Privacy and cookies for accommodation bookings

1. Who is responsible for your data

ART-PE, frizerstvo, trgovina in turizem PETRA ŠIRCELJ S.P.
Rihpovec 8, 8210 Trebnje, Slovenia
Registration number: 1830970000
VAT ID: SI50323229

Contact for accommodation, bookings and complaints: app@art-pe.com or +386 51 665 300. The sole trader is entered in the Slovenian Business Register maintained by AJPES.

The sole trader identified above is the controller of personal data for this website, enquiries and accommodation bookings. For privacy questions or requests concerning your data, use app@art-pe.com or the provider’s postal address.

We process data in accordance with the General Data Protection Regulation (GDPR), the Slovenian Personal Data Protection Act (ZVOP-2) and other rules applicable to the processing concerned. The Electronic Communications Act (ZEKom-2) also applies to cookies and similar technologies.

2. Data, purposes and legal bases

Page visits and technical security: Technical information such as IP address, request time, requested URL, browser type and error data is processed when you connect. The purposes are content delivery, troubleshooting and abuse prevention. The legal basis is our legitimate interest in a secure, functioning website (GDPR Article 6(1)(f)).
Visitor statistics — Google Analytics 4: If you select “Allow analytics”, we use Google Analytics to measure visits and improve content. Data includes online identifiers, pages viewed, website use, visit time, browser, device and approximate location. Google also receives technical connection data. The basis is your consent (GDPR Article 6(1)(a) and Article 225 of ZEKom-2). Analytics is optional; declining it does not affect search or booking. Google Signals and personalised advertising are disabled in the analytics tag settings.
Availability checks: We process your selected dates, destination and guest count to return relevant results. The basis is steps taken at your request before entering into a contract (GDPR Article 6(1)(b)). Search parameters may be included in URLs and remain in browser history or technical logs.
Enquiries and guest assistance: We process your email address, message and other details you provide to answer questions, prepare an offer and assist with booking. The basis is pre-contractual steps or performance of a contract; for other general questions, our legitimate interest in responding to your communication.
Booking and providing your stay: We need the data required by the selected form, especially name, contact details, dates, property, guest count and requested services. The basis is entering into and performing a contract (GDPR Article 6(1)(b)). Billing, invoicing and lawful guest registration data are processed to meet legal obligations (GDPR Article 6(1)(c)). Guest registration requires only the data prescribed by the law of the country where the property is located.
Complaints and legal claims: Booking, payment and related communication data are used to handle complaints, meet legal obligations and establish or defend legal claims. The basis is the contract, a legal obligation or our legitimate interest in protecting rights.

Each form identifies information required to provide the requested service; legally required information is also necessary to meet the relevant obligation. If you do not provide it, we may be unable to supply the service. Other information is optional. Do not enter payment-card numbers, document copies or health information that is unnecessary for your request in free-text fields.

3. Email and booking forms

Email: clicking an email address opens your configured email application. This website has no email contact form. You compose and send the message in your application; we receive the data when you send it. The email-processing provisions in this notice then apply.

Booking form and calendar: Bentral content loads only when requested by clicking “Book” or “Check availability”, or opening a direct link. This establishes a connection with Bentral, which receives technical connection data and the dates transmitted. You enter booking details directly into that system.

Bentral is provided by INTERSPLET d.o.o., Slance 8, 3221 Teharje, Slovenia. It acts as a processor for the accommodation provider in relation to guest and booking data. The sole trader identified above remains the controller. Details of Bentral services and subprocessors are in the Bentral privacy policy. You can contact us directly to exercise rights relating to your booking.

We do not make automated decisions with legal or similarly significant effects or create advertising profiles on this website. Filtering properties by your criteria helps you search; it does not determine your eligibility for a service.

4. Who may receive data

Authorised people access data as needed for their work. Depending on the service, recipients may include:

Bentral and its technical subprocessors;
with your analytics consent, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and its Google Analytics subprocessors, under Google’s data processing terms;
hosting, content delivery and technical security providers; the production website is hosted with NEOSERV;
email, accounting and other support providers to the extent needed for communication, booking or legal obligations;
a payment service provider if selected during booking; check its identity and terms before paying;
competent authorities and statutory systems for guest registration, tourist levies and tax obligations where required by law.

Links to WhatsApp, Viber and other external services open at your request. Those providers also process data under their own rules. Merely viewing this website does not load their social plugins.

5. Transfers outside the European Economic Area

International technical infrastructure may involve processing outside the European Economic Area. Transfers are permitted only when the requirements of Chapter V GDPR are met, for example under a valid adequacy decision or standard contractual clauses with supplementary measures where needed.

