Privacy Policy
We explain what personal data we collect, why we process it, how we protect it and what rights you have.
Data controller
The controller of personal data collected on the Oton Župančič Memorial House website is the public institution that manages the Memorial House:
| Name | Bela Krajina Development and Information Centre (RIC Bela krajina) |
|---|---|
| Registered office | Ulica na utrdbah 18, 8340 Črnomelj |
| Registration number | 1518399000 |
| Tax number | SI71124101 |
| VAT payer | Yes (SI71124101) |
| info@ric-belakrajina.si | |
| Phone | 07 305 65 30 |
Hereinafter: the controller. The controller’s unit is the Oton Župančič Memorial House, Vinica 9, 8344 Vinica.
Purposes of processing personal data
The controller processes personal data to fulfil its tasks as a public institution in the fields of culture and tourism, to carry out arrangements with visitors and on the basis of the individual’s consent. On this website and in connection with visits to the Memorial House, data is processed mainly for the following purposes:
- answering questions and enquiries sent via the contact form, by email or by phone;
- booking and organising guided tours, educational programmes, experiences and group visits;
- event registrations and informing registered participants of any changes;
- providing information about the programme, news and events, where the individual has consented to this;
- ensuring the safe and proper operation of the website and improving its usability.
Photographs and audio and video recordings may be made at events organised by the controller in the public interest. Recordings may be published on websites, in newsletters and on social networks managed by the controller.
Legal basis for processing
The controller processes personal data only where there is an appropriate legal basis for doing so:
- the individual has consented to the processing of their personal data for one or more specific purposes;
- processing is necessary for the performance of a contract to which the individual is a party, or in order to take steps at their request prior to entering into a contract;
- processing is necessary for compliance with a legal obligation to which the controller is subject;
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Types of personal data and their source
Depending on the purpose, the controller may process the following personal data:
- first and last name;
- email address;
- phone number;
- the name of the institution or group the individual represents, and details of the planned visit;
- the content of the message the individual sends;
- technical data about visits to the website, where the individual has allowed the use of non-essential cookies.
The controller obtains the data directly from the individual to whom it relates – usually when they fill in the contact form, send a message, call or register for an event. Details about cookies are described on the Cookies page.
Categories of individuals
The controller processes the personal data of individuals who contact it or use its services, in particular:
- visitors to the Memorial House and users of its services;
- contact persons of schools, kindergartens and other organised groups;
- participants in events, workshops and experiences;
- website users who send an enquiry;
- contractors and business partners.
Recipients of personal data
Access to personal data is restricted exclusively to:
- authorised employees of the controller;
- contract processors who perform specific services for the controller (for example, website hosting and maintenance), to the extent necessary and on the basis of a written data processing agreement;
- persons and authorities that demonstrate a legal basis for access;
- persons authorised for access by the individual to whom the data relates.
Retention of personal data
The controller keeps personal data in physical and electronic form only for as long as is necessary to achieve the purpose for which it was collected. Data processed for the performance of an arrangement or contract is kept until all obligations arising from that relationship have been fulfilled or until the expiry of the periods laid down by the regulations on the retention of documentary and archival material.
Data processed on the basis of consent is kept until consent is withdrawn. Once the purpose has been fulfilled or the prescribed retention period has expired, the data is erased, destroyed or anonymised.
Protection of privacy
The controller protects personal data against loss, alteration, theft and access by unauthorised persons through appropriate technical and organisational measures. Among other things:
- access to data is restricted to authorised persons;
- data processing agreements have been concluded with contract processors;
- procedures are in place for exercising individuals’ rights and for dealing with any personal data breaches;
- the website uses an encrypted connection, and the IT equipment is protected by physical and communications security measures.
Transfer of data to third parties and third countries
The controller does not sell personal data or pass it on to third parties, except to the contract processors and authorities listed in this policy. The data is stored in information systems within the territory of the Republic of Slovenia or the European Union and is not transferred to third countries.
Automated decision-making
The controller does not use automated decision-making, including profiling.
Rights of the individual
Individuals may at any time request from the controller:
- confirmation as to whether personal data concerning them is being processed, and access to that data and to information on the purposes of processing, the types of data, the recipients and the retention period;
- a copy of the personal data being processed;
- the rectification of inaccurate data or the completion of incomplete data;
- the erasure of personal data where the conditions of Article 17 of the General Data Protection Regulation are met;
- the restriction of processing where the conditions of Article 18 of the General Data Protection Regulation are met;
- the transfer of the data they have provided to the controller in a structured, commonly used and machine-readable format;
- the cessation of processing to which they object, in particular where data is processed for direct marketing purposes.
Individuals may withdraw their consent to processing at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Requests to exercise these rights should be sent to the controller’s address or to info@ric-belakrajina.si. The controller will respond without undue delay and no later than one month after receipt.
Individuals who believe that the processing of their personal data violates data protection regulations may lodge a complaint with the Information Commissioner of the Republic of Slovenia (Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, phone 01 230 97 30, www.ip-rs.si).
Persons under 15 years of age
Persons under 15 years of age may provide their data via the website or in any other relationship with the controller only with the explicit permission of their parents, foster parents or guardians.
Data protection contact
For questions about the processing of personal data and the exercise of your rights, you can contact the controller at info@ric-belakrajina.si or by phone at 07 305 65 30.
Final provisions
The controller reserves the right to amend and supplement this policy. Individuals will be informed of any changes through publication on this website.
Last updated: 2 October 2026