Personal data controller, company BM 21, d.o.o., Drevored 1. maja 10, 6310 Izola, is a privacy-friendly company that conforms to legislation regarding personal data privacy as well as the customers’ wishes. For that reason, we invite you to read the next chapters, dealing with processing of personal data – they are separated due to the type of relationship with us or the purpose of processing the data.

In case we need any data from you, we will inform you about it, explain why we need it and for what purpose, and, in certain cases, ask you to submit it to us voluntarily, together with your consent for their processing.

If you need to contact us or get detailed information about accommodation or organizing an event

If you communicate with us via E-mail, website, phone or in another way, we will store your personal data on the basis of legitimate interest until the end of our communication. If you wish to, you can end our communication any time and request the deletion of your personal data.

Personal data controller: BM 21, d.o.o., Drevored 1. maja 9, 6310 Izola

Legal grounds for processing personal data: legitimate interest (Article 6(1)f of GDPR) of the controller for the needs of communication with customers, answering to customers questions and sending particular offers.

User categories: webmasters, marketing tools providers, marketing agencies, contractors for services Users may process personal data exclusively in accordance with the instructions and under supervision of the controller.

Storage period: until the end of the communication

Individual’s rights: objection, access to data, corrections, deletion, limitation of processing, transferability Rights can be exercised by submitting a written application to the address of the controller or to the E-mail address info@degrassihotel.si. Opting-out of the e-newsletter (cancellation of consent or objection) is possible at any time by clicking on an Unsubscribe link (Odjava) in each e-newsletter message.

In case you believe we do not exercise your rights in a suitable manner, you may send a complaint or report such action to the Information Commissioner of the Republic of Slovenia (more at: www.ip-rs.si).

If you subscribed to our e-newsletter

You may have subscribed to the DeGrassi Boutique Garni Hotel e-newsletter through a web application form, or you may have been our guest and personally filled out and signed the application form. In the form, you may have consented to receive all the general notifications from DeGrassi Boutique GarniHotel, and you may have also consented to receive personalized messages – messages about novelties, our offer and prize competitions for which we believe could interest you. Our estimates are based on your choices regarding our offer, while they are based on web cookies only if your consented to them at our websites. More Information at Cookies.

Opting-out of the e-newsletter is possible at any time by clicking on an Unsubscribe link (Odjava) in each e-newsletter message.

Personal data controller: BM 21, d.o.o., Drevored 1. maja 9, 6310 Izola

Legal grounds for processing personal data: personal consent that can be withdrawn at any time (Article 6(1)a of GDPR) On the basis of their own legitimate interest (Article 6(1)f of GDPR), the controller may also process the personal data for the purpose of planning their work process, supplies and capacities as well as improving their offer and optimizing their services.

User categories: webmasters, marketing tools providers, marketing agencies, contractors for services Users may process personal data exclusively in accordance with the instructions and under supervision of the controller.
Personal data may be transferred to the processors, which are based in USA and are ensuring protection measures for the safety of personal data by including proven standard contractual clauses into the data processing contract with DeGrassi Boutique Garni Hotel. For more information on the implemented protection measures write to info@degrassihotel.si.

Your rights: withdrawal of consent, objection, access to data, corrections, deletion, limitation of processing, transferability Rights can be exercised by submitting a written application to the address of the controller or to the E-mail address info@degrassihotel.si. In case you believe we do not exercise your rights in a suitable manner, you may send a complaint or report such action to the Information Commissioner of the Republic of Slovenia.

Storage period: until the cancellation of consent

Individual’s rights: withdrawal of consent, objection, access to data, corrections, deletion, limitation of processing, transferability Rights can be exercised by submitting a written application to the address of the controller or to the E-mail address info@palazzodegrassi.comdegrassihotel.si. Opting-out of the e-newsletter (cancellation of consent or objection) is possible at any time by clicking on an Unsubscribe link (Odjava) in each e-newsletter message.

In case you believe we do not exercise your rights in a suitable manner, you may send a complaint or report such action to the Information Commissioner of the Republic of Slovenia (more at: www.ip-rs.si).

