Privacy Policy

Privacy Policy

Privacy policy of CHILDREN’S HOLIDAY AND RECREATION ASSOCIATION p. o., Ljubljana, Trg prekomorskih brigad 1, Ljubljana, 1000 Ljubljana, VAT Number: SI46297626, Registration Number: 5573483000 (hereinafter: the association)

Personal Data Protection Policy

The purpose of the Privacy Policy (hereinafter: the Policy) is to inform all users of the purposes and basis for the processing of personal data by the association and their rights in this area. At the same time, this Policy further clarifies the consent for data processing. In accordance with the General Regulation and the currently valid Personal Data Protection Act and the Electronic Communication Act, the Policy contains the following information:

contact information of the association
purposes, basis, and types of processing of various types of personal data
transmission of data to third parties and third countries
storage time of individual types of personal data
rights related to processing of personal data
the right to file a complaint concerning the processing of personal data

Where applicable, the provisions related to individuals shall also apply to issues of secrecy and confidentiality of communications of users who are legal entities. The controller of personal data processed in accordance with the Personal Data Protection Policy is CHILDREN’S HOLIDAY AND RECREATION ASSOCIATION p. o., Ljubljana, Trg prekomorskih brigad 1, Ljubljana, 1000 Ljubljana, VAT Number: SI46297626, Registration Number: 5573483000.

Purposes of processing and basis for data processing

Processing on the basis of the contract: The association processes the personal data of individuals´ confidentially and only for the purposes one has provided: notification of new entries on the website, purposes of offering activities, segmentation purposes.

In the context of exercising rights and fulfilling contractual obligations, the association processes personal data of individuals for the following purposes:

electronic notification of activities and fulfilment of obligations related to payment
telephone notification and communication with parents or legal entities
notification and sending documents by post
registration of guests in accommodation facilities
data about the company/department/organisation for the fulfilment of duties related to payment obligations – creating and sending invoices
public posting of group or individual photos, videos, audio recordings of activities organised or carried out by the association

Processing of Personal Data

The association processes the personal data of individuals for the purposes of concluding, implementing, monitoring, and terminating the contractual relationship. The data you provide to us as part of your inquiry are provided voluntarily and based on your consent to communicate with us by email or post for the purpose of communicating about your inquiry. We will only process this data for the purposes of preparing the offer and mutual communication. You are solely responsible for the correctness and accuracy of this data.

The individual to whom the personal data relates can withdraw or modify their consent at any time. Consent may be given by a parent, a foster parent, or a guardian of a minor child who, according to the current legislation, cannot give consent on their own. In the event of revocation of consent for the public posting of group or individual photographs or other video content, this has no consequences on the already concluded contract.

Transmission of data to third parties and third countries (countries that are not members of the European Union or the European Economic Area)

The association may, if this is consistent with the purpose for which personal data is processed under EU law and Slovenian regulations, transfer personal data about individuals:

to persons performing specific processing tasks for the company, such as: preparation and sending of invoices or data analytics, guest registration, postal and shipping services; to providers of file destruction and data carriers; to providers of ICT services in the context of servicing and maintenance of software and hardware; to the administrator and webmaster, when these tasks include the processing of personal data to the extent necessary
to persons cooperating with the association in the organisation of activities (e.g., kindergarten, institute, school) to the extent necessary to fulfil the purpose of using a particular service
The association will not forward your personal data to third countries or international organisations.

If the association is merged or taken over by another legal entity, the personal data is transferred to the acquirer in accordance with the law. By using our services, you consent to the further processing of your personal data by the acquirer.

Storage time of personal data

For the purpose of fulfilling contractual obligations, billing data and related contact data of individuals may be retained until full payment of the service or, at the latest, until the expiry of the statute of limitations in respect of the individual claim, which may by law range from one to five years. Invoices shall be kept for 10 years after the end of the year to which the invoice relates in accordance with the law governing value added tax. After fulfilling the purpose for which the data was obtained, the data is immediately, irretrievably and permanently deleted.

Rights of individuals in relation to the processing of personal data

The association ensures that individuals exercise their rights without undue delay and in any event within one month of receiving a request. The association accepts requests concerning the rights of individuals by telephone 01 51 32 650 or by e-mail info@zavod-zlro.si or by post addressed to ZLRO, Trg prekomorskih brigad 1, 1000 Ljubljana. When there is a reasonable doubt regarding the identity of an individual who submits a request concerning one of their rights, the association may request the provision of additional information necessary to confirm the identity of the individual to whom the personal data refer. If the requests of the data subject are clearly unfounded or excessive, especially because they are repetitive, the association may refuse to act on the request.

Individuals have the following rights in relation to the processing of personal data:

the right to access data
the right to correction
the right to erasure (“the right to be forgotten”)
the right to limit processing
the right to data portability

An individual can report a possible complaint regarding the processing of personal data by calling the telephone number 01 51 32 650 or by sending an e-mail to info@zavod-zlro.si or by sending post addressed to Zavod za letovanje in rekreacijo otrok, Trg Prekomorskih brigad 1, 1000 Ljubljana.

Likewise, every individual to whom personal data relates has the right to file a complaint directly with the Information Commissioner if they consider that the processing of personal data concerning them violates Slovenian or EU regulations in the field of personal data protection.

If an individual has exercised their right to access data at the association and, after receiving the company’s decision, considers that the personal data received is not the personal data they requested or that they did not receive all the requested personal data, they may file a reasoned complaint with the association within 15 days before filing a complaint with the Information Commissioner. The association must decide on the appeal as a new request within five working days.

Validity of the Policy

This Policy was published on the website www.zavod-zlro.si on the 22nd of February 2023.

We reserve the right to adapt the Policy, if necessary, in accordance with the applicable legislation in the field of personal data protection. Therefore, we ask you to check the current version before each transmission of personal data to ensure that you are aware of any changes and additions.