Privacy Policy

Updated: March 28, 2025

At Hostel Kobarid (hostelkobarid.com), we value our guests’ privacy and are committed to protecting personal data. This privacy policy explains what data we collect, how it is used, and how it is protected.

I. Data Collection and Processing

We collect and process user data in the following cases:

1. Website Operation Data and Log Files

When you visit our website, the server automatically records information such as:

  • IP address,

  • Browser type and version,

  • Operating system,

  • Date and time of access,

  • Visited pages,

  • Referral source (if applicable).

These data are stored in log files and used for security, diagnosing technical issues, and website analysis. They are collected for statistical purposes to improve our website. Server log files are also checked to maintain stability and detect potential illegal activities. Legal basis: Article 6(1)(f) GDPR.

Cookies

We use cookies to enhance website usability and analytics. Cookies allow saving user settings and analyzing page visits, helping tailor website content to user preferences. For more details, see our Cookie Policy.

Types of cookies used:

  • Essential cookies – Ensure the correct operation of the website (e.g., authentication, saving user settings). These do not require user consent.

  • Analytical cookies – Help analyze page visits and user behavior. Data are used in an aggregated form to improve the website. Legal basis: Article 6(1)(f) GDPR.

Google Analytics

We use Google Analytics (a service by Google LLC, USA) to analyze website usage. Google Analytics collects data via cookies and transmits them to Google servers (including servers in the USA).

Google uses this data to evaluate website traffic and generate reports. We have enabled IP anonymization, meaning your IP address is shortened within EU and EEA countries. Legal basis: Article 6(1)(f) GDPR.

You can disable Google Analytics using this browser add-on: http://tools.google.com.

Google Maps

Our website may use Google Maps to display location-based content. When interacting with Google Maps, certain data (such as your IP address and map usage behavior) may be collected and processed by Google. This information is subject to Google’s Privacy Policy.

Google Fonts

We use Google Fonts (provided by Google LLC) to enhance website visuals. Your browser automatically requests fonts from Google servers, which may lead to IP address transmission. For more details, see Google’s Privacy Policy.

Cookie Usage Explanation

Upon your first visit to our website, a pop-up window will inform you about cookie use. By clicking “Save Preferences”, you consent to the selected cookie categories. You can disable cookies in your browser settings, but this may affect site functionality.

2. Contact Form and Email Communication

Our website provides a contact form for communication. When using it, the following data are transmitted and stored:

  • Name,

  • Email address,

  • Message content,

  • User’s IP address,

  • Date and time of submission.

Alternatively, you may contact us via email. In this case, personal data are also stored. We do not share these data with third parties. They are used exclusively to process your inquiry. Legal basis: Article 6(1)(a) GDPR (user consent) or Article 6(1)(b) GDPR (contract necessity).

3. Booking and Service Provision Data

To book accommodation at our hostel and provide services, we process personal data, including:

  • Full name,

  • Contact details (email, phone),

  • Booking details (dates, room type, preferences),

  • Payment details (card number or other payment method),

  • IP address and metadata (for transaction security).

These data are used for booking confirmation, service provision, and contacting you in case of changes. Legal basis: Article 6(1)(b) GDPR (contract execution).

Terms of Use

By making a booking and paying for hostel services, you agree to our Terms and Conditions, which regulate booking, service provision, and cancellations. Please review them before finalizing your booking.

Use of Third-Party Payment Services

We use Stripe, a trusted payment processor, to handle payment transactions securely. Stripe processes payment data in compliance with PCI-DSS standards to ensure secure transactions.

By making a payment, you consent to Stripe processing your payment information according to Stripe’s Privacy Policy.

For more details on how Stripe processes personal data and handles payment information, please refer to Stripe’s Privacy Policy.

CAPTCHA Verification

To protect against bots, our website uses CAPTCHA during the booking process. While CAPTCHA may collect certain technical data (such as your IP address), it does not store personal information like your name, email address, or booking details.

