How we handle your data.
Last updated: September 11, 2026At Podlipnik360°, operated by Karmen Podlipnik s.p., we respect your privacy and are committed to handling your personal data responsibly. In this Privacy Policy we explain what personal data we collect, why we use it, how long we keep it, who we may share it with, and what rights you have regarding it.
When processing personal data, we comply with Regulation (EU) 2016/679 (GDPR), the Personal Data Protection Act (ZVOP-2), and other applicable legislation.
1. Who we are
The controller of personal data is:
Email: info@podlipnik360.com
Website: podlipnik360.com
In this Privacy Policy, we use the terms "Podlipnik360°", "we", "us", and "our" to refer to the controller of personal data.
2. What personal data do we collect?
Depending on how you use our website and services, we may process the following personal data:
Booking and accommodation data
·first and last name·email address·phone number·booking details·arrival and departure dates·the selected apartment·number of guests·other data necessary for the booking and stayData you provide when communicating with us
·the content of your messages·data you provide in the contact form·data you provide by email or other meansPayment data
For online payments, the data needed to carry out the transaction may be processed directly by our payment service provider. We generally do not store full payment card details where they are processed by an external payment provider.
Technical data
When you visit the website, data such as your IP address, device and browser information, time of visit, pages visited, and other technical data necessary to ensure security and the correct operation of the website may be processed.
The scope of this data depends on how you use the website and your cookie settings.
3. Why do we process your data?
We use personal data mainly for the following purposes:
Processing your booking
We use your data to process inquiries and bookings, to communicate with you, to prepare the accommodation, and for other activities necessary to provide the agreed service.
The legal basis is generally the performance of a contract, or steps taken at your request prior to entering into a contract.
Communicating with you
We use your data so we can respond to your questions, requests, and messages, and to provide you with support before, during, and after your stay.
The legal basis may be performance of a contract, steps taken at your request prior to entering into a contract, or our legitimate interest, depending on the circumstances.
Payments and accounting obligations
We use data to process or record payments, issue invoices, and comply with tax, accounting, and other legal obligations.
The legal basis may be compliance with a legal obligation and, where relevant, performance of a contract.
Security and operation of the website
We use certain data to ensure the secure and correct operation of the website, to prevent misuse, and to resolve technical issues.
Where applicable, the legal basis is our legitimate interest.
Analytics and improving the website
Where we use analytics tools, we may, based on your prior consent, process data on website usage to understand how visitors use our site and how we can improve it.
In doing so, we take into account your cookie settings and applicable regulations.
Marketing
If you subscribe to our newsletter or other direct marketing, we may use your data to send you information about news, offers, and other content.
Where consent is required for this, we use your data based on your consent. You may withdraw your consent at any time.
4. Legal bases for processing
We do not process personal data without an appropriate legal basis. Depending on the circumstances, processing may be based on:
5. Who may we share your data with?
We may share your data with service providers we need in order to operate Podlipnik360° and provide our services.
This may in particular include:
If we use Bentral or another booking system, that provider may process the data necessary to carry out the booking.
Before publishing this policy, we review and, where necessary, update the list of actual service providers with access to personal data.
6. Transfer of data outside the European Economic Area
If an individual service provider were to process personal data outside the European Economic Area, we will ensure an appropriate legal basis and the safeguards required by applicable data protection regulations.
7. How long do we keep your data?
We keep personal data only for as long as necessary for the purpose for which it is processed, or for as long as required by applicable regulations.
The retention period depends on the type of data and the purpose of processing. For example:
8. Cookies and similar technologies
Our website uses cookies and similar technologies. We use cookies for various purposes, for example:
Necessary cookies
These are necessary for the correct operation of the website, security, basic functionality, and the provision of services.
Analytics cookies
These help us understand how the website is used and improve how it works.
Marketing and other non-essential cookies
These may be used for purposes such as advertising or personalization, but only where appropriate consent has been obtained for their use.
For non-essential cookies and similar technologies, consent must be obtained before they are used, and the user must be able to subsequently change or withdraw their settings.
The website must therefore also provide a way to manage cookie settings.
9. Your rights
Under the GDPR, depending on the circumstances, you may have the following rights:
These rights are not absolute, and statutory exceptions or limitations may apply.
To exercise your rights, please write to us at info@podlipnik360.com.
When handling your request, we may need to verify your identity to prevent unauthorized access to personal data.
10. Right to lodge a complaint
If you believe your personal data is being processed in breach of applicable regulations, you have the right to lodge a complaint with the competent supervisory authority.
Email: gp.ip@ip-rs.si
Website: www.ip-rs.si
11. Security of personal data
We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, alteration, or other unlawful processing.
We tailor the scope of our security measures to the risks associated with the processing of personal data and to the nature of our services.
12. External websites
Our website may contain links to third-party websites, services, or platforms.
We are not responsible for their content, security, or how they process personal data. For information about data processing on those sites, we recommend checking their own privacy policies.
13. Changes to this Privacy Policy
We may update this policy from time to time due to changes in our services, technology, legislation, or the way we process personal data.
We will publish the date of the last update at the top of the page. We recommend checking the current version of the policy from time to time.
14. Contact
For questions about privacy, the processing of personal data, or exercising your rights, you can contact us:
Email: info@podlipnik360.com
Website: podlipnik360.com
