Privacy policy
Last updated: 2. 10. 2026
1. Who processes your data
The data controller is Matej Zidarn, holder of a supplementary activity on a farm (nosilec dopolnilne dejavnosti na kmetiji), Radegunda 24, 3330 Mozirje, Slovenia. Contact for privacy questions: apartma.orel@gmail.com, +386 70 411 401.
2. What data we process and why
Inquiries by form, email, phone or WhatsApp. Your name, email, phone (optional), requested dates, number of guests, type of stay and your message. We use them to reply and to send you an offer. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
Bookings and your stay. The data needed to carry out the booking, issue an invoice, register guests and charge the tourist tax. Legal basis: performance of a contract (Article 6(1)(b)) and legal obligations (Article 6(1)(c) GDPR).
Visiting the website. The hosting provider automatically logs technical data on each visit (IP address, time of visit, browser type) to keep the site secure. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
Giving us your data is voluntary, but without it we cannot reply to your inquiry or carry out a booking. We do not use automated decision-making or profiling.
3. Who else can access the data
Only contracted processors that help us run the website and bookings:
- Web3Forms (Web3Creative, India) forwards messages from the inquiry form to our email address.
- Bentral (Slovenia) provides the availability calendar and online booking.
- Google (Gmail) hosts our email inbox.
- Google Analytics (Google Ireland Ltd.) measures website visits, only if you allow it in the cookie settings.
- Meta Pixel (Meta Platforms Ireland Ltd.) measures how well our ads on Facebook and Instagram work, only if you allow it. We and Meta are joint controllers for collecting this data.
- Our website hosting provider.
We do not sell your data.
4. Transfers outside the EU
Web3Forms processes data in India and with infrastructure providers in several regions, and Google and Meta also in the USA. These transfers are based on the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
5. How long we keep data
Inquiries that do not lead to a booking are deleted within 2 years at the latest. Booking, invoice and guest-registration data are kept for as long as the law requires. The hosting provider keeps technical logs only for a short time.
6. Cookies
Strictly necessary cookies and the storage of your cookie choice do not need consent. The embedded Bentral calendar and booking form may use strictly necessary technical cookies only.
Analytics cookies (Google Analytics, e.g. _ga) and advertising cookies (Meta Pixel, e.g. _fbp) load only after you allow them in the cookie banner. The legal basis is your consent (Article 6(1)(a) GDPR). We keep Google Analytics data for up to 14 months. You can withdraw your consent at any time with the "Cookie settings" link at the bottom of every page.
Links to Facebook, Instagram, WhatsApp and Google Maps take you to those services, where their own privacy rules apply.
7. Your rights
You can ask at any time to access, correct or delete your data, to restrict its processing or to receive it in a portable format, and you can object to processing based on legitimate interest. Email us at apartma.orel@gmail.com and we will reply within one month. You can also lodge a complaint with the Slovenian supervisory authority, the Information Commissioner (Informacijski pooblaščenec RS), Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si.