II. Data Retention and Deletion

We process and store personal data in accordance with Articles 17 and 18 of the GDPR and Slovenian legal requirements. Data that is no longer needed for its original purpose will be deleted unless legal retention obligations apply.

If data cannot be deleted due to other legitimate purposes, its processing will be restricted. This means that the data will be locked and not processed for any other purpose, such as for commercial or tax-related record-keeping.

Under Slovenian law, data may be stored for up to 10 years. This applies to all financial and tax-related documents, including invoices, contracts, accounting records, reports, and other tax documents. More details on data retention periods can be found in: Accounting Act (Zakon o računovodstvu), Tax Procedure Act (Zakon o davčnem postopku).

If specific legal provisions require different retention periods, we will comply with those requirements accordingly.

III. Your Rights

If we process your personal data, you are considered a data subject under the GDPR, and you have the following rights in relation to us as the Data Controller:

Who is responsible for data processing?

  • Data Controller: Monavista d.o.o., located at Gregorčičeva 23, 5222 Kobarid, Slovenia, determines the purposes, conditions, and means of personal data processing.

  • Data Processor: Beds24 GmbH, located at Hausseestr. 14, D-16798 Fürstenberg, Germany, processes personal data on behalf of Monavista d.o.o. as part of its booking management software services.

Responsibilities:

  • Monavista d.o.o. is responsible for ensuring that data processing is lawful under Article 6(1) of the GDPR and for protecting data subjects’ rights under Articles 12–22 of the GDPR.

  • Beds24 GmbH is obligated to maintain data security and follow the Data Controller’s instructions, acting solely in the Controller’s interest and under its direction.

Data Transfers to Third Parties:

  • Personal data may be shared with third parties only to fulfill service obligations and with the Data Controller’s prior consent.

  • Any such data transfer will comply with GDPR requirements, including Articles 44–46, which regulate transfers to third countries.

Your Rights under the GDPR

Under Regulation (EU) 2016/679 (GDPR), you have the following rights regarding the processing of your personal data:

1. Right of Access

You have the right to request confirmation as to whether we process your personal data and, if so, to obtain information about:

  • The purposes of data processing,

  • The categories of personal data processed,

  • The recipients or categories of recipients who have received or will receive your data,

  • The data retention period or criteria for determining it,

  • Your rights to rectification, erasure, restriction of processing, or objection to processing,

  • Your right to lodge a complaint with a supervisory authority,

  • The source of data if it was not collected directly from you,

  • The existence of automated decision-making, including profiling, and meaningful information about the logic involved.

2. Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. We will make corrections without undue delay.

3. Right to Restriction of Processing

You can request the restriction of processing if:

  • You contest the accuracy of your data (processing will be restricted while we verify the data),

  • Processing is unlawful, but you prefer restriction over deletion,

  • We no longer need the data, but you require it for legal claims,

  • You have objected to processing, and we are assessing whether legitimate grounds override your request.

4. Right to Erasure (“Right to be Forgotten”)

You may request deletion of your data if:

  • It is no longer needed for its original purpose,

  • You withdraw consent and there are no other legal grounds for processing,

  • Processing was unlawful,

  • Deletion is required by law.

If your data has been made public, we will take reasonable steps to inform other data processors about your request for deletion.

5. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transfer it to another controller without interference, provided that processing is based on your consent or a contract.

6. Right to Object

You may object to the processing of your personal data at any time if:

  • Processing is based on legitimate interests, or

  • Processing is for direct marketing purposes (in which case, we will immediately stop using your data for marketing).

7. Right to Withdraw Consent

If data processing is based on your consent, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing prior to withdrawal.

8. Right to Lodge a Complaint

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with a supervisory authority in your country of residence or where the suspected violation occurred.

IV. Your Consent and Changes to Our Privacy Policy

By entering your booking details on our website and completing the reservation through the Beds24 platform, you consent to the processing of your personal data under this Privacy Policy. You may withdraw consent at any time by contacting us.

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with the effective date of the update. We encourage you to check this page periodically for the latest version.

If you have any questions or concerns about our data processing practices, please contact us at: hostelkobarid@gmail.com