Privacy

Controller

VPD Turizem d.o.o., Pot na Lisice 4, 4260 Bled, Slovenia. VAT ID: SI36355682. Email: info@vpdturizem.si. Phone: +386 41 663 818. We have no data protection officer, as the law does not require one for us.

Contact by form, email or phone

When you write to us through the form or by email, or call us, we process the data you provide: name and surname, email address, phone number, subject and message. In the form, name and surname, email address and message are required; without them we cannot reply. The phone number is optional.

The purpose is to reply to your message and, if you wish, to prepare an offer. For enquiries about an order, the legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) of the General Data Protection Regulation, GDPR); for other messages it is our legitimate interest in replying (Article 6(1)(f) GDPR).

We keep the data as long as needed to handle your message, then for at most 12 months after our last contact, after which we delete it. If an enquiry leads to an order, we keep the data for as long as the law requires, for example accounting rules.

Visit statistics (Google Analytics)

Only if you allow it in the cookie banner, we use Google Analytics to measure how many visitors come to the website and which pages they view. This involves online identifiers in cookies, page views and other visit events, device and browser type, and approximate location. Google uses the IP addresses of visitors from the EU only to determine approximate location and does not store them in Google Analytics.

The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time. After withdrawal, Google Analytics is no longer loaded and no new data is collected; data already collected is deleted when the retention period expires. Event data is kept in Google Analytics for 2 months (default setting). Details are on the Cookies page.

Technical data when you visit

On every visit, the hosting provider’s server automatically records technical data: IP address, date and time, page visited and browser type. The purpose is the secure and reliable operation of the website. The legal basis is our legitimate interest (Article 6(1)(f) GDPR). The records are kept only as long as needed for security and troubleshooting, after which the hosting provider deletes them automatically. We do not use them to identify you. The server also sets a strictly necessary security cookie (see Cookies).

Recipients of personal data

Data is processed only by contracted processors that help us run the website: Webtasy d.o.o. (Domenca), Slovenia, which hosts the website and sends form messages; Perftech d.o.o., Slovenia, the provider of our email mailbox; and, only with your consent, Google Ireland Limited, Ireland (Google Analytics). We do not sell data or pass it on for advertising.

Transfers outside the European Economic Area

Google may also process personal data in the United States. Google LLC participates in the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision. The list of participating companies is at dataprivacyframework.gov. Other recipients process data in the EU.

Your rights

You have the right of access, rectification, erasure and restriction of processing, the right to data portability where the legal conditions are met, and the right to object to processing based on our legitimate interest. You can withdraw consent at any time; this does not affect the lawfulness of processing before withdrawal. Send your request to info@vpdturizem.si; we reply within one month at the latest.

Complaints

If you believe we process your data unlawfully, you can lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, www.ip-rs.si.

Automated decision-making

We do not carry out automated decision-making or profiling.

Security

The connection to the website is encrypted (HTTPS). Only authorised persons have access to the data.

Changes

The current version of this policy is always published on this page.

Valid from 14 October 2026.