Privacy Policy

Last updated: May 29, 2025

At Garni Hotel Cirman Ljubljana, we take the protection of your personal data seriously. This privacy policy explains how we collect, use and protect your data in accordance with the General Data Protection Regulation (GDPR) and Slovenian legislation.

1. Data Controller

Name: Garni Hotel Cirman

Address: Medno 15, 1210 Ljubljana-Šentvid, Slovenia

Phone: +386 1 512 0234

Email: info@cirman.si

2. What data we collect

We collect and process the following categories of personal data:

2.1 Reservation data

Full name and surname
Contact information (phone, email)
Residential address
Accommodation dates
Special requests or needs

2.2 Guest book data

Full name and surname
Date and place of birth
Nationality
Personal document information
Stay dates

2.3 Payment data

Payment method
Tax-related information

2.4 Video surveillance

We operate video surveillance in public areas of the hotel for the safety of guests and property. Recordings are stored for a period of 30 days.

3. Legal basis for processing

We process your personal data based on the following legal bases:

Contract performance: Data processing is necessary for reservation and accommodation provision
Legal obligation: Maintaining guest registry and tax obligations
Legitimate interests: Security of property and guests (video surveillance)
Consent: For marketing and special services (where required)

4. How we use your data

We use your personal data for the following purposes:

Processing reservations and providing accommodation
Providing additional services
Fulfilling legal obligations
Ensuring security of guests and property
Communication with guests
Improving service quality

5. Data retention

We retain your personal data for the following periods:

Guest book: 1 year after departure
Reservations: 3 years for tax purposes
Accounting data: 10 years after the end of the financial year
Video recordings: 30 days

6. Data sharing

We may share your personal data with the following recipients:

Booking platforms: Booking.com, Expedia and others for reservation processing
Competent authorities: Police, tax administration (on legal basis)
Payment systems: Banking and payment institutions for payment processing
Accounting service: External accountant for tax obligations

7. Your rights

Under GDPR, you have the following rights:

Right of access: You can request information about the processing of your data
Right to rectification: You can request correction of inaccurate data
Right to erasure: You can request deletion of data (in certain cases)
Right to restriction: You can request restriction of processing of your data
Right to portability: You can request transfer of data to another controller
Right to object: You can object to processing based on legitimate interests
Right to withdraw consent: You can withdraw your consent at any time
Right to complaint: You can file a complaint with the supervisory authority

To exercise your rights, contact us at: info@cirman.si

8. Data security

We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure or destruction. All employees are bound by confidentiality obligations.

9. Complaints

If you believe we are violating data protection regulations, you can file a complaint with:

Information Commissioner of the Republic of Slovenia

Dunajska cesta 22, 1000 Ljubljana

Phone: 01 230 97 30

Email: gp.ip@ip-rs.si

10. Changes to privacy policy

We reserve the right to update this privacy policy. We will publish significant changes on our website and notify you by email where appropriate.

Privacy contact

For all questions about the processing of your personal data, contact us: