Privacy Policy and Cookies

Boutique Hotel Milka – Privacy Policy

1. General

This Privacy Policy (hereinafter referred to as “Policy”) applies to any individual whose personal data is processed by the company Moya Estates d.o.o.

We care deeply about your privacy. We treat your data with great care and comply with the provisions of the General Data Protection Regulation (GDPR) and the law governing the protection of personal data.

The controller of the filing system is the company Moya Estates d.o.o., Pregljeva 3, 1230 Domžale, registration number 8195196000.

The words “we”, “our”, “us” and “Boutique Hotel Milka” refer to Moya Estates d.o.o. (“provider”) and our services, and the words “you”, “your” and similar refer to the individuals that use our reservation system or are guest in Boutique Hotel Milka.

The data we collect help us provide a good user experience, provide a reservation system in provide our hotel services.

Moya Estates d.o.o. uses reservation system Bentral to collect bookings for its hotel rooms. The provider of Bentral is the company Intersplet d.o.o., Slance 8, 3221 Teharje, Slovenija. Booking a stay at hotel is not possible without providing personal data as follows: name, surname, country of residence, e-mail address and phone number.

Your personal data such as name, last name or email address are never sold or shared with third parties in any other way. But in the event the provider is acquired by another company, all the data will be transferred to the acquirer.

The terms used in the Privacy Policy mean as follows:

  • Processor of personal data: Processor means the company Moya Estates d.o.o., which determines the purposes and means of the processing of your personal data, gained through a booking of hotel services via website hotelmilka.si, via external reservation systems, e.g. booking.com, agoda.com, hotels.com, trivago.com etc., via telephone or via email.
  • Contractual data processor means a legal or physical person entrusted by the processor with certain tasks concerning the processing of your personal data.
  • User of the reservation systems: an individual, who identifies themselves in the process of reservation with their name, surname and other means of identification prescribed by this Privacy Policy, and who agrees with this Privacy Policy and uses these services on their own behalf.
  • User of the hotel services: an individual, who stays at Hotel Milka and identifies with their name, surname and other means of identification prescribed by this Privacy Policy, and who agrees with this Privacy Policy and uses these services on their own behalf.
  • Personal data: Any data referring to a user of the reservation system or hotel services at Hotel Milka.
  • Rules on the protection of personal data is an internal rulebook on the protection of personal data adopted by the processor or contractual processor of personal data.

2. Data protection officer

Moya Estates has appointed a data protection officer. Any questions related to the Privacy Policy should be addressed to hello@hotelmilka.si.

3. The data we collect

Website visitors who do not use the reservation system

The data we collect on website visitors who do not use the reservation system is very limited. We log your IP address to be able to address any server problems, compile statistics about the use of our services, and improve the user experience. Regardless of whether your IP address is different every time you visit our site or always the same, it would be very difficult for us to use it to identify you, nor do we attempt that. If you have arrived at our site by clicking a link or advertisement on another site, we log this information. This allows us to better understand the interests of our users and improve the online presence of our services. All the collected data is aggregated and collected in our database, where we analyse them at aggregate level, never for individual users. We also collect data with the analytical tool Google Analytics Solutions.

Users of the reservation system and users of hotel services

Regardless the point of booking – via website www.hotelmilka.si, via one of the external booking system, e.g. booking.com, agoda.com, hotels.com, trivago.com etc., via telephone or via email, the reservation can only be confirmed by providing personal data. The same applies  for the guests at the hotel – check in is possible only by providing personal data:

  • Name
  • Surname
  • Country of residence
  • E-mail address
  • Phone number
  • Language settings
  • Personal ID number (at check in)
  • Date of birth (at check in)

4. Contract-Based Data Processing

The company Moya Estates d.o.o. collects and processes individuals’ personal data in accordance with a concluded contract for reservation of the rooms in Hotel Milka.

Furthermore, the company Moya Estates d.o.o. collects and processes individuals’ personal data in accordance with contracts concluded with their business partners. Pursuant to these contracts, the company collects the personal data of those individuals that are in some way necessary for the execution of the contract.

Personal data collected on these grounds are necessary for the purposes of executing the concluded contracts (for the purpose of providing the aforementioned services and/or products) and measures prior to the conclusion of the contract. If such personal data is not provided or if the data subject does not agree with the data being processed, it will not be possible to conclude the aforementioned contracts and we will withdraw from the previously concluded contracts.

The following personal data is collected and processed by the company Moya Estates d.o.o. for the purposes of executing the contract for the purchase of holiday arrangements: name, surname, email address, telephone number, country of residence, language settings.

