PRIVACY POLICY AND PERSONAL DATA SECURITY

At WINEDVENTURE TRAVEL d.o.o., we respect the privacy of our customers and therefore we handle their personal data responsibly, carefully, and in accordance with the applicable laws in the Republic of Slovenia. Access to personal data is only permitted to authorized employees and contractual processors, to the extent and for the purpose necessary for the smooth execution of work processes, the provision of company services, and the fulfillment of rights and obligations arising from concluded contractual relationships with the customer.

The controller of personal data is the company Winedventure travel, turizem in gostinstvo d.o.o., with its business address at Kidričeva cesta 23, 4000 Kranj.

We ensure that unauthorized persons do not have access to personal data, protect their confidentiality and integrity, and prevent their loss or unintentional destruction throughout the processing. We are not responsible for any “intrusions” into the computer system!

The company and its processors fully respect the general principles regarding the processing of personal data, which are:

  1. We process users’ personal data lawfully, fairly, and transparently.
  2. We collect personal data for specific, explicit, and legitimate purposes; personal data are not processed for any other purpose, except in the case of processing for scientific or historical research purposes and under certain conditions for statistical purposes.
  3. Personal data are processed to the minimum extent and exclusively for the purposes for which they are processed.
  4. We ensure that the personal data we process are accurate and regularly updated, and incorrect data are corrected or deleted.
  5. We only keep personal data for as long as necessary for the purposes for which they are processed.
  6. With appropriate technical and organizational measures, we ensure adequate security of personal data, which includes preventing unauthorized or unlawful processing as well as accidental loss, destruction, or damage.

1. CONTACT FOR PRIVACY

For questions regarding the processing and use of personal data, information, corrections, blocking, deletion of personal data, or withdrawal of consent for information, please contact explore@winedventure.com (hereinafter: email address under point 1).

2. WHAT PERSONAL DATA IS COLLECTED

Basic personal data (e.g., name and surname, date of birth, travel document number);

  • Communication data (e.g., address, postal code, telephone number, email);
  • Information about communication between the company and you;
  • Payment data;
  • All other data obtained with consent.

3. WHAT ARE THE LEGAL GROUNDS FOR PROCESSING YOUR PERSONAL DATA

Personal data may be processed in accordance with applicable data protection laws:

  • if necessary for the conclusion and/or performance of a contract (registration for an event, workshop, etc.);
  • if required by law;
  • if consent is given (which may be revoked at any time);
  • if processing is necessary for the legitimate interests of the company or a third party.

3.1. PROCESSING BASED ON A CONTRACT

The company processes individuals’ personal data to fulfill obligations arising from a contractual relationship for organizing events, workshops, or other services agreed upon between the contracting parties. In exercising rights and fulfilling contractual obligations, the company processes individuals’ personal data for the following purposes:

  • individual identification;
  • preparing an offer and concluding a contract;
  • providing services, whereby the company may provide data to contractual partners who will perform specific services (e.g., accommodation providers, etc.);
  • sending notifications to individuals regarding the execution of the contractual relationship;
  • informing about changes in legislation in a particular area or changes in sales conditions;
  • invoice issuance services;
  • resolving objections or complaints;
  • conducting all recovery procedures, debt collection;
  • for other purposes necessary for the conclusion or performance of the contractual relationship.

The company processes data to the extent necessary for authentication and transaction identification, for preparing reports, and planning further activities.

For the purpose of organizing events and related services or other services ordered by an individual, the company processes all necessary information. This includes, in particular but not exclusively: name, surname, date of birth, address, city, country, telephone number, email, etc.

Explicit consent is not required for the contractual processing of personal data.

In events or workshops strictly related to photography and the publication of images (on Facebook, Twitter, YouTube, and Instagram), it should be noted that photography and image posting are part of the event or workshop. Despite being part of a contractual relationship, the company will still obtain explicit consent from the individual for photography and image posting. If explicit consent for photography and image posting is not given and the company cannot ensure that the individual will not be in the photograph, the company may reasonably reject registration for such an event or workshop.

If an individual does not provide all the personal data necessary for the company to fulfill the contractual relationship, the company cannot execute the individual’s order. The company always obtains and further processes only the personal data necessary to fulfill the contractual relationship.

3.2. PROCESSING BASED ON LAW

The legal basis means that the company processes an individual’s personal data to fulfill valid legal obligations imposed by legislation. In the Republic of Slovenia, legal obligations for processing certain personal data are particularly determined by:

  • Zakon o davku na dodano vrednost ZDDV-1;
  • Zakon o davčnem postopku;
  • Zakon o gospodarskih družbah;
  • Zakon o računovodstvu;
  • Pravilnik o izvajanju Zakona o davku na dodano vrednost;
  • Slovenski računovodski standardi;

and other relevant legislation.

The company also processes personal data for the purpose of issuing invoices, keeping accounts, and preparing various types of reports. These types of personal data processing are necessary to fulfill legal obligations and execute rights and obligations arising from contracts.

4. FOR WHAT PURPOSES DO WE USE YOUR PERSONAL DATA

For the purposes of executing a contract (registration for an event, workshop, etc.); for the purpose of fulfilling legal obligations; for the purpose of consent; for the purpose of legitimate interests; for the purpose of direct marketing and/or newsletters.

The company collects and processes personal data for specific, clear, and legitimate purposes and does not process them in a manner incompatible with the purposes for which they were collected. The company may not use personal data for statistical or research purposes, without previously anonymizing the personal data.

5. HOW LONG DO WE KEEP YOUR PERSONAL DATA

We will keep personal data for as long as necessary to fulfill the purposes for which they were collected or for the period required by applicable law. Upon termination of the purpose for which personal data were collected, the personal data will be deleted or anonymized.

6. TRANSFER OF PERSONAL DATA TO THIRD PARTIES

The company may transfer personal data to third parties if necessary to fulfill its contractual obligations or legal obligations. In any case, the company does not sell, rent, or provide personal data to third parties for marketing purposes.

7. YOUR RIGHTS

Individuals have the following rights with respect to their personal data:

  • Right of access: The right to request access to their personal data.
  • Right to rectification: The right to request the rectification of their personal data if it is inaccurate or incomplete.
  • Right to erasure (“right to be forgotten”): The right to request the erasure of their personal data if it is no longer necessary for the purposes for which it was collected, or if they withdraw consent on which processing is based, and there is no other legal ground for processing.
  • Right to restriction of processing: The right to request the restriction of processing of their personal data.
  • Right to data portability: The right to receive their personal data in a structured, commonly used, and machine readable format and to transmit those data to another controller.
  • Right to object: The right to object to the processing of their personal data based on the legitimate interests pursued by the company or a third party, including profiling, unless there are compelling legitimate grounds for the processing that override their interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.
  • Right to withdraw consent: The right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Individuals can exercise their rights by contacting the company by email at explore@winedventure.com.

If an individual believes that their rights have been violated, they have the right to file a complaint with the supervisory authority.

8. RIGHT TO LODGE A COMPLAINT REGARDING THE PROCESSING OF PERSONAL DATA

Everyone has the right to lodge a complaint regarding the processing of personal data. Complaints should be sent to the email address from point 1. You also have the right to lodge a complaint directly with the Information Commissioner if you believe that the processing of personal data concerning you violates Slovenian laws or EU regulations on the protection of personal data. If you have exercised the right to access data and upon receiving the decision you believe that the personal data you received are not the personal data you requested, or that you have not received all the requested personal data, you can lodge a reasoned complaint with the Company within 15 days before lodging a complaint with the Information Commissioner. The Company will decide on the complaint as a new request within five working days of receipt.

9. FINAL PROVISIONS

The company reserves the right to change or supplement the privacy policy at any time, taking into account the applicable regulations regarding the protection of personal data. Any changes or supplements will be published on the company’s website.

This Privacy Policy applies from April 15, 2024, until its withdrawal.

The company’s website may contain links to other websites. The company is not responsible for the privacy policies or practices of other websites. We encourage our users to be aware when they leave our site and to read the privacy statements of each website that collects personal data.

Any communication regarding this Privacy Policy can be sent to the company by email at explore@winedventure.com.

Thank you for your trust.
WINEDVENTURE TRAVEL d.o.o.