PERSONAL DATA PROTECTION POLICY
(Personal data controller and contact details)
The provisions of this document apply to the collection and processing of all personal data collected and processed by Istranka d.o.o. (hereinafter: ISTRANKA), for the purposes of processing personal data in the context of commercial, tourist and transport activities.
Company: Istranka d.o.o.
Address: Ukmarjev trg 7, 6000 Koper
Registration number: 2272741
Telephone: 05 62 72 140
Information on the data protection officer:
Name and Surname/company: Ivan Tratnik
Contact phone: +386 (0)40 208 021
Contact e-mail address: email@example.com
(Types of personal data processed)
Types of personal data we process:
For the needs of performing all activities and related services ordered by the Individual, Istranka, as long as this is necessary for the performance of these services, processes all data necessary for this. These include in particular: name and surname, date and place of birth, residence, e-mail address, telephone number and identity document number.
(Basis for processing personal data)
Personal data are processed when necessary to fulfill our obligations by law, or when necessary to fulfill obligations, on the basis of a contract with the Individual. Personal data is also processed when the Individual consents to the processing of his personal data. However, the given consent can be revoked at any time.
(Purposes of personal data processing)
Personal data is collected and processed for the purpose of: concluding, implementing, monitoring and terminating the contract, charging for services, resolving any complaints and meeting other requirements in accordance with the legislation governing the activities of travel agencies.
(Transmission of data to third parties)
If this is in accordance with the purpose for which personal data are processed in accordance with EU law and Slovenian legislation, the Istranka may provide personal data on Individuals:
– to other travel agencies, if the Istranka acts as an agent/subagent, or to contractors who cooperate with the Istranka to fulfill the services of the Individual, such as tourist guides, catering establishments, accommodation establishments (hotels, roommates, …), transport contractors, airlines, shipping companies, railway undertakings, travel insurance providers, all to the extent necessary to fulfill the contract.
– persons who provide payment services for Istranka, which are related to the performance of all activities.
– persons who provide sales, IT, insurance, and accounting services for Istranka.
(Retention of personal data)
Basic contact information can be stored for the purposes of fulfilling contractual obligations until full payment of the service or until the expiration of the limitation period in respect of an individual claim, which may by law last from one to five years. Invoices are kept for 10 years after the end of the year to which the invoice relates in accordance with the law.
Personal data obtained with the consent of the Individual shall be kept until revoked.
At the end of the retention period, personal data is permanently and efficiently deleted or anonymized.
The personal data of an Individual are stored in a physical or electronic personal data collection, depending on how they were obtained. The collections are adequately secured and only authorized by employees of Istranka.
Personal data received by Istranka in electronic form are stored on a computer accessed only by authorized employees of Istranka and on the server located in controlled premises to which only an authorized person has access.
(Transmission of personal data)
It is up to the individual to decide whether the Individual will provide us with his / her personal data.
Failure to provide certain categories of personal data may result in inability to provide the service or refusal to enter into a contract.
(Access to personal data)
Only persons within the company Istranka who have the authority to process personal data and third parties with whom the company Istranka has concluded a contract on the processing of data t.i. contractual processors of personal data.
Contractual processors of personal data are: StudioCriss d.o.o., Titania – Milutinović Marko s.p. and GENERALI insurance company d.d..
Contractual processors provide personal data processing services in accordance with the provisions of the contract concluded between the company Istranka and them.
The above-mentioned contractual processors may use personal data only for the agreed purposes and will not disclose them to third parties, except in the form and scope prescribed by law or permitted by the agreed purpose.
(Rights of Individuals with regard to the processing of personal data)
The Party guarantees to the Individuals the carry out of rights within 30 days of receiving the Individual’s request.
At any time, the Individual may request from Istranka to acquaint or process his personal data, which personal data he processes, the purpose of personal data processing, who are the users of such personal data, the period of personal data retention and criteria for determining the duration of personal data retention.
An individual may also request the correction of inaccurate data, and a restriction on processing when:
– Conflicts the accuracy of the data, for the specified time required to verify the accuracy of the data.
– The processing is illegal, but the Individual does not request the deletion of data, but the restriction of their processing.
– When we no longer need personal data, but the Individual needs them to assert and defend legal claims.
In the event that the conditions from Article 17 of the General Regulation on Personal Data Protection are met, the Individual may request the deletion of all his personal data (Right to be forgotten). In any case, when the data were collected on the basis of the consent of the Individual, which was subsequently revoked.
An individual may also request a printout of his or her personal data in a structured and readable form. It may transfer this information to another controller of personal data without hindrance.
Against the company Istranka the individual could file a complaint with the Information Commissioner if he/she considers that the company Istranka or another person violates applicable law by processing personal data.
(Exercising the rights of Individuals)
The company Istranka accepts requests regarding the rights from the previous article to the e-mail address firstname.lastname@example.org or to the address Istranka d.o.o., Ukmarjev trg 7, 6000 Koper.
Where there is reasonable doubt as to the identity of the Individual making the request in respect of his or her rights, the Party may request the submission of additional information necessary to confirm the identity of the Data Subject. If the Individual fails to reliably prove his own identity, the claim referred to in the previous article may be rejected.
Istranka’s offer on the website www.kopershoreexcursions.com may contain links to other websites. This Policy does not apply to other persons. As Istranka has no influence on whether the operators of other websites comply with the provisions on the protection of personal data, it also does not assume responsibility for the accuracy and completeness of the information published on other websites.
Any changes in connection with this Policy or the processing of personal data will be notified to Individuals in advance through Istranka’s communication channels, on websites or by other means of notification.
This Policy is published on www.kopershoreexcursions.com and enters into force on 25.05.2018