The following individuals’ personal data is collected and processed by the company Moya Estates d.o.o. for the purposes of executing the contract for reservations of rooms in Hotel Milka: first name, surname, email address, telephone number, address, country of residence, language settings.

As a general rule, the following personal data is collected by the company Moya Estates d.o.o. for the purposes of executing contracts with the company’s business partners: first name, surname, email address, telephone number. Pursuant to these contracts, the company Moya Estates d.o.o. can also collect other personal data, which are specified in individual contracts and are necessary for a contract to be executed.

The company Moya Estates d.o.o. does not collect any payment card-related numbers or other data provided by buyers through the websites www.hotelmilka.si. Such data is collected exclusively by credit card payment providers.

5. Personal Data Protection

To ensure the protection of personal data, the company Moya Estates d.o.o. carries out all the necessary legal, organisational and adequate logistical and technical procedures and measures, either on its own in accordance with the internal rules, or through the company’s contractual partners, by:

  • protecting the premises, equipment and system software, including input/output units;
  • protecting the application software used for personal data processing;
  • preventing unauthorised access to personal data during data transmission, including the transmission using telecommunication means and networks;
  • guaranteeing an effective method of blocking, disposing of, erasing and anonymising personal data;
  • allowing to subsequently find out when individual items of personal data were used and entered into the database and who this was done by; this can be done for the period during which individual items of data are stored.

6. Personal Data Retention Period

The personal data retention period depends on the processing basis and the purpose of processing a particular category of personal data. Personal data is stored only for the period required to achieve the purpose for which it was collected or processed further. Unless there is another lawful basis or if this is necessary for the enforcement, execution or defence of legal claims, personal data shall, after the purpose of processing has been accomplished, be erased, disposed of, blocked or anonymised.

Personal data processed under the contract will be retained for the duration of the period necessary to execute the contract and for a further 5 years after its termination, except in cases when a contract-related dispute arises between us and the individual the personal data relates to (the data subject); in such a case, the data is retained for another 5 years after the finality of a judicial or arbitration decision or settlement, or if there was no judicial dispute, for 5 years from the date of consensual dispute resolution. Invoices are archived for 10 years after the end of the year an invoice relates to in compliance with the act governing value added tax.

 

7. Individuals' Rights

If individuals wish to obtain information about all the purposes for which the company Moya Estates d.o.o. uses their personal data, they may request this by exercising the right of access. Moya Estates d.o.o. will provide them with a detailed list of all the processing of their personal data and related lawful bases.

Company Moya Estates d.o.o. provides individuals whose personal data it processed with the option of exercising their rights, in particular the right of access to personal data, the right to rectification, the right to erasure and the right to object. An individual can file a request in a way that allows their identification (for instance, an oral request with the accompanying minutes, made at the seat of the company Moya Estates d.o.o., a written request addressed to Moya Estates d.o.o., Pregljeva ulica 3, 1230 Domžale). A copy of the personal data processed and the requested data shall be provided to an individual free of charge. A reasonable fee can be charged for additional copies requested by an individual, taking into account administrative costs. In the event requests by a data subject are clearly unfounded or excessive, in particular because they are recurrent, we reserve the right to charge a reasonable fee or refuse to act on the request.

In accordance with the applicable legislation, you may assert the following rights concerning the processing of personal data:

  • Right to access data: The data subject has the right to receive confirmation from the provider as to whether their personal data is processed and, when this is the case, access the personal data and additional information concerning the processing of personal data. You may request access to data by sending us an email at hello@hotelmilka.si
  • Right to rectification: The data subject has the right to have their inaccurate personal data rectified without undue delay. The individual has the right to have their incomplete personal data completed, taking into account the purposes of the data processing.
  • pravica do izbrisa: The data subject has the right to have their personal data erased without undue delay in the following cases:
    • the personal data is no longer needed for the purposes for which it has been collected or otherwise processed,
    • the data subject has revoked the consent for the processing and there is no other lawful basis for data processing,
    • the data subject opposes the data processing and there are no overriding legal grounds for it,
    • the personal data has been processed unlawfully,
    • when this is stipulated by the law (the right to erasure).
  • Right to restriction of processing: The data subject has the right to restrict the processing of their personal data when one of the following cases applies:
    • the individual consents the accuracy of the data, specifically for a period that allows the data accuracy to be verified,
    • the data processing is unlawful and the individual opposes the erasure of personal data, requesting a restriction of its use instead,
    • personal data is no longer needed for processing purposes, however, the individual needs them to enforce, execute or defend legal claims,
    • the individual has lodged an objection concerning the data processing, until it is verified whether the controller’s legal reasons override the individual’s reasons (the right to restriction of processing). Where the processing of personal data has been restricted in accordance with the above, such personal data, with the exception of their storage, shall be processed only with the data subject’s consent, or for the enforcement, execution or defence of legal claims, or for the protection of rights of another natural or legal person. The individual will be notified before a processing restriction is revoked.
  • The right to lodge a complaint concerning the processing of personal data: The data subject has the right to lodge a complaint concerning the processing of personal data. You may lodge such a complaint by email at hello@hotelmilka.si or with registered mail sent to the registered seat of the organization.
  • Right to lodge a complaint with the Information Commissioner: Every data subject also has the right to lodge a complaint with the Information Commissioner if they consider that the processing of personal data related to them infringes the legislative provisions on the protection of personal data.

