Controller of Personal Data: Blejski otok d.o.o., Slovenski trg 1, 4260 Bled. If you are ordering a church service, the controller of personal data is the Parish of Bled (Župnija Bled) – in this case, we recommend that you read the privacy policy on the parish website.
Data Protection Officer: dobrodosli.welcome@blejskiotok.si
When you visit our website, we temporarily store your IP address, but no longer than until the end of the session. If our system determines that you are not engaging in any activities that could jeopardize the operation of our website, this data is automatically deleted.
If our system determines that you are engaging in activities that are clearly unlawful or clearly aimed at disrupting the operation of the website, your IP address will be stored permanently and added to a blacklist of IP addresses (“block list”), which consequently prevents you from further using the website.
Legal bases for the processing of personal data: on the basis of its legitimate interest (Article 6(1)(f) GDPR), the controller also processes personal data for the purpose of ensuring website security and preventing unlawful activities on the website (such as unauthorized access, execution of unlawful commands, etc.).
Categories of recipients: the website hosting provider and the provider of security solutions. The recipients process personal data exclusively in accordance with the controller’s instructions and under its supervision.
Personal data is transferred to the United States on the basis of the Standard Contractual Clauses approved by Commission Implementing Decision (EU) 2021/914.
Retention period: until the end of the session at the latest (general rule) or permanently (in cases of attempted misuse).
Rights of data subjects: objection, access to data, rectification, and restriction of processing. These rights may be exercised by submitting a written request to the controller’s address.
Right to lodge a complaint: complaints or reports regarding the controller’s handling of personal data protection may be submitted to the Information Commissioner of the Republic of Slovenia.
We are pleased to stay in touch with you via email. Since we also dislike spam, we promise to be careful and considerate when sending our offers and to keep such communications to a minimum.
You may unsubscribe from our newsletter at any time by clicking the unsubscribe link included in the received email message or by notifying us via email.
Legal bases for the processing of personal data: consent of the data subject, which may be withdrawn at any time (Article 6(1)(a) GDPR) by clicking the unsubscribe link included in the received email message. On the basis of its legitimate interest (Article 6(1)(f) GDPR), the controller also processes personal data for the purposes of planning work processes, inventory and capacities, as well as improving offers and optimizing services.
Categories of recipients: website maintenance providers, marketing tool providers, marketing agencies, and external service providers. The recipients process personal data exclusively in accordance with the controller’s instructions and under its supervision.
Retention period: until consent is withdrawn.
Rights of data subjects: withdrawal of consent or objection, access to data, rectification, erasure, restriction of processing, and data portability. These rights may be exercised by submitting a written request to the controller’s address. Unsubscribing from e-newsletters (withdrawal of consent or objection) is possible at any time by clicking the unsubscribe link included in the received newsletters.
Right to lodge a complaint: any complaint or report regarding the controller’s handling of personal data protection may be submitted to the Information Commissioner of the Republic of Slovenia.
We will use your personal data on the basis of our legitimate interest (communication with customers and the public: Article 6(1)(f) GDPR) for the purpose of responding to your question or inquiry. Your personal data will be retained until our communication has been concluded, after which it will be deleted.
If you later decide to cooperate or enter into a business relationship with us, we will rely on another appropriate legal basis (such as the performance of a contract), about which you will be informed separately.
Your personal data may also be processed by our data processor hosting the website, with whom the controller has concluded a personal data processing agreement.
You may request the deletion of your personal data at any time during the communication process, without such withdrawal affecting the lawfulness of processing carried out prior to the withdrawal.
With regard to the processing of personal data, you have the right to:
If you believe that your rights are not being exercised appropriately, you may lodge a complaint with the Information Commissioner of the Republic of Slovenia.
If you make a purchase, submit a reservation, or request an offer through the website, we will require personal data that is necessary for the performance of a contract or for taking steps prior to entering into a contract.
If you do not wish to provide such data, we may not be able to perform the requested service or deliver the requested product.
Legal bases for the processing of personal data: conclusion of a contract and/or the implementation of measures prior to entering into a contract (Article 6(1)(b) GDPR). If the individual does not provide the required data, the requested service cannot be provided. On the basis of its legitimate interest (Article 6(1)(f) GDPR), the controller also processes personal data for the purposes of planning work processes, inventory and capacities, as well as improving offers and optimizing services.
Categories of recipients: website maintenance providers, the reservation system provider, and external service providers. The recipients process personal data exclusively in accordance with the controller’s instructions and under its supervision.
Retention period: 5 years from the date of purchase or settlement of all obligations, while personal data required for tax purposes is retained for 10 years. If no contract is concluded, the personal data will be retained for 1 month (duration of the offer validity period).
Rights of data subjects: access to data, rectification, data portability, and, to a limited extent, erasure, restriction of processing, and objection. These rights may be exercised by submitting a written request to the controller’s address.
Many visitors to the shrine, who have always gone on pilgrimage to the island, love the Wishing Bell. When they ring the bell, they commend themselves to the Mother of God and hand over their wishes and requests in faith that she will fulfil them.
