Privacy Policy and Cookies

Privacy Policy of the KULT316 website

1. Introduction

This Privacy Policy sets out how the Biotechnical Educational Centre Ljubljana (hereinafter: Controller) collects, uses, stores and protects the personal data of users of the website www.kult316.si (hereinafter: website). The Controller is committed to protecting personal data in accordance with applicable law, including the General Data Protection Regulation (GDPR) and the Personal Data Protection Act (ZVOP-2). The Controller has prepared separate General Terms and Conditions and Privacy Policy for the KULT316 Travel Agency and courses, links to which are provided below in sections 11 and 12.

2. What data do we collect?

We may collect the following types of personal data when you use our website:

• Newsletter subscription details: email address, first name, last name.
• Registration details for courses, tastings and events: name, surname, email address and/or telephone number. For courses, we also collect date of birth and address information for the purpose of issuing a certificate.
• Information for reservations of facilities and services: name, surname, email address, reservation details and optionally telephone number.
• Information for booking tourist services: name, surname, email address, telephone number, residential address, date of birth, gender, special dietary requirements or medical restrictions (if necessary for travel organisation) – see the General Conditions of the KULT316 Travel Agency for details.
• Information about the use of the website (collected with cookies): IP address, device type, browser, duration of visit and behaviour on the page.

3. How do we collect the data?

We collect personal data in the following ways:

• When a user voluntarily enters information (newsletter subscription, facilities reservation, event registration, tourist service reservation, contact form).
• Automatically, with cookies and similar technologies, when you visit the website.

4. For what purposes do we process the data?

We process your personal data solely for the following purposes:

• Registration and information about events, courses and services (only with your consent).
• Making reservations (for facilities, restaurant, events, tourist services).
• Organisation of tourist services, including booking accommodation, transport and guided tours.
• Managing specific travel requirements (e.g. dietary or health requirements).
• Improving the user experience through analytics and cookies.
• Enforcement of legal obligations and dispute resolution.
• Delivering courses.

5. Legal basis for processing of personal data

We process personal data on the basis of:

• Your consent (e.g. Newsletter subscription).
• Contractual obligations (e.g. booking a tourist service or registering for a course).
• Legitimate interest (e.g. service improvements, website usage analysis).
• Legal obligations (e.g. accounting obligations and tourism legislation).

6. How long do we keep the data?

We only keep personal data for as long as is necessary to fulfil the purpose for which it was collected:

• Data for the newsletter: until you are opted out of the list.
• Data for reservations: we keep the data for as long as necessary to fulfil the purpose.
• Data on tourist bookings: up to 5 years after the service has been provided (subject to legal obligations).
• Analytical data from cookies: in accordance with the Cookie Policy.

After the retention period, the data will be deleted or anonymised.

7. Who has access to the data?

We do not sell or transfer your personal data to third parties, except in the following cases:

• External contractual processors who provide website hosting, emails and analytics (but are not allowed to use them for other purposes).
• Tourist service providers (e.g. hotels, airlines, tour guides – only in the context of making a booking).
• Students on placement who commit to protecting personal data.
• National authorities, if required by law.

8. How do we protect your data?

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including:

• Data encryption,
• Restricting access to employees and third parties,
• Regular data backup.

9. Transfer of data to third countries

Some of the data we process may be transferred to third countries, in particular to the USA, where the 360° tour we offer on our website is hosted. Services involving data transfer to the USA:

• Matterport – a platform that allows you a 360° tour (link: Matterport).

As a result of this data transfer to the USA, which is not a member of the European Union, the data is processed through a contractual processor with whom we have a contract for the processing of personal data. This contract provides appropriate safeguards in accordance with the Standard Data Protection Clauses (SCC) to ensure compliance with the GDPR. Contractual processor:

• Company name: Rubikon d.o.o, which manages Matterport.
• Place of registration: USA

10. Links to third-party websites

Our website may contain links to third-party websites (including media content and recipes authored by our experts) that are not owned or controlled by us. When you click on these links, your data may be collected in accordance with the privacy policies of these websites. We urge you to read their privacy policies before visiting these sites, as these sites are responsible for the processing of your personal data.

11. General Terms and Conditions and Privacy Policy for courses at BIC Ljubljana

The General Terms and Conditions for courses and the Privacy Policy of BIC Ljubljana are available here.

12. General Terms and Conditions and Privacy Policy of the KULT316 Travel Agency

The General Terms and Conditions and Privacy Policy of the KULT316 Travel Agency are available here.

13. What are your rights?

As a user, you have the right to:

• Access to your personal data,
• Rectify or delete personal data,
• Transfer the data to another controller,
• Restrict or object to processing,
• Unsubscribe from the newsletter (by clicking on the link in the email).

To exercise your rights, you can contact us at kult316@bic-lj.si.

14. Complaints to the supervisory authority

If you consider that the processing of your personal data does not comply with the regulations, you have the right to lodge a complaint with the supervisory authority: Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana. Email: gp.ip@ip-rs.si Telephone number: +386 (0)1 230 97 30 Website: www.ip-rs.si

15. Contact details of the Data Protection Officer (DPO)

For further information about the processing of your personal data or to exercise your data protection rights, please contact our Data Protection Officer (DPO) at the Biotechnical Educational Centre Ljubljana: Data Protection Officer – DPO Email: dpo@bic-lj.si

Cookies and tracking

This website uses cookies to improve the user experience. You can read more about this in our Cookie Policy.

Changes to the Privacy Policy

The Controller reserves the right to modify this Privacy Policy. Any changes will be published on this website.

Contact details

For questions regarding the protection of your personal data, please contact us at:

• Company name: Biotechnical Educational Centre Ljubljana, Culinary and Tourism Centre KULT316
• Address: Prušnikova ulica 74, 1210 Ljubljana – Šentvid
• Telephone number: 01 235 52 60

Email: kult316@bic-lj.si

What are cookies and how do they work?

Cookies are small text files that are downloaded to your computer or other electronic device when you visit a website for the first time. They are pieces of information about the user that are stored in the web browser that accesses the website and are then used for different purposes when you visit the same website again. Some cookies are necessary for websites to operate, while others provide a better user experience, make websites easier to use and display offers according to the user’s preferences. The purpose of each cookie used by this website is described in more detail in the tables below. All cookies, with the exception of necessary cookies, are only placed on your web browser with your explicit consent.

Types and purposes of cookies

We use cookies on our website. You can change your choice about the use of cookies on our website at any time by selecting Cookie Settings in the link below and then editing your preferences.

Necessary cookies

Necessary cookies are strictly necessary for the functioning of the website and do not collect any personal data. Without these cookies, certain services you wish to use on this website would not function properly, so they are always set.

Analytical cookies

Analytical cookies record visitor activity on our website. We use them to analyse traffic (number of visitors, browser identification and time spent on the site, navigation problems, etc.). They help us to develop a website tailored to your needs and to improve your user experience.

Third party cookies

These cookies are set by external partners (YouTube etc.) for functions integrated into the website via a plug-in. They may be used by the partner companies to create a profile of your interests, which is then used to display relevant advertisements on other websites.

1. Necessary cookies

2. Analytics cookies

3. Third party cookies