Karavanke Holiday Getaway
Last updated: 8 November 2026
1. General Information
At Karavanke Holiday Getaway, we respect the privacy of our website visitors and guests. We process personal data in accordance with the General Data Protection Regulation (GDPR), the Slovenian Personal Data Protection Act (ZVOP-2), and other applicable legislation.
This Privacy & Cookie Policy explains what personal data we collect and process, why we process it, which third-party services we use, and what rights you have regarding your personal data.
Our website, www.karavanke-holiday.com, provides information about our holiday accommodation and access to an external online booking system.
2. Data Controller
The data controller responsible for processing personal data related to accommodation services is:
Tina Marie Tavčar – Registered Accommodation Provider
Ledina 2, Zasip
4260 Bled, Slovenia
Registration number: 2514460000
Accommodation:
Karavanke Holiday Getaway
Hrušica 179
4276 Hrušica, Slovenia
Email: karavankeholiday@gmail.com
Phone: +386 41 694 180
Website: https://www.karavanke-holiday.com
For any questions regarding the processing of your personal data, please contact us using the email address provided above.
3. Personal Data We Process
When providing accommodation services, we may process the following categories of personal data:
First and last name.
Email address and telephone number.
Booking details, including arrival and departure dates and the number of guests.
Information required for accommodation payments and invoicing.
Information required by Slovenian law for guest registration.
Information included in messages, enquiries, and correspondence.
Technical information processed when using our website and third-party services.
We only process personal data that is necessary for a specific and lawful purpose.
4. Purposes and Legal Bases for Processing
We process personal data for the following purposes:
Accommodation Reservations and Services
Personal data is processed to prepare offers, confirm reservations, and provide accommodation services.
Legal basis: Article 6(1)(b) GDPR – performance of a contract or steps taken before entering into a contract.
Compliance with Legal Obligations
We process personal data to comply with applicable legal obligations, including guest registration, accounting, taxation, and invoicing requirements.
Legal basis: Article 6(1)(c) GDPR – compliance with a legal obligation.
Communication with Guests and Website Visitors
We process information submitted by email, telephone, or messaging services to respond to enquiries, provide offers, and manage reservations.
Legal basis: Article 6(1)(b) GDPR where communication relates to a reservation or accommodation contract, or Article 6(1)(f) GDPR – legitimate interests in responding to general business enquiries.
Protection of Legal Interests
Where necessary, personal data may be processed to handle complaints, establish legal claims, or defend against legal proceedings.
Legal basis: Article 6(1)(f) GDPR – legitimate interests.
Non-Essential Cookies and Third-Party Content
Where consent is required for cookies or similar technologies, personal data is processed on the basis of the visitor’s prior consent.
Legal basis: Article 6(1)(a) GDPR and Article 225 of the Slovenian Electronic Communications Act (ZEKom-2).
5. Online Reservations Through Bentral
Online reservations are provided through Bentral, an external booking management system embedded into our website.
The booking form and its associated functions are operated by the external service provider.
Personal data entered into the booking form is processed through the Bentral reservation system and is not stored in a separate database operated by our Google Sites website.
As the accommodation provider, we remain the data controller for guest information required to manage reservations and provide accommodation services.
Bentral processes personal data in connection with the booking service, subject to its contractual arrangements and applicable data protection requirements.
The external booking system may also use technical information, cookies, and similar technologies necessary for its functionality.
For further information, please refer to Bentral’s privacy policy:
https://www.bentral.com/sl/zasebnost
6. Credit and Debit Card Payments
The Karavanke Holiday Getaway website does not independently process card payments or store payment card details.
Online card payments are handled through external payment service providers connected to the Bentral booking system.
Payment card information required to complete a transaction is processed by the relevant payment service provider according to its own privacy and security policies.
As the accommodation provider, we may receive payment confirmation, transaction amounts, payment status, and other information necessary to manage reservations and fulfil accounting obligations.
We do not store full payment card numbers or card security codes.
7. Guest Registration and eTurizem
As a registered accommodation provider in Slovenia, we are legally required to collect and submit certain guest information to the competent authorities.
This may include reporting guest information through the Slovenian eTurizem system, administered by AJPES, and fulfilling other statutory registration requirements.
Only the personal data required under applicable legislation is collected and submitted for this purpose.
Legal basis: Article 6(1)(c) GDPR – compliance with a legal obligation.
8. Website Hosting – Google Sites
Our website is created and hosted using Google Sites, a service provided by Google.
When visitors access the website, Google may process technical information such as IP addresses, browser information, device information, and website usage data.
As a user of the Google Sites platform, we do not have direct control over all technical processes or settings within Google’s infrastructure.
For further information, please refer to:
Google Privacy Policy:
https://policies.google.com/privacy
Google Cookies Policy:
https://policies.google.com/technologies/cookies
9. Cookies
Cookies are small data files or similar technologies that websites and third-party services may store or access through a visitor’s browser.
Our website and its integrated third-party services may use the following categories of cookies:
Essential and Functional Cookies
These cookies support basic website functionality, security, session management, and certain user preferences.
Cookies that are strictly necessary to provide a service explicitly requested by a visitor generally do not require prior consent.
Analytics Cookies
Google or other integrated services may use technologies to analyse website usage.
Where such cookies are not strictly necessary, they may only be used in accordance with applicable consent requirements.
Booking System Cookies
The embedded Bentral booking system may use cookies and similar technologies to maintain booking sessions, provide security, and support reservation-related functions.
Information about cookies used by the booking system is provided through the applicable information and privacy notices of the service provider.
Third-Party Media Cookies
External content providers, including YouTube, may use cookies and similar technologies when their content is loaded or played.
Where required by law, non-essential technologies must not be activated without the visitor’s prior consent.
