{"id":227,"date":"2026-04-16T09:38:01","date_gmt":"2026-04-16T09:38:01","guid":{"rendered":"https:\/\/www.pod-skalco-bohinj.com\/?page_id=227"},"modified":"2026-04-16T10:01:23","modified_gmt":"2026-04-16T10:01:23","slug":"privacy-terms","status":"publish","type":"page","link":"https:\/\/www.pod-skalco-bohinj.com\/en\/pogoji-zasebnosti\/","title":{"rendered":"Privacy Terms"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\n

PRIVACY TERMS\u00a0<\/strong><\/p>\n\n

Company privacy policy DOMKO, d.o.o.<\/strong><\/p>\n\n

THE MEANING OF THE TERMS<\/strong><\/p>\n\n

Privacy Terms<\/strong><\/p>\n\n

The Privacy Policy is an internal company act DOMKO, d.o.o. <\/strong>(hereinafter referred to as the \"Processor\") and shall apply to all legal relationships between the Processor and the subscribers of the services (hereinafter referred to as the \"Controller\"). The Act sets out the rights and obligations of the Processor and the Controller in the management and processing of personal data of individuals.<\/p>\n\n

Personal data<\/strong><\/p>\n\n

Personal data means any information relating to an identified or identifiable individual who is a natural person. An identified individual is one whose personal data are identified and processed in accordance with the purposes specified by the controller. An identifiable individual is one who can be identified, directly or indirectly, and whose personal data are processed in accordance with the purposes determined by the controller.<\/p>\n\n

Individual<\/strong><\/p>\n\n

A data subject is any natural person whose personal data are processed on the basis of a lawful or contractual relationship between the controller and that data subject or on the basis of an explicit consent given by the data subject to the controller.<\/p>\n\n

Controller<\/strong><\/p>\n\n

The controller determines the purposes and means of the processing within the scope of its registered activity and\/or its legal powers. The data subject shall be informed in advance who is the controller of the personal data and who is the processor of his or her personal data.<\/p>\n\n

Processor<\/strong><\/p>\n\n

The Processor shall process the personal data of individuals on behalf of the Controller, on the Controller's instructions, within the scope of the lawful purposes and means of processing.<\/p>\n\n

Sub-editor<\/strong><\/p>\n\n

The sub-processor processes the personal data of individuals on behalf of and under the instructions of the processor, within the scope of the lawful purposes and means of processing.<\/p>\n\n

Processing<\/strong><\/p>\n\n

Processing of personal data means any operation or set of operations which is performed upon personal data or upon sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.<\/p>\n\n

Restriction of processing<\/strong><\/p>\n\n

Restriction of processing means the marking of stored personal data in order to restrict its processing in the future.<\/p>\n\n

Profiling<\/strong><\/p>\n\n

Profiling means any form of automated processing of personal data which involves the use of personal data to evaluate certain personal aspects relating to an individual, in particular to analyse or predict that individual's performance at work, economic situation, health, personal taste, interests, reliability, behaviour, location or movements.<\/p>\n\n

Pseudonymisation<\/strong><\/p>\n\n

Pseudonymisation means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without further information, provided that such information is kept separately and is subject to technical and organisational safeguards,
personal data are not attributed to a specific or identifiable individual.<\/p>\n\n

Consent of the individual<\/strong><\/p>\n\n

Consent of the data subject shall mean any voluntary, explicit, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies his or her agreement to the processing of personal data concerning him or her.<\/p>\n\n

Breach of protection of personal data<\/strong><\/p>\n\n

A personal data breach is a breach of security resulting in the intentional or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.<\/p>\n\n

PROCESSING OF PERSONAL DATA<\/strong><\/p>\n\n

Processor data<\/strong><\/p>\n\n


DOMKO, d.o.o.
Jereka 44, Jereka, 4264 Bohinjska Bistrica<\/a><\/strong>
Registration number: 1300911000
Tax ID: 20665261
The person responsible for providing information in relation to this Act and the protection of personal data is Borut Rozman.<\/p>\n\n

Sub-shareholders<\/strong><\/p>\n\n

The processor shall have contracts in place for the further processing of personal data of individuals of a particular controller in cases where it has external processors for the performance of its services who are sub-processors in relation to the controller. The processor shall be responsible for the selection of the sub-processors and shall ensure that
are subject to the same or a higher level of protection of personal data as provided for by Slovenian and European Union regulations. The Processor shall inform the Controller of its existing processors and of any replacement of processors or hiring of new processors. It shall do so by announcing the publication of new privacy terms, specifying the new processors and giving the controller thirty days to comment on, approve or object to the changes.<\/p>\n\n

Legal basis for processing personal data<\/strong><\/p>\n\n

The processor has a legal basis for processing the personal data of the data subjects of a particular controller in a previously concluded contract between the controller and the processor or on the basis of another service contract.<\/p>\n\n

The Processor is responsible for ensuring that Controllers are aware of this Act and other acts of the Processor insofar as they regulate the processing of personal data of individuals and\/or the terms and conditions of business for the provision of the services ordered.<\/p>\n\n

The controller is responsible for ensuring that there are adequate legal grounds for the processing of personal data (legitimate interest, contractual interest and\/or explicit consent of the data subject).<\/p>\n\n

Types of personal data<\/strong><\/p>\n\n

The processor shall process the personal data which are provided to it by the controller. The processor shall never process other personal data of individuals of a particular controller.<\/p>\n\n

Purposes of the processing of personal data<\/strong><\/p>\n\n

The processor shall process personal data of individuals of a particular controller only for the purposes for which the controller has instructed it. The processor shall never process the personal data of individuals of a particular controller for other purposes.<\/p>\n\n

The role of the operator<\/strong><\/p>\n\n

The controller is obliged to give instructions to the processor for the processing of the personal data of the data subjects that it manages. The controller must give the processor clear and unambiguous information as to which types of personal data he may process and for what purposes.<\/p>\n\n

Documented instructions from the operator<\/strong><\/p>\n\n

Under this Act, the controller is obliged to specify to the processor the content and duration of the processing of personal data, the nature and purpose of the processing, the types of personal data and the categories of data subjects.<\/p>\n\n

The controller's instructions shall be documented and may be given in writing by ordinary mail or by e-mail, or, in the case of oral instructions, the processor shall require written confirmation by ordinary mail or by e-mail.<\/p>\n\n

The processor is not responsible for the lawfulness of the instructions it receives from the controller for the processing of personal data of individuals of a particular controller.<\/p>\n\n

Data confidentiality<\/strong><\/p>\n\n

The Processor shall ensure that the persons authorised to process personal data are bound by confidentiality obligations or are bound by the relevant law to confidentiality. The Processor shall have an internal Personal Data Protection Policy in place and shall obtain from all employees and external collaborators a written commitment to data confidentiality, a familiarisation with the Policy and the appropriate security measures implemented by the Processor to ensure an adequate level of data security.<\/p>\n\n

Rights of individuals<\/strong><\/p>\n\n

The Processor shall technically ensure that, on the instructions of the Controller and to the extent lawful, it provides the support and technical solutions and the final data needed by the Controller when individuals exercise with the Controller one or more of their rights under the law: the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability and the right to object.<\/p>\n\n

Deleting or transferring data<\/strong><\/p>\n\n

The Processor shall, on prior documented instructions from the Controller, erase or return all personal data to the Controller upon completion of the service provided to the Controller and destroy existing copies, except where the retention of the data is required by law.<\/p>\n\n

Access to information<\/strong><\/p>\n\n

The processor shall provide the controller with all information necessary to demonstrate compliance with the obligations under this Act and the legislation and shall allow and cooperate with audits, including inspections, carried out by the controller or by another auditor authorised by the controller.<\/p>\n\n

SECURITY OF PROCESSING OF PERSONAL DATA<\/strong><\/p>\n\n

Security of processing<\/strong><\/p>\n\n

Taking into account the latest technological developments and the costs of implementation, and taking into account the nature, scope, circumstances and purposes of the processing, as well as the risks to the rights and freedoms of natural persons, which vary in likelihood and severity, the controller and the processor shall ensure an appropriate level of security in relation to the risk, by implementing appropriate technical and organisational measures, including, but not limited to, measures covering:<\/p>\n\n