8. Additional Information When Data Has Not Been Obtained from the Individual

Personal data that was not obtained directly from the individual is available from the company Moya Estates d.o.o. upon the individual’s request. The individual has the right to obtain all the available information regarding their source.

9. Company data

Moya Estates, podjetje za turizem, d.o.o.
Short: Moya Estates d.o.o.
Pregljeva 3
1230 Domžale

VAT number: SI70804117
Registration number: 8195196000
IBAN: SI56 6100 0002 6955 968  (Delavska hranilnica d.d.)
SWIFT: HDELSI22

10. Validity

The Policy came into effect on 1 April 2022 and is published on the website www.hotelmilka.si. The Policy will be updated if necessary, in which case users will be informed about it accordingly.

Restaurant Milka – Privacy Policy

1. general

This Privacy Policy (hereinafter referred to as “Policy”) applies to any individual whose personal data is processed by the company Restavracija Milka d.o.o.

We care deeply about your privacy. We treat your data with great care and comply with the provisions of the General Data Protection Regulation (GDPR) and the law governing the protection of personal data.

The controller of the filing system is the company Restavracija Milka d.o.o., Vršiška cesta 45, 4280 Kranjska Gora, registration number 8901619000.

The words “we”, “our”, “us” and “Restaurant Milka” refer to Restavracija Milka d.o.o. (“provider”) and our services, and the words “you”, “your” and similar refer to the individuals that use our reservation system or are guests in Restaurant Milka.

The data we collect help us provide a good user experience, provide a booking system in provide our restaurant services.

Restavracija Milka d.o.o. uses booking system Superb Experience to collect bookings for the tables. The provider of Superb Experience is the company Superb ApS, Højbro Pl. 101200 Copenhagen, Denmark, VAT Code: DK39478021. Booking a stay at restaurant  is not possible without providing personal data as follows: name, surname, country of residence, e-mail address and phone number.

Your personal data such as name, last name or email address are never sold or shared with third parties in any other way. But in the event the provider is acquired by another company, all the data will be transferred to the acquirer.

The terms used in the Privacy Policy mean as follows:

  • Processor of personal data: Processor means the company Restavracija Milka d.o.o., which determines the purposes and means of the processing of your personal data, gained through a booking via website hotelmilka.si, via any external booking systems, via telephone or via email.
  • Contractual data processor means a legal or physical person entrusted by the processor with certain tasks concerning the processing of your personal data.
  • User of the reservation systems: an individual, who identifies themselves in the process of booking with their name, surname and other means of identification prescribed by this Privacy Policy, and who agrees with this Privacy Policy and uses these services on their own behalf.
  • Personal data: Any data referring to a user of the booking system at Restaurant Milka.
  • Rules on the protection of personal data is an internal rulebook on the protection of personal data adopted by the processor or contractual processor of personal data.

2. Data protection officer

Restavracija Milka d.o.o. has appointed a data protection officer. Any questions related to the Privacy Policy should be addressed to restaurant@hotelmilka.si.

3. The data we collect

Website visitors who do not use the booking system

The data we collect on website visitors who do not use the booking system is very limited. We log your IP address to be able to address any server problems, compile statistics about the use of our services, and improve the user experience. Regardless of whether your IP address is different every time you visit our site or always the same, it would be very difficult for us to use it to identify you, nor do we attempt that. If you have arrived at our site by clicking a link or advertisement on another site, we log this information. This allows us to better understand the interests of our users and improve the online presence of our services. All the collected data is aggregated and collected in our database, where we analyse them at aggregate level, never for individual users. We also collect data with the analytical tool Google Analytics Solutions.