If you book an accommodation or are staying at DeGrassi Boutique Garni Hotel

We will ask you to submit your first and last names, phone number and an E-mail address. We will further ask you to inform us of your wishes (e.g. non-smoker room). We will send a booking confirmation or instructions for making a booking and payment to the submitted E-mail address. All personal data processed through the Internet are transferred through the secure SSL protocol. SSL protocol enables encryption of your personal data and their safe transfer through Internet connections. Encryption is implemented before the transfer of the personal data. You will know you are in protected mode when you will see a locked lock icon in the bottom right corner of the browser. In addition, when entering into protected mode, the first part of the web address (“http”) will be changed into “https”, meaning your personal data are behind firewalls – protected from any outside access. We need your phone number and E-mail address to confirm your booking and contact you in case of any special circumstances regarding your booking. We may also use your E-mail address to ask you for your feedback and how you are feeling, staying with us, as this is very important to us.

If you book your stay with us through a third-party website (e.g. booking.com, other agents), we will receive the data according to the terms and conditions of that website. Therefore, we advise you to read the terms and conditions of the website you are making a booking at.

Upon booking your stay at DeGrassi Boutique Garni Hotel, we will also ask you to submit your date of birth, gender, nationality as well as the number and type of your document (we may ask you to see this document) in addition to your name and last name. We gather this date in accordance with the Residence Registration Act for the purpose of the so called “book of guests”. In this book of guests, we are also obligated to enter the dates and hours of your arrival and departure. We are obliged to store this data for 1 year from the end of the calendar year in which you stayed with us. Furthermore, we are obligated to submit these data through the AJPES (Agency of the Republic of Slovenia for Public Legal Records and Related Services) website to the Police, for the purpose of keeping the records of guests , as well as to the Municipality, for the purpose of calculating and paying the tourist tax.

If you subscribed to our e-newsletter, you may have consented to your booking and travel data being considered for preparing done-for-you offers. Opting-out of the e-newsletter is possible at any time by clicking on an Unsubscribe link (Odjava) in each e-newsletter message, or by writing us to our address physical.

Personal data controller: BM 21, d.o.o., Drevored 1. maja 9, 6310 Izola

Legal grounds for processing personal data: conclusion of a booking contract or a contract for the use of services (Article 6(1)b of GDPR) If an individual does not provide the necessary data, the conclusion of the contract will not be possible. On the basis of their own legitimate interest (Article 6(1)f of GDPR), the controller may also process the personal data for the purpose of planning their work process, supplies and capacities as well as improving their offer and optimizing their services.

User categories: webmasters, hotel management tools providers, contractors for services Users may process personal data exclusively in accordance with the instructions and under supervision of the controller. In accordance with the type of your travel, we will forward your personal data to airline carriers and hotels, transport operators as well as tourist guides at your journey’s destination. When you stay at the DeGrassi Boutique Garni Hotel, we will forward the data to the Police and the Municipality.

Storage period: The book of guests is kept for the calendar year and then stored for one year after the end of the calendar year. If you checked that you want to receive personalized offers, we will keep your data until you cancel this.

Individual’s rights: access to data, corrections, transferability and, in limited scope, deletion, limitation of processing and objection Rights can be exercised by submitting a written application to the address of the controller or to the E-mail address info@degrassihotel.si. Opting-out of the e-newsletter (objection) is possible at any time by clicking on an Unsubscribe link (Odjava) in each e-newsletter message.

You may send a complaint or report controller’s actions regarding personal data protection to the Information Commissioner of the Republic of Slovenia (more at: www.ip-rs.si).

Cookies

Our website uses two types of cookies: necessary cookies and analytical cookies.

Necessary cookies are needed to ensure perfect functioning of the website (e.g. playing video and audio content) and the analytics regarding the use of the website. They are set when the user does any action on the website that happens upon clicking a simple link. With regard to GDPR, these cookies do not require user consent. If you have all cookies disabled in your browser, you may not be able to navigate our website. All necessary cookies are our own cookies (so called “first party cookies”), set in such a way that IP addresses of users are automatically hidden. As indicated in the table below, some personal data that we process by means of cookies are processed for us by contractors (the cookies are stored by them). If this entails the transfer to a country outside EU, we also state the country and a protection measure implemented.

Necessary cookies:

Analytical cookies help us adapt our website to the needs and behaviours of users. Their function is to analyse website visits and behaviour of website’s users.

Analytical cookies used on our website:

Third-party cookies used on our website:

How can I exercise my rights?

You can exercise your rights at any time by writing to us via regular mail to the address above or to the E-mail address info@degrassihotel.si. To know that the rights will be exercised by the correct person, we will request your identification or information that will uniquely identify you.

Which rights regarding personal data processing are possible to be exercised depends on the type of connection with us. You can always read more about your rights for particular situations described on this website.