Privacy Policy
We are committed to protecting your privacy
This privacy policy applies to the website https://www.lectar.com/. In it, we define the principles of processing and storing personal data provided by users in connection with their use of the services offered by Gušt d.o.o.
Personal data controller
The controller of personal data obtained on this website is the company GUŠT d.o.o, Ljubljanska cesta 13A, Bled, 4260 Bled registration number: 8461651000, VAT ID: SI24088331. We are committed to respecting your privacy and processing your personal data securely and in accordance with the legislation governing the protection of personal data (Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act – ZVOP-1). We use the obtained data exclusively for purposes related to our business.
Personal data processor
We work with external service providers who act as our personal data processors. They process data on our behalf for the purpose of obtaining reservations, providing analytical and marketing services, improving the service and user experience, etc.
We use the booking engine Booking Engine Cubilis from Stardekk NV. for the capture and processing of direct online reservations for a stay in our accommodation. The company Stardekk NV. participates in and has confirmed its compliance with the EU-U.S Privacy Shield Framework Directive. More about Stardekk’s privacy policy here (link: https://www.stardekk.com/privacy-policy)
We use Sendpulse and ZOHO Campaigns software from SendPulse Inc. to process subscriptions to our e-newsletter and send promotional e-newsletters. SendPulse Inc. stores our data in the EU and the US and cooperates with and has confirmed its compliance with the EU GDPR directive. Learn more about Sendpulse’s privacy policy here (link: https://sendpulse.com/legal/pp).
How do we collect your personal data?
We handle your data with the highest possible degree of care. All personal information we collect from website users is private and confidential.
We collect personal data in the reservation form, where the user enters all personal data relevant to the reservation and our performance of the requested service.
In addition, we collect personal data that the user provides when filling out the e-newsletter registration form.
We physically collect the guest’s personal data upon check-in at the hotel at the reception.
In addition to the personal information you provide through the above methods, this website uses technology that collects certain technical information, such as the user’s IP address. The user’s IP address is recorded when the newsletter subscription is submitted (and only serves as proof that the user has signed up for the newsletter himself).
In all other cases, however, we do not link IPs to individuals and each user of the website is anonymous. We collect anonymous data about your use of our website with the help of cookies and similar technologies. More information about how we use these technologies to collect information about you can be found in the Cookie Policy.
What personal data is collected?
We collect the following in the reservation form:
- Name, surname, telephone number, email address and country of the user;
- Information about the user’s company (if the reservation is made for a company);
- Credit card information (credit card type, cardholder name, credit card number, expiration date);
- Information about the guest’s stay, including the date of arrival and departure, type of service, selection of a special offer, special requests and wishes;
- We present an optional option to sign up for our promotional e-news by ticking an empty checkbox.
- In the e-newsletter registration form, we collect the user’s first name, last name, email address, selected language, date and time of registration, and IP address.
- When inquiring about an event, we collect all information related to the event (contact information such as name, surname, e-mail, name and address of the company, start and end time of the event, duration of the event, number of participants, possible accommodation needs and requested services) .
- When checking in to the hotel, we collect the guest’s first and last name, country, date of birth, type of personal document and personal number at the reception.
For what purpose are personal data used?
All information obtained in the reservation form is used to process your reservation and for communication related to the provision of our services; this includes transactional e-mails for the execution of the business agreement entered into with the submitted reservation by us and the recipients of our services (guests).
The e-mail address obtained via the e-newsletter sign-up form or by ticking the empty e-newsletter sign-up checkbox in the booking form is used to send promotional material about our offer through the [email marketing system name] email marketing system . Information about name and selected language obtained in the same form is used to customize the user experience of receiving e-news.
The information obtained through the event inquiry form is used to prepare offers for events, meetings or conferences at our hotel.
We collect the personal data that we obtain when checking in to the hotel at the reception in order to ensure the fulfillment of our legal obligations.
Basis for processing personal data
Reservation form: Fulfilling the operator’s legal obligations
Subscription to e-news: Personal consent
Request for an offer: Fulfillment of contractual obligations of the controller
Registration at the reception desk: Fulfillment of contractual obligations of the manager, Fulfillment of legal obligations of the manager
Personal data retention period
We may retain personal data for as long as necessary to fulfill the purposes for which it was collected or until the individual withdraws consent. Based on the user’s written withdrawal of consent, the data is deleted.
Additional questions can also be addressed to the Data Protection Officer at info@lectar.com.
Your right
You can revoke the given consent at any time, request access, correction, restriction of personal data processing, deletion of personal data or a complaint regarding the processing of your data by notifying us in writing by mail to the address GUŠT d.o.o, Ljubljanska cesta 13A, Bled, 4260 Bled or email us at info@lectar.com.
If our treatment does not meet your expectations, you have the right to file any claim or complaint with the competent supervisory authority, i.e. the Information Commissioner of the Republic of Slovenia.
Our contact
The manager of your personal data is GUŠT d.o.o., Ljubljanska cesta 13A, Bled, 4260 Bled, registration number: 8461651000, VAT ID: SI24088331.
If you have questions about how we process your personal data, or if you wish to exercise any of the rights provided by this privacy policy, please contact us at info@lectar.com.
Validity
The effective date of this privacy policy is October 2024. This document is subject to change without notice.