Privacy Policy
We are committed to protecting your privacy.
This privacy policy applies to the website www.whapartments.si. It outlines the principles for processing and storing personal data provided by users in relation to their use of services offered by Gast gostinstvo d.o.o.
Data Controller
The data controller for personal data collected on this website is Gast gostinstvo d.o.o., Cesta dveh cesarjev 170, 1000 Ljubljana, registration number: 1798740000, VAT ID: SI64409783. We are committed to respecting your privacy and processing your personal data securely and in accordance with data protection legislation (Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act – ZVOP-1). The collected data is used solely for purposes related to our business.
Data Processor
We collaborate with external service providers who act as our data processors. They process data on our behalf for purposes such as booking reservations, providing analytical and marketing services, improving service, and enhancing user experience.
We use the Booking Engine Cubilis from Stardekk NV. to capture and process direct online reservations at our accommodation. Stardekk NV. complies with the EU-U.S. Privacy Shield Framework. More about Stardekk’s privacy policy can be found [here](https://www.stardekk.com/privacy-policy).
For processing newsletter subscriptions and sending promotional newsletters, we use software from SendPulse Inc. and ZOHO Campaigns. SendPulse Inc. stores our data in the EU and the USA and complies with the EU GDPR. More about SendPulse’s privacy policy can be found [here](https://sendpulse.com/legal/pp).
How Do We Collect Your Personal Data?
We handle your data with the utmost care. All personal data obtained from website users is private and confidential.
We collect personal data through the reservation form, where users enter all personal data relevant to the booking and our provision of the requested service.
Additionally, we collect personal data when users fill out the newsletter subscription form.
We physically collect personal data from guests upon check-in at the hotel reception.
Apart from the personal data you provide via the aforementioned methods, this website uses technology that collects certain technical data, such as the user’s IP address. The user’s IP address is recorded when they sign up for the newsletter (and serves only as proof that the user has subscribed to the newsletter themselves).
In all other cases, we do not associate IP addresses with individuals, and each website user remains anonymous. We collect anonymous data about your use of our website using cookies and similar technologies. More information on how we use these technologies to collect information about you can be found in our Cookie Policy, accessible by clicking the blue icon in the bottom left corner of the website.
What Personal Data is Collected?
In the reservation form, we collect the following:
– Name, surname, phone number, email address, and country of the user;
– User company information (if the reservation is made for a company);
– Credit card information (type of credit card, cardholder’s name, credit card number, expiration date);
– Guest stay details, including arrival and departure dates, type of service, choice of special offers, special requests, and preferences;
– An optional subscription to our promotional newsletters by ticking an empty checkbox.
In the newsletter subscription form, we collect the user’s name, surname, email address, preferred language, date and time of subscription, and IP address.
For event inquiries, we collect all relevant event details (contact details such as name, surname, email, company name and address, event start and end time, event duration, number of participants, any accommodation needs, and requested services).
Upon check-in at the hotel reception, we collect the guest’s name and surname, country, date of birth, type of personal document, and personal number.
For What Purpose is Personal Data Used?
All data collected in the reservation form is used to process your reservation and communicate regarding the provision of our services; this includes transactional emails to execute the business agreement formed by the submitted reservation between us and the recipient of our services (the guest).
Email addresses obtained through the newsletter subscription form or by ticking the empty checkbox for newsletter subscription in the reservation form are used to send promotional material about our offers via the SendPulse email marketing system. The name and preferred language data obtained in the same form are used to customize the user experience of receiving newsletters.
Data collected through the event inquiry form is used to prepare offers for events, meetings, or conferences at our hotel.
Personal data obtained upon check-in at the hotel reception is collected to fulfill our legal obligations.
Legal Basis for Processing Personal Data
– Reservation form: Fulfillment of the controller’s legal obligations
– Newsletter subscription: Personal consent
– Event inquiry: Fulfillment of the controller’s contractual obligations
– Check-in at the reception: Fulfillment of the controller’s contractual obligations, fulfillment of the controller’s legal obligations
Data Retention Period
We retain personal data for as long as necessary to fulfill the purposes for which it was collected or until the individual withdraws their consent. Upon written revocation of consent, the data is deleted.
Video Surveillance
Gast gostinstvo d.o.o. conducts video surveillance.
Video surveillance is conducted at the WH Apartments, Celovška cesta 172, 1000 Ljubljana, and its immediate surroundings to ensure the safety of people (employees and customers), protect property, secure business premises, monitor entry to facilities, and investigate criminal offenses (based on legitimate interest as defined in point (f) of Article 6(1) of the GDPR, in conjunction with Articles 76 and subsequent of ZVOP-2).
In some work areas (e.g., corridors), video surveillance is conducted where necessary for the safety of people or property or to protect confidential data or trade secrets. Video surveillance will assist us in detecting, handling, or resolving incidents, criminal offenses, claims for damages, or other claims.
Recordings are retained for a maximum of 5 days.
Video surveillance is not conducted in a manner that would have a significant impact on processing. Additionally, video surveillance does not enable unusual further processing, such as transfers to third-country entities. Video surveillance allows live monitoring of events.
All information regarding the implementation of video surveillance can be obtained via email at info@whapartments.si. Individual rights are described in this Privacy Policy. Additional questions can also be directed to the data protection officer at info@whapartments.si.
Your Rights
You may withdraw your consent at any time, request access, correction, restriction of processing, deletion of personal data, or lodge a complaint regarding the processing of your data by notifying us in writing by mail at Gast gostinstvo d.o.o., Cesta dveh cesarjev 170, 1000 Ljubljana, or by email at info@whapartments.si.
If our handling does not meet your expectations, you have the right to file any claim or complaint with the relevant supervisory authority, which is the Information Commissioner of the Republic of Slovenia.
Our Contact
The controller of your personal data is Gast gostinstvo d.o.o., Cesta dveh cesarjev 170, 1000 Ljubljana, registration number: 1798740000, VAT ID: SI64409783.
If you have questions about how we process your personal data, or if you wish to exercise any of the rights provided by this privacy policy, please contact us at info@whapartments.si.
Validity
The effective date of this privacy policy is July 2024. This document may be changed without prior notice.