Users of the booking system

Regardless the point of booking – via website www.hotelmilka.si, via one of the external booking system, via telephone or via email, the reservation can only be confirmed by providing personal data.

  • Name
  • Surname
  • Country of residence
  • E-mail address
  • Phone number
  • Language settings

4. Contract-Based Data Processing

The company Restavracija Milka d.o.o. collects and processes individuals’ personal data in accordance with a concluded contract for reservation of the table at Restaurant Milka.

Furthermore, the company Restavracija Milka d.o.o. collects and processes individuals’ personal data in accordance with contracts concluded with their business partners. Pursuant to these contracts, the company collects the personal data of those individuals that are in some way necessary for the execution of the contract.

Personal data collected on these grounds are necessary for the purposes of executing the concluded contracts (for the purpose of providing the aforementioned services and/or products) and measures prior to the conclusion of the contract. If such personal data is not provided or if the data subject does not agree with the data being processed, it will not be possible to conclude the aforementioned contracts and we will withdraw from the previously concluded contracts.

The following individuals’ personal data is collected and processed by the company Restavracija Milka d.o.o. for the purposes of executing the contract for reservation of the table at Restaurant Milka: first name, surname, email address, telephone number, address, country of residence, language settings.

As a general rule, the following personal data is collected by the company Restavracija Milka d.o.o. for the purposes of executing contracts with the company’s business partners: first name, surname, email address, telephone number. Pursuant to these contracts, the company Restavracija Milka d.o.o. can also collect other personal data, which are specified in individual contracts and are necessary for a contract to be executed.

The company Restavracija Milka d.o.o. does not collect any payment card-related numbers or other data provided by buyers through the websites www.hotelmilka.si. Such data is collected exclusively by credit card payment providers.

5. Personal Data Protection

To ensure the protection of personal data, the company Restavracija Milka d.o.o. carries out all the necessary legal, organisational and adequate logistical and technical procedures and measures, either on its own in accordance with the internal rules, or through the company’s contractual partners, by:

  • protecting the premises, equipment and system software, including input/output units;
  • protecting the application software used for personal data processing;
  • preventing unauthorised access to personal data during data transmission, including the transmission using telecommunication means and networks;
  • guaranteeing an effective method of blocking, disposing of, erasing and anonymising personal data;
  • allowing to subsequently find out when individual items of personal data were used and entered into the database and who this was done by; this can be done for the period during which individual items of data are stored.

6. Personal Data Retention Period

The personal data retention period depends on the processing basis and the purpose of processing a particular category of personal data. Personal data is stored only for the period required to achieve the purpose for which it was collected or processed further. Unless there is another lawful basis or if this is necessary for the enforcement, execution or defence of legal claims, personal data shall, after the purpose of processing has been accomplished, be erased, disposed of, blocked or anonymised.

Personal data processed under the contract will be retained for the duration of the period necessary to execute the contract and for a further 5 years after its termination, except in cases when a contract-related dispute arises between us and the individual the personal data relates to (the data subject); in such a case, the data is retained for another 5 years after the finality of a judicial or arbitration decision or settlement, or if there was no judicial dispute, for 5 years from the date of consensual dispute resolution. Invoices are archived for 10 years after the end of the year an invoice relates to in compliance with the act governing value added tax.

7. Individuals' Rights

If individuals wish to obtain information about all the purposes for which the company Restavracija Milka d.o.o. uses their personal data, they may request this by exercising the right of access. Restavracija Milka d.o.o. will provide them with a detailed list of all the processing of their personal data and related lawful bases.

Company Restavracija Milka d.o.o. provides individuals whose personal data it processed with the option of exercising their rights, in particular the right of access to personal data, the right to rectification, the right to erasure and the right to object. An individual can file a request in a way that allows their identification (for instance, an oral request with the accompanying minutes, made at the seat of the company Restavracija Milka d.o.o., a written request addressed to Restavracija Milka d.o.o., Vršiška cesta 45, 4180 Kranjska Gora). A copy of the personal data processed and the requested data shall be provided to an individual free of charge. A reasonable fee can be charged for additional copies requested by an individual, taking into account administrative costs. In the event requests by a data subject are clearly unfounded or excessive, in particular because they are recurrent, we reserve the right to charge a reasonable fee or refuse to act on the request.

