Privacy Policy

NOTICE TO WEBSITE USERS REGARDING THE PROTECTION OF PERSONAL DATA

At the company Zlatarna Celje d.o.o., Kersnikova, 3000 Celje, (hereinafter referred to as: ZC or »we«), as a manager of personal data obliged to comply with the regulations on the protection of personal data, whereby ensuring data protection is the basis of reliable business relations and our reputation. Our operation and internal policy of handling your data and control over its implementation is aimed at protecting your privacy and ensuring the confidentiality and security of your data.

This notice is intended to provide a summary of how your personal information is collected and used. For in-depth information about the protection of your data, in particular:
- what data and on what basis we collect it,
- in what way and for what purposes we process them,
- what rights do you have about the personal data you provide to us,
we invite you to read our Privacy Policy.

When processing your data, we take into account the applicable data protection regulations, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals about the processing of personal data and on the free flow of such data and the repeal of Directive 95/46 /EC (hereinafter: GDPR).


WHY AND HOW WE USE YOUR DATA

We use personal data for:
• implementation of contractual obligations, especially for the fulfilment of orders and other contracts,
• direct marketing, including informing about our products, services and activities through various communication channels (website, social networks, SMS messages, e-mail, etc.) and sending offers by post, e-mail, telephone or in another way,
• conducting market research and customer satisfaction,
• profiling or segmentation, to prepare an offer adapted to your habits,
• implementation of prize games, which include draws and publication of information about winners, as well as collection and processing of personal data obtained at promotional events,
• prevention of abuse or fraud and protection of property and data,
• asserting claims or defending against various claims,
• improving the content and general quality and functionality of websites and our services,
• to fulfil our legal obligations.

a) Based on your express consent, we process data such as:
•name and surname,
•    address,
•    e-mail address,
•    phone number,
which you provide to us for a specific purpose, in particular for:
•    to inform you about the introduction of new or changes to existing services or products, special offers, prize games useful information about our services or products, offers adapted to your habits, or other marketing activities, i.e. for direct marketing purposes.

You can withdraw or cancel this type of consent at any time by sending the latter to the email address info@grandplazahotel.si, or the address Grand Plaza Hotel and Kongresni Center, Slovenska Cesta 60, 1000 Ljubljana, or via the online cancellation form at www.grandplazahotel.si/unsubscribe.

b) to implement the contract or fulfil our contractual obligations, we need your data, such as:
•    name and surname,
•    address,
•    e-mail address,
•    telephone number,
•    tax number,
•    transaction data (bank or credit card data, transaction account data, etc.)
or other data provided by you, which are marked as mandatory in the application form or are necessary for the fulfilment of the contract and we use them only to fulfil your order or our contractual obligations, such as:
•    Identification, preparation and conclusion of the contract, amendment of the contract, supply/delivery of goods and services, billing and payment of services, notification of changes to the general terms and conditions of business, notification based on the contractual relationship, resolution of objections, complaints or disputes and for other purposes necessary for implementation contractual relationship and related relationships, sending ordered information material, offers, invoices and other communications necessary for the execution of the order or business and for notifications about changes to our General Terms and Conditions or Privacy Policy.

The transmission of personal data is voluntary, and the transmission of mandatory data marked in the form of contracts is a condition for the fulfilment of your order or our contractual obligations. If you do not want to provide your data, which are defined as mandatory for the execution of an individual purchase or from the nature of the transaction or contract, that the contract cannot be executed without them, you will unfortunately not be able to make the purchase or reservation, or we will not be able to execute the contract.

c) We also process data based on a legitimate interest, which means our interest in carrying out our activities in a high-quality and efficient manner, and when using our services (visiting the website, interacting with ZC, ordering, concluding a contract, etc.) we provide you with everything we can for safe use of our services and quality user experience. In this sense, we process personal data for the following reasons:
•    prevention of abuse or fraud, both to the detriment of online content and the interests and property of ZC, as well as your interests, property, and data,
•    asserting claims or defending against claims in administrative, judicial, or extrajudicial proceedings,
•    improving the content and general quality and functionality of websites and our services.

d) We also process personal data based on binding regulations or to fulfil our legal obligations arising from tax, labour law and other regulations, namely to prevent money laundering, fulfilling tax obligations and other public interests.

ADDITIONAL INFORMATION ON USING THE WEBSITE AND REGISTRATION

By using our websites, you also provide us with information (hereinafter: access data), which we process based on our legitimate interest in ensuring safety, security, control over the operation and improvements of our websites or network, protection against abuse or fraud, or other legitimate interests, whereby we process the following data in particular:
• Internet Protocol (IP) address, browser type and version, time zone setting, browser add-on type and version, operating system or platform, device information, mobile phone type, visit information (arrival on our website, online behaviour pages and departures, services you viewed or searched for, page response time, download errors, time a particular page was viewed, page interaction information such as scrolling, clicks and mouse control, including date and time).

Access information is anonymized and without your registration on our websites, it is impossible to recognize or identify an individual.

By submitting a reservation on our website, you agree and confirm that you have read and familiarized yourself with the General Terms and Conditions and the Privacy Policy. You allow us to process all the provided data and information about the content of purchases by applicable regulations and for the purpose for which they are collected or you have given express consent. Do this by ticking the box "I have read and agree to the processing of my data" and complete the booking process by confirming acceptance of the General Terms and Conditions and the Privacy Policy by ticking the box "Read – I have read and accept the General Terms and Conditions and the Privacy Policy".

In the case of your explicit consent, which you give by ticking the box "Notify me about special offers", we will also use your data to inform you about the introduction of new or changes to existing services or products, special offers, prize games and useful information about our services or products, or other marketing activities, i.e. for the needs of direct marketing. You can withdraw or cancel this type of consent at any time by sending the latter to info@grandplazahotel.si or via the online cancellation form at www.grandplazahotel.si/unsubscribe.


DATA PROTECTION AND YOUR RIGHTS
To secure personal data, we will use organizational, technical and other appropriate procedures and measures to prevent unauthorized access, destruction, modification, loss or processing of your data.

Your data will not be forwarded to third parties, nor will they be processed by third parties, except in the case of authorized third parties with whom we have concluded a contract on the processing of personal data and who perform certain tasks related to the processing of personal data on our behalf and at our expense, related to the execution of your order (for example, the provider of the delivery of purchased goods, provider of the payment system, providers of additional services, etc.).

You must ensure the accuracy and up-to-dateness of the data yourself, as we, unfortunately, cannot assume responsibility for any errors, disputes or damage caused as a result of the transmission of incorrect data.

By the regulations, we guarantee you the right to access your data, to correct, delete or limit the use of your data, as well as the right to object to processing and the right to portability of personal data relating to you.

About the processing of your data, you may:
• request information about whether and which personal data we process;
• you request that incorrect personal data be corrected, supplemented or changed;
• under certain conditions, you request restriction of processing or deletion of personal data;
• withdraw your consent to the processing and use of your data in whole or in part at any time;
• request your data in a structured, commonly used and machine-readable format and pass this data on to another controller,
• address questions, comments, complaints or requests regarding the processing of your data to our personal data protection officer,
• if you believe that the processing of your data violates regulations, file a complaint with the competent supervisory authority. In the Republic of Slovenia, the competent supervisory authority is the Information Commissioner: https://www.ip-rs.si.


CONTACT
You can contact us at any time with questions, information, objections, complaints or other requests.

Zlatarna Celje d.o.o., Kersnikova 19, 3000 Celje, register no. 5048192
E-mail: zc@zlatarnacelje.si
Celje, on 03.01.2024