Privacy Policy

1. Data controller

The data controller is Turistična kmetija Štolfa, Stara Gora 26A, 8233 Mirna, Slovenia, company registration number 2473801000, VAT ID SI39754839 ("we" or "the controller").

For any questions about the processing of personal data, contact us at iztok.stolfa@gmail.com.

2. What personal data we process

Contact form data: name, email address, phone number, company name (optional), the selected area of interest and the content of the message.

Data collected automatically on your visit: IP address, browser and device information and timestamps recorded in server logs.

The website language you selected and your cookie consent choice, stored in a cookie or your browser's local storage.

If analytics is enabled: pseudonymous data about how the site is used (e.g. page views, approximate city-level location, device and browser type). We process this only if you consent to analytics cookies in the cookie banner.

When you submit the contact form, we use a spam- and abuse-protection service that may process your IP address and technical browser data to check that the form is submitted by a human.

3. Purposes and legal bases

Responding to your enquiry and communicating with you: processing is necessary to take steps at your request prior to entering into a contract, or is based on our legitimate interest in replying to messages we receive (Article 6(1)(b) or 6(1)(f) of the General Data Protection Regulation – GDPR).

Operation, security and stability of the site, protection against spam and abuse, and keeping server logs: the controller's legitimate interest (Article 6(1)(f) GDPR).

Storing the language setting and your cookie choice: strictly necessary cookies, for which consent is not required.

Web analytics: processing is based solely on your consent, given through the cookie banner (Article 6(1)(a) GDPR); you can withdraw consent at any time.

4. Recipients and processors

We do not sell your personal data and do not share it with third parties for their own purposes.

To run the website and handle your enquiries, we work with external service providers that process personal data solely on our behalf and on our instructions, as processors. These are providers of website hosting and delivery, the content management system, email delivery, web analytics and cookie consent management.

We have data processing agreements in place with all processors in accordance with Article 28 GDPR. An up-to-date list of the individual processors is available on request via the email address in section 1.

5. International transfers

Some of our service providers (in particular for web analytics, content delivery and email) may process personal data outside the European Economic Area, in particular in the United States.

In such cases the transfer is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the providers' participation in the EU–US Data Privacy Framework.

6. Retention

We keep contact form messages and related correspondence for as long as needed to handle your enquiry, as a rule no longer than 24 months, after which we delete them.

Server logs and security records are generally kept for 30 to 90 days.

Web analytics data is retained for a maximum of 14 months.

The record of your cookie consent is kept for up to 12 months, after which we ask you again on your next visit.

7. Your rights

Under the GDPR you have the right to access your personal data, to have it rectified or erased, to restrict processing, to data portability, and to object to processing based on legitimate interest.

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise your rights, write to us at iztok.stolfa@gmail.com. We will respond within the statutory period of one month, which may be extended in justified cases.

8. Right to lodge a complaint

If you believe that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with the supervisory authority: Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec RS), Dunajska cesta 22, 1000 Ljubljana, email gp.ip@ip-rs.si, website www.ip-rs.si.

9. Is providing data mandatory

Providing personal data is voluntary. If you do not provide the contact form data, we will not be able to handle your enquiry or reply to you. Using analytics cookies is likewise voluntary and is not a condition for visiting the website.

10. Automated decision-making and profiling

We do not use your personal data for automated decision-making, including profiling.

11. Changes to this policy

We may update this privacy policy from time to time. The current version is published on this page together with the date of the last update.

12. Disclaimer

We maintain this website with the greatest possible care, but we do not warrant that all published information is up to date, accurate or complete. All information may change without prior notice.

We accept no liability for any damage arising directly or indirectly from the use, malfunction or unavailability of this website.

We accept no responsibility for the content or operation of third-party websites we reference or link to.

13. Copyright

© 2026 Turistična kmetija Štolfa. All text, images, graphics, animations and other documents on this website are subject to copyright or other forms of intellectual property protection.

The content may not be copied, distributed, modified or otherwise reproduced without our prior written consent, except for personal, non-commercial use.

Cookies

This website uses cookies. Strictly necessary cookies, which enable the basic operation and security of the site, are set without consent. Analytics cookies are set only after you consent to them in the cookie banner. You can change your choice at any time via the "Cookie settings" link in the footer.

If you decline analytics cookies, analytics is not loaded. You can change your consent at any time via the "Cookie settings" link in the footer.