Privacy Policy

Data controller

The controller of your personal data is Jožef Možina s.p., Vrhovci, cesta XVII 38, 1000 Ljubljana, Slovenia, company reg. no. 8503044000, tax no. SI47531398 (“Vila Dobra” or “we”).

Contact for data protection matters: jomozina@gmail.com.

What data we process

When you complete the contact/inquiry form, we process the data you provide: first and last name, email address, phone number, desired arrival and departure dates, number of guests, information about pets, and the content of your message.

We do not automatically collect other data through the website (see Cookie Policy).

Purpose

We use the data solely to: respond to your inquiry, prepare an accommodation offer, and communicate regarding your inquiry.

Legal basis

• taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR), and
• your consent, given by submitting the form and confirming the consent box (Art. 6(1)(a) GDPR).

You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing before withdrawal.

Processors and recipients

We do not sell your data. The following processors are involved:

• Netlify — website hosting and form submission processing;
• Google (Gmail) — receiving email notifications of inquiries.

As these providers are based in the USA, data may be transferred to the USA based on appropriate safeguards under Art. 46 GDPR (e.g. Standard Contractual Clauses) or under the EU-US Data Privacy Framework.

Retention

We keep inquiry data until the inquiry is resolved and then for a maximum of 12 months, unless the inquiry leads to a reservation or contract — in which case retention periods related to that relationship and tax law apply.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. Send requests to jomozina@gmail.com.

If you believe processing infringes the law, you may lodge a complaint with the Information Commissioner of the Republic of Slovenia (Dunajska cesta 22, 1000 Ljubljana; gp.ip@ip-rs.si; www.ip-rs.si).

Security and automated decision-making

We apply reasonable technical and organisational measures to protect your data. We do not carry out automated decision-making or profiling.