working days in advance. For the purpose of the protection of business secrets and other sensitive information of the Provider, inspection is carried out in the presence of an authorised person of the Provider or in the manner defined in the Security Policy of the Contractual Processor.

V. PERSONAL DATA PROTECTION

ARTICLE 7

Data protection is provided by Innovatif. The company will not transmit data to third parties and will protect them in accordance with its security policy. The User will be entered in the database only after confirmation by clicking on the confirmation link in an e-mail that will be sent to the User's e-mail address.

Every e-mail that the User receives in the newsletter by the editors of the Website www.kocevsko.com will contain a link to unsubscribe from the list of recipients of messages.

Protection of personal data is carried out in accordance with paragraph 1 of Article 25 of the ZVOP-1. Personal data are protected within the framework of legal, organisational and appropriate logical-technical procedures and measures to prevent accidental or deliberate destruction of data, their changes or loss, and unauthorised processing of such data by:

• Protecting the premises, equipment and system software, including input/output units;
• Protecting the application software for processing personal data;
• Preventing unauthorised access to personal data when transmitted, including transmission by telecommunications and networks;
• Ensuring an effective way of blocking, destroying, erasing or anonymising personal data;
• Allowing for the subsequent determination of when the individual personal data were used and entered into the database and who used or entered the data for the period for which the individual data are stored.

VI. COOKIE POLICY

ARTICLE 8

Cookies are small text files used by websites to make users' experience more effective.

By law, cookies may be stored on your device in the event that they are strictly necessary for the operation of the website. Your permission is required for all other types of cookies.

This Website uses different types of cookies. Some are used at the request of foreign webpages appearing on our Website.

The following cookies are used to ensure the operation of all the features of the Website:

• Required cookies make the Website useful, as they provide basic features such as page navigation and access to safe areas of the Website. The Website does not function properly without cookies.
• Cookies for monitoring statistics are cookies we use to monitor traffic of the Website in order to improve the user experience.
• Cookies for marketing anonymously collect information about your visits to websites. The purpose is to show ads that are appropriate and interesting to each individual User.

A detailed description of each cookie and the time of its installation can be seen from the following table:

Required Cookies

Required cookies make a website useful, as they provide basic features such as page navigation and access to safe areas of the website. The website does not function properly without cookies.

Cookies for monitoring statistics

Statistics cookies help website owners understand how visitors use their website by collecting and reporting information anonymously.

Advertising Cookies 

Advertising cookies are used for tracking users on websites. Their purpose is to display ads, which are relevant and interesting to individual users. 

VII. FINAL PROVISIONS

ARTICLE 9

This Privacy and Cookie Policy applies from 8 August 2019.