Privacy policy

Protecting your personal data is important to us. This policy explains which personal data we process when you visit www.dbresorts.si or send us an enquiry, why we process it, how long we keep it and what rights you have. We process data in accordance with the General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).

1. Controller

Gostinstvo in turizem DB d.o.o.
Podreber 19, 4202 Naklo, Slovenia
Company reg. no.: 8581509000 · VAT ID: SI53931572
Email: info@hotelrozka.si · Phone: +386 4 292 83 00

For any questions about data protection, write to us at info@hotelrozka.si.

2. What data we process and why

Enquiries via website forms

When you send an enquiry (e.g. for GRAD Apartments or a wedding), we process the data you enter: name and surname, email address, phone number, preferred dates, the selected service and your message.

• Purpose: replying to your enquiry and preparing an offer.
• Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Retention: as long as the data is needed to reply to your enquiry and for any further cooperation, or until you ask us to delete it; if a booking is made, we keep the data as described under bookings.

Bookings

Accommodation bookings are made through the Upperbooking booking system, table reservations at Bistro Ferment through Venuo, and bookings and arrangements also by email and phone. We process the data needed to carry out the booking and your stay (name and surname, contact details, dates, number of guests, payment details processed by the provider of the booking or payment system).

• Purpose: carrying out the booking and service, issuing invoices, meeting legal obligations (e.g. guest registration, accounting records).
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR).
• Retention: for the periods required by law (e.g. invoices 10 years after the year of issue); other data until the service and any complaints have been completed.

Communication by email and phone

When you write to us or call us, we process your contact details and the content of your message so that we can reply (Art. 6(1)(b) or (f) GDPR). We keep messages for as long as needed to handle your request.

Website analytics (Google Analytics)

Only if you allow it in the cookie banner, we use Google Analytics 4, which shows us how many visitors come to the website and which content they view. Data is aggregated; GA4 does not store IP addresses.

• Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the »Cookie settings« link in the footer.
• Retention: data in Google Analytics is automatically deleted after 2 months.

Server logs and security

On every visit, the server automatically records technical data (IP address, time of visit, page visited, browser type). This is needed for operation, security and troubleshooting.

• Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Retention: up to 6 weeks.

Google Fonts

We use Google Fonts to display fonts on the website. The fonts are loaded from Google's servers, so Google receives your IP address when you visit (legitimate interest in a consistent and clear presentation of the website, Art. 6(1)(f) GDPR). Google Fonts does not set cookies.

Google reviews

On some pages we show guest reviews from Google. The reviewers' profile pictures are loaded directly from Google's servers, so Google receives your IP address.

YouTube videos

A YouTube (Google) video is embedded on the Hotel House Rozka page. The preview image is loaded from Google's servers, so Google receives your IP address. The video itself only loads when you start it, in privacy-enhanced mode (youtube-nocookie.com).

We do not carry out direct marketing (newsletters, advertising) on this website.

3. Who we share data with

We do not sell data. We share it only with external providers who perform services for us, to the extent necessary for that service (processors under contract):

We also share data with public authorities where required by law.

4. Transfers to third countries

Some providers (Postmark, Google, Microsoft) may also process data in the USA. Such transfers are based on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

5. Cookies

We use necessary cookies for the website to work (e.g. your selected language and your cookie choice). We set analytics cookies only with your consent. The list of cookies and their duration is in our Cookie policy. You can change your choice at any time via the »Cookie settings« link in the footer.

6. Your rights

Regarding your personal data, you have the right to:

• access your data and obtain a copy,
• have inaccurate or incomplete data corrected,
• erasure (»right to be forgotten«),
• restriction of processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

Send your request to info@hotelrozka.si. We will reply within one month at the latest.

If you believe we process your data in breach of the regulations, you can lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, Slovenia, gp.ip@ip-rs.si, www.ip-rs.si.

7. Automated decision-making

We do not carry out automated decision-making or profiling.

8. Security

We use appropriate technical and organisational measures (encrypted HTTPS connection, restricted access, regular updates and backups) to protect your data against unauthorised access, loss or misuse.

9. Changes

We update this policy from time to time, for example when we introduce a new tool. The current version is always published on this page.

Effective from: 26 October 2026