GDPR Policy

Privacy Policy & Data Protection

Compliant with EU GDPR - valid from 01 June 2022.

We are very delighted that you have shown interest in our enterprise. Data protection is of a particularly high priority for the management of the 3glav Adventures d.o.o.. The use of the Internet pages of the 3glav Adventures d.o.o. is possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain consent from the data subject.

The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the 3glav Adventures d.o.o.. By means of this data protection declaration, our enterprise would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.

As the controller, the 3glav Adventures d.o.o. has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative means, e.g. by telephone.

1. Definitions

The data protection declaration of the 3glav Adventures d.o.o. is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our data protection declaration should be legible and understandable for the general public, as well as our customers and business partners. To ensure this, we would like to first explain the terminology used, including: Personal data, Data subject, Processing, Restriction of processing, Profiling, Pseudonymisation, Controller, Processor, Recipient, Third party, and Consent - each defined in accordance with the GDPR.

2. Name and Address of the Controller

Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:

3glav Adventures d.o.o., Ljubljanska 1, 4260 Bled, Slovenia.

Phone: +386 41 683 184 · Email: info@3glav.com · Website: www.3glav.com

3. Cookies

The Internet pages of the 3glav Adventures d.o.o. use cookies. Cookies are text files that are stored in a computer system via an Internet browser. Many Internet sites and servers use cookies. Many cookies contain a so-called cookie ID - a unique identifier of the cookie.

Through the use of cookies, the 3glav Adventures d.o.o. can provide the users of this website with more user-friendly services that would not be possible without the cookie setting. By means of a cookie, the information and offers on our website can be optimized with the user in mind.

The data subject may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of the Internet browser used, and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time via an Internet browser or other software programs. If the data subject deactivates the setting of cookies, not all functions of our website may be entirely usable.

4. Collection of General Data and Information

The website of the 3glav Adventures d.o.o. collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files. Collected may be (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites, (5) the date and time of access to the Internet site, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) any other similar data and information that may be used in the event of attacks on our information technology systems.

When using these general data and information, the 3glav Adventures d.o.o. does not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) optimize the content of our website as well as its advertisement, (3) ensure the long-term viability of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack.

5. Registration on Our Website

The data subject has the possibility to register on the website of the controller with the indication of personal data. Which personal data are transmitted to the controller is determined by the respective input mask used for the registration. The personal data entered by the data subject are collected and stored exclusively for internal use by the controller, and for his own purposes.

By registering on the website of the controller, the IP address - assigned by the Internet service provider (ISP) and used by the data subject - date, and time of the registration are also stored. Registered persons are free to change the personal data specified during the registration at any time, or to have them completely deleted from the data stock of the controller.

6. Contact Possibility via the Website

The website of the 3glav Adventures d.o.o. contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.

7. Routine Erasure and Blocking of Personal Data

The data controller shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage, or as far as this is granted by the European legislator or other legislators in laws or regulations to which the controller is subject to. If the storage purpose is not applicable, or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data are routinely blocked or erased in accordance with legal requirements.

8. Rights of the Data Subject

Each data subject shall have the following rights granted by the European legislator:

• Right of confirmation - obtain confirmation as to whether or not personal data concerning them are being processed.

• Right of access - obtain free information about their personal data stored and a copy of this information.

• Right to rectification - obtain the rectification of inaccurate personal data concerning them without undue delay.

• Right to erasure (Right to be forgotten) - obtain the erasure of personal data concerning them without undue delay.

• Right of restriction of processing - obtain restriction of processing under the conditions defined by the GDPR.

• Right to data portability - receive personal data in a structured, commonly used and machine-readable format.

• Right to object - object at any time to processing of personal data concerning them.

• Right not to be subject to automated individual decision-making, including profiling.

• Right to withdraw data protection consent at any time.

To exercise any of these rights, the data subject may, at any time, contact any employee of the 3glav Adventures d.o.o..

9. Facebook

On this website, the controller has integrated components of the enterprise Facebook. The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, United States. If a person lives outside of the United States or Canada, the controller is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

If the data subject is logged in at the same time on Facebook, Facebook detects with every call-up to our website which specific sub-site of our Internet page was visited. This information is collected through the Facebook component and associated with the respective Facebook account of the data subject. To prevent this transmission, log off from your Facebook account before visiting our website.

The data protection guideline published by Facebook is available at https://facebook.com/about/privacy/.

10. Google Analytics (with Anonymization)

On this website, the controller has integrated the component of Google Analytics with the anonymizer function ("_gat. _anonymizeIp"). The IP address of the Internet connection of the data subject is abridged by Google and anonymised when accessing our websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze traffic on our website. Google uses the collected data and information to evaluate the use of our website and to provide online reports.

The data subject may prevent the setting of cookies through browser settings, or install the Google Analytics opt-out browser add-on from https://tools.google.com/dlpage/gaoptout.

Further information: https://www.google.com/intl/en/policies/privacy/ and https://www.google.com/analytics/terms/us.html.

11. Google+ and Google AdWords

On this website, the controller has integrated the Google+ button and Google AdWords for internet advertising. The operating company for both is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States.

Google AdWords allows the advertiser to place ads in Google search engine results and the Google advertising network. Its purpose is the promotion of our website by inclusion of relevant advertising on third-party websites and in search engine results, and an insertion of third-party advertising on our website.

Further information and the data protection provisions of Google may be retrieved at https://www.google.com/intl/en/policies/privacy/.

12. Legal Basis for Processing

Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose.

If the processing of personal data is necessary for the performance of a contract to which the data subject is a party (e.g. an activity booking), the processing is based on Article 6(1) lit. b GDPR.

If processing is necessary for compliance with a legal obligation, we process on the basis of Art. 6(1) lit. c GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person (Art. 6(1) lit. d GDPR).

Finally, processing operations could be based on Article 6(1) lit. f GDPR (legitimate interests pursued by our company or by a third party).

13. Contact

To exercise any of your rights under this policy, or to ask any question about how we process your personal data, please contact:

3glav Adventures d.o.o. - Ljubljanska 1, 4260 Bled, Slovenia. Phone: +386 41 683 184 · Email: info@3glav.com.