Managing Cookies
Google Sites provides its own cookie notice, allowing visitors to accept or reject certain Google cookies according to the options offered by Google.
Visitors can also manage, restrict, or delete cookies through their browser settings.
Where consent is required, it must be freely given, informed, and capable of being withdrawn.
10. Embedded YouTube Videos
Our website may contain embedded videos hosted by YouTube, a service provided by Google.
These videos are intended to provide information about our accommodation, the surrounding area, and local attractions.
When an embedded YouTube player is loaded or used, the visitor’s browser may establish a connection with Google or YouTube servers.
This may involve processing technical information, including IP addresses, browser and device information, and information about interactions with the video player.
YouTube may also use cookies and similar technologies.
Where required by applicable law, prior consent must be obtained before non-essential cookies or similar tracking technologies are activated.
Visitors may alternatively watch videos directly on YouTube, where Google’s and YouTube’s own privacy policies and terms of service apply.
Google Privacy Policy:
https://policies.google.com/privacy
YouTube Terms of Service:
https://www.youtube.com/t/terms
Watching YouTube videos is not necessary to browse our website or make an accommodation reservation.
11. Links to Third-Party Websites
Our website may contain links to external websites and services, including Google Maps, YouTube, Booking.com, Airbnb, and other tourism-related websites.
When visitors follow an external link, the privacy policy and terms of the respective external website or service provider apply.
We recommend reviewing these policies before submitting personal information to third-party websites.
12. Communication by Email and WhatsApp
Visitors and guests may contact us via email, telephone, or WhatsApp.
We use the personal information provided through these channels to respond to enquiries, prepare offers, arrange arrivals, and provide accommodation services.
When using third-party communication services such as Gmail or WhatsApp, personal data may also be processed by the respective service providers in accordance with their privacy policies.
We do not use guest contact details to send unsolicited marketing messages.
13. Recipients of Personal Data
Where necessary, personal data may be processed by or disclosed to:
Bentral and its service provider for reservation management.
External payment service providers for card transactions.
AJPES and other competent public authorities where legally required.
Email and communication service providers.
Accounting, administrative, or other professional service providers where their involvement is necessary and lawful.
We do not sell guests’ personal data.
14. International Data Transfers
Some external service providers, including Google, YouTube, and Meta, may process personal data outside the European Economic Area (EEA).
Where such transfers are subject to the GDPR, appropriate legal mechanisms and safeguards must apply.
These may include European Commission adequacy decisions, where applicable, or Standard Contractual Clauses.
Further information about international transfers is available in the privacy policies of the relevant external service providers.
15. Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable legislation.
Reservation Data
Reservation information is retained for the period necessary to provide accommodation services and, where applicable, for subsequent legal, accounting, or legitimate business purposes.
Invoices and Accounting Records
Financial and accounting information is retained for the periods required by applicable Slovenian legislation.
Guest Registration Data
Information required for statutory guest registration is retained in accordance with the relevant legal requirements.
Correspondence
Emails and other communications are retained for as long as reasonably necessary to respond to enquiries, manage reservations, or protect legitimate interests.
Cookies
Cookie retention periods depend on their type, purpose, and the settings established by the relevant service provider.
When the applicable retention period expires, personal data is deleted or anonymised unless another lawful basis justifies its continued retention.
16. Personal Data Security
We apply appropriate organisational and technical measures to protect personal data against unauthorised access, loss, misuse, or unlawful processing.
Access to guest information is limited to persons who require it to provide accommodation services and fulfil legal obligations.
We use external specialised service providers for reservation management and online card payments.
Although no electronic service can guarantee absolute security, we aim to minimise risks to personal data.
17. Your Rights Under the GDPR
Under the GDPR, and subject to applicable legal conditions, you have the following rights:
Right of access: To request information about the personal data we process about you.
Right to rectification: To request correction of inaccurate or incomplete personal data.
Right to erasure: To request deletion of personal data where the legal requirements are met.
Right to restriction of processing: To request that processing be restricted under certain circumstances.
Right to object: To object to processing based on legitimate interests.
Right to data portability: To receive your personal data in a structured, commonly used, machine-readable format where applicable.
Right to withdraw consent: To withdraw consent at any time where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, please contact:
karavankeholiday@gmail.com
We will normally respond within one month of receiving your request, in accordance with the GDPR.
Certain information may need to be retained despite a deletion request where this is required by law.
18. Right to Lodge a Complaint
If you believe that your personal data has been processed in violation of applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority.
In Slovenia, this authority is:
Information Commissioner of the Republic of Slovenia
Dunajska cesta 22
1000 Ljubljana, Slovenia
Website: https://www.ip-rs.si
19. Changes to This Policy
We may update this Privacy & Cookie Policy to reflect changes in legislation, website functionality, third-party services, or our personal data processing activities.
The current version will be published on:
https://www.karavanke-holiday.com
The date of the latest update is indicated at the beginning of this document.
Online reservations are handled through the external booking system Bentral, which is embedded into our website.
Booking information is processed through Bentral and is not stored in a separate database on our Google Sites website.
Card payments are processed by external payment service providers. We do not store full payment card details.
As the accommodation provider, we process the personal information necessary to manage reservations, provide accommodation services, and comply with legal obligations.
For further information, please read our Privacy & Cookie Policy and Bentral’s Privacy Policy.
Tina Marie Tavčar, as the registered accommodation provider, processes guests’ personal data in accordance with applicable data protection legislation.
Personal data is used to manage reservations, provide accommodation services, communicate with guests, and fulfil legal obligations, including guest registration and invoicing.
Online reservations are processed through the external Bentral booking system, while card payments are handled by connected external payment service providers.
Further information about personal data processing, legal bases, data recipients, retention periods, and individual rights is available in our Privacy & Cookie Policy published on www.karavanke-holiday.com.