Bentral describes categories of subprocessors and transfer mechanisms in its privacy policy, and Cloudflare in its privacy notice. Cloudflare refers to the EU–US Data Privacy Framework for eligible US transfers and standard contractual clauses for other relevant transfers or when it cannot rely on that framework. If analytics is enabled, Google may process data in the US and other countries with its infrastructure. Google refers to the EU–US Data Privacy Framework and, where necessary, standard contractual clauses; details and a link to Google LLC’s certification are in its transfer frameworks information. For information on a specific recipient, transfer, safeguards and how to obtain a copy, email app@art-pe.com.

6. How long we keep data

We keep data no longer than necessary for its purpose. Retention periods or criteria depend on the data:

Enquiries without a booking: until the enquiry and necessary follow-up are complete; longer only for a specific dispute-related reason or legal obligation.
Bookings and contractual communication: to arrange and provide the stay, then to the extent and for the time needed for billing, claims and applicable limitation periods. An open dispute may require retention until its final resolution.
Invoices and statutory records: as required by applicable tax, accounting and accommodation legislation for the record concerned.
Technical and security data: as needed for operation, troubleshooting and specific security incidents, taking hosting infrastructure settings into account.
Cookie preferences: 180 days from your latest choice in browser local storage. We ask again after expiry; you may change your choice sooner.
Analytics cookies: website code sets a maximum of 180 days from placement, without extending this on each visit. Withdrawing consent removes this website’s analytics cookies.
Google Analytics data: user and event data retention is controlled by the Google Analytics account setting. This is separate from cookie duration; standard aggregated reports have different rules. Ask app@art-pe.com for the current setting or to make a data request. See Google’s data retention information.

When the purpose and mandatory retention periods end, data is deleted or irreversibly anonymised. You may request the specific retention period for your booking or record type.

7. Your rights

Subject to the GDPR, you may request access, rectification, erasure, restriction and portability. Where processing relies on legitimate interests, you may object on grounds relating to your particular situation. Withdraw analytics consent at any time by choosing “Change cookie preferences” in the “Cookies and similar technologies” section, then “Decline analytics”. Withdrawal stops further measurement on this website and does not affect the lawfulness of prior processing. You may request erasure of previously collected data under the GDPR.

Send requests to app@art-pe.com or the controller’s postal address. We respond without undue delay and no later than one month after receipt. Where the GDPR permits an extension, we notify you and explain the reasons within that period. We may require proportionate identity verification to protect your data.

If you believe processing is unlawful, you may complain to the Information Commissioner of Slovenia, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, or another competent supervisory authority. The right to erasure does not override retention required by law or permitted protection of legal claims.

8. Cookies and similar technologies

Google Analytics 4 is used only with your express consent. Before you choose “Allow analytics”, and if you decline, the Google analytics tag does not load and this website sends it no data. Continuing to browse or a previous “I understand” click is not consent. Photos and fonts load from this website; the hosting provider may use necessary technologies for technical security.

artpe_cookie_consent — local storage, not a cookie: After “Allow analytics” or “Decline analytics”, your browser stores the preference version, analytics decision and expiry time for 180 days. This is needed to respect your choice, stays on your device and is not automatically sent to the server. It contains no name, email or analytics identifier. If browser storage is unavailable, your choice applies to the current page view. The old artpe_cookie_notice entry is removed and is not treated as consent.
_ga — analytics cookie: After consent, Google Analytics places it on this website’s domain. It contains an identifier used to distinguish visitors in statistics. Code sets a maximum lifetime of 180 days from placement, without extending it on each view; browsers may shorten this.
_ga_K2X4LTMZ7T — analytics cookie: After consent, Google Analytics uses it to maintain session state and associate page views with a visit. It is set on this website’s domain for a maximum of 180 days from placement, without extending it on each view.
External Bentral booking system: The calendar and form do not load on an ordinary page visit, only at your express request. Bentral may use technologies necessary for its service. Its general cookie list is not the cookie list for every embedded form; see the Bentral privacy policy. Requesting the form does not constitute consent to optional analytics or advertising cookies.

We use measurement ID G-K2X4LTMZ7T. The page URL supplied for measurement excludes query parameters and the part after #; referrer information retains only the originating website. We do not add names, email addresses or booking form content to analytics events. See Google Analytics data protection information and Google’s information about partner-site data.

You can change your choice at any time. The button below reopens both equally available choices. “Decline analytics” stops further measurement and removes this website’s analytics cookies listed above; enabling it again requires “Allow analytics”. Settings are always accessible through the footer’s “Privacy and cookies” link. Declining does not restrict content, availability checks or booking.

You can also remove local storage and cookies in your browser’s settings for this website. After deleting your choice, we ask again on the next visit. Prior consent is not required for necessary technologies used to transmit communications or supply a service you expressly request. Blocking necessary technologies may affect the external booking system.

9. Updates and contact

This notice describes the website’s stated operation. If processing purposes change or new technologies are introduced, we update it and, where needed, give additional notice or obtain consent. Send questions to app@art-pe.com or +386 51 665 300.

Privacy and cookies