In accordance with the applicable legislation, you may assert the following rights concerning the processing of personal data:

  • Right to access data: The data subject has the right to receive confirmation from the provider as to whether their personal data is processed and, when this is the case, access the personal data and additional information concerning the processing of personal data. You may request access to data by sending us an email at restaurant@hotelmilka.si
  • Right to rectification: The data subject has the right to have their inaccurate personal data rectified without undue delay. The individual has the right to have their incomplete personal data completed, taking into account the purposes of the data processing.
  • pravica do izbrisa: The data subject has the right to have their personal data erased without undue delay in the following cases:
    • the personal data is no longer needed for the purposes for which it has been collected or otherwise processed,
    • the data subject has revoked the consent for the processing and there is no other lawful basis for data processing,
    • the data subject opposes the data processing and there are no overriding legal grounds for it,
    • the personal data has been processed unlawfully,
    • when this is stipulated by the law (the right to erasure).
  • Right to restriction of processing: The data subject has the right to restrict the processing of their personal data when one of the following cases applies:
    • the individual consents the accuracy of the data, specifically for a period that allows the data accuracy to be verified,
    • the data processing is unlawful and the individual opposes the erasure of personal data, requesting a restriction of its use instead,
    • personal data is no longer needed for processing purposes, however, the individual needs them to enforce, execute or defend legal claims,
    • the individual has lodged an objection concerning the data processing, until it is verified whether the controller’s legal reasons override the individual’s reasons (the right to restriction of processing). Where the processing of personal data has been restricted in accordance with the above, such personal data, with the exception of their storage, shall be processed only with the data subject’s consent, or for the enforcement, execution or defence of legal claims, or for the protection of rights of another natural or legal person. The individual will be notified before a processing restriction is revoked.
  • The right to lodge a complaint concerning the processing of personal data: The data subject has the right to lodge a complaint concerning the processing of personal data. You may lodge such a complaint by email at restaurant@hotelmilka.si or with registered mail sent to the registered seat of the organization.
  • Right to lodge a complaint with the Information Commissioner: Every data subject also has the right to lodge a complaint with the Information Commissioner if they consider that the processing of personal data related to them infringes the legislative provisions on the protection of personal data.

 

8. Additional Information When Data Has Not Been Obtained from the Individual

Personal data that was not obtained directly from the individual is available from the company Restavracija Milka d.o.o. upon the individual’s request. The individual has the right to obtain all the available information regarding their source.

9. Company information

Restavracija Milka, d.o.o.
Vršiška cesta 45
4280 Kranjska Gora

VAT number: SI70804117
Registration number: 8195196000

IBAN:

SI56 3000 0002 9156 781 (Sberbank banka d.d.)
6100 0002 6954 998 (Delavska hranilnica d.d.)

10. Validity

The Policy came into effect on 1 April 2022 and is published on the website www.hotelmilka.si. The Policy will be updated if necessary, in which case users will be informed about it accordingly.

Website www.hotelmilka.si is managed by:

  • Company Moya Estates d.o.o., Pregljeva ulica 3, 1230 Domžale, registration number: 8195196000. Moya Estates is the provider of hotel services and manager of the reservation system, by which guests can book their stay at Boutique Hotel Milka (www.hotelmilka.si/hotel/booking)
  • Company Restavracija Milka d.o.o., Vršiška cesta 45, 4280 Kranjska gora, registration number: 8901619000. Restavracija Milka d.o.o. is the provider of restaurant services and manager of the reservation system, by which guests can book a table at Restavracija Milka  (http://www.hotelmilka.si/restavracija/booking)

COOKIES

We use cookies on www.hotelmilka.si to provide you with a better user experience. Cookies, which are stored on your computer’s browser, are small text files which provide us with information on how often you visit our website and what interests you during those visits. The cookies themselves do not contain any data that would identify you as an individual, but if you share such data with us, for example by registering, it may be connected with the data stored in the cookies. Cookies do not give us access to data on your hard drive or to information collected by other cookies created by other websites.

You always have the option of accepting or rejecting cookies. If you reject cookies, you will not be able to see all the content nor book a stay at the hotel or a table at the restaurant. Most browsers automatically accept cookies, but you can change that in the browser settings by opting to reject cookies or receiving notifications before cookies are stored.

For information about cookie settings, click the name of your browser:

WHY DO WE USE COOKIES?

Cookies help us provide, secure and improve our website, for example with relevant content, and provide a safer experience. While we may occasionally change the cookies that we use when we improve or update our services, we use them for the following purpose:

  • Analytics: We use cookies to better understand how users use our services, which allows us to improve our services.

Third-party cookies used: