General Data Protection Regulation (GPDP)

As the person to whom the personal data refers, you have certain rights about the personal data collected about you by Explore Slovenia.

The following list contains information on your rights that stem from applicable data protection laws:

• Right to withdraw consent: If the processing of your personal data is based on your consent, you may withdraw such consent at any time. You may withdraw the consent in the same way as you provided it (e.g. electronically).
• Right of access: you may request that Explore Slovenia provide you with information on personal data that it stores about you, including information on which types of your personal data are stored, what this data is used for, where it is collected if not directly from you, and to whom it has been disclosed, if applicable, the period of storing your personal data, what your rights are related to your personal data, and information on the potential existence of automated decision-making (including profiling) and the reasons for such decision-making and the foreseen consequences of such processing for you.
• Right of rectification: You may request that Explore Slovenia rectify any incorrect personal data about you that it holds.
• Right to restrict: You may request that Explore Slovenia restrict the processing of your personal data if:
  • you challenge the accuracy of your personal data, namely concerning the period which Explore Slovenia requires to verify the accuracy of the data,
  • the processing is unlawful and you require a restriction of processing rather than the deletion of your personal data,
  • the Explore Slovenia no longer requires your data, but must keep it to enforce, implement, or defend your legal claims,
  • you object to the processing while Explore Slovenia verifies whether its legal basis predominates over yours.
• Right to data portability: At your request, Explore Slovenia will, if technically feasible, transfer your personal data to another data controller if the processing is based on your consent or if it is necessary for the fulfilment of an agreement, and if the processing is carried out using automated means.
• Right to object: if the processing is based on your consent or is necessary for the fulfilment of an agreement, and if the processing is carried out using automated means, you may object to the processing of your personal data for reasons related to your special position. When your data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data for such marketing, including profiling. Furthermore, you have the right to object for any reasons related to your special position to the processing of personal data concerning these reasons when personal data is processed for scientific or historical research purposes or statistical purposes, except if the processing is required to perform a task that is carried out in the public interest.
• Automated receiving of particular decisions, including profiling: you have the right to request from Explore Slovenia that a decision based only on the automated processing of your personal data not apply to you if such a decision produces legal effects for you or significantly affects you.
• The right to submit complaints: In the event of an alleged violation of applicable privacy laws, you may file a complaint with a supervisory authority competent for data protection in your country of residence or in the location where the alleged violation occurred.
• Right to erasure: You may request that Explore Slovenia erase your personal data if:
  • the personal data is no longer required for the purpose for which they were collected or otherwise processed,
  • the processing is based on your consent and you withdraw this consent, and there is no other legal basis for processing,
  • the processing is based on your consent and you object to such processing, and there is no other legal basis for processing,
  • the personal data was processed unlawfully,
  • this is necessary to fulfil statutory obligations,
  • the personal data was collected in connection with offering information society services directly to a child. The processing of the personal data of a child is lawful if the child is at least 16 years of age. If a child is younger than 16, such processing is only lawful if the child’s parent or guardian provides authorisation or approval on behalf of the child.