Data Protection
1. Introduction
The protection of your personal data is extremely important to us. We are committed to the lawful, fair and transparent processing of personal data in accordance with the EU General Data Protection Regulation (GDPR), the Personal Data Protection Act (ZVOP-2) and other applicable regulations.
On this subpage, we inform you about what personal data we collect, for what purpose we use it, how we protect it, and what your rights are regarding its protection.
2. Personal data controller
The personal data controller is:
Goričanec, Edvard Mihalič s.p.
Bodonci 22 B
9265 Bodonci
Slovenia
Registration number: 2111829000
Tax number: 86268333
Email: info@secret-wellness.si
3. What data do we collect?
We may collect the following categories of personal data:
- contact information (name, surname, email address, telephone number),
- data on website usage (IP address, cookies, web identifiers),
- any other data you provide to us voluntarily (e.g. in online forms or communications).
4. Purpose of data processing
We process your personal data for the following purposes:
- response to your inquiry (contact forms, e-mail, calls),
- booking accommodation, appointments or other services,
- sending notifications, offers and news (based on your consent),
- ensuring the functioning of the website (analytics, security, cookies),
- fulfillment of legal obligations (accounting, archiving, etc.).
5. Legal basis for processing
We process personal data on the basis of:
- the consent you provide when filling out online forms or subscribing to e-newsletters,
- legal obligations (e.g. retention of accounting documents),
- legitimate interest when it comes to improving services, security and communication with customers.
6. Transfer of data to third parties
We do not share your personal data with third parties unless this is necessary to provide services or fulfill legal obligations.
Data may be shared with:
- providers of IT services, website maintenance and online advertising,
- competent authorities based on legal requirements.
We have concluded appropriate data protection agreements with all contractual processors.
7. Data retention
We retain personal data for as long as is necessary to fulfill the purpose for which it was collected, or as long as required by law. After the retention period, we delete or anonymize it.
Examples:
- demand data: up to 1 year from the end of the communication,
- contractual data: up to 10 years after the contract expires,
- data for marketing purposes: until consent is revoked.
8. Your rights
In accordance with applicable law, you have the following rights:
- the right to access your personal data,
- the right to correct inaccurate or incomplete data,
- the right to erasure (“right to be forgotten”),
- the right to restriction of processing,
- the right to object to processing based on legitimate interest,
- the right to data portability,
- the right to withdraw consent where processing is carried out on this basis,
- the right to complain to the supervisory authority (Information Commissioner).
To exercise your rights, you can contact us at any time at info@secret-wellnes.si.
9. Cookies and tracking
We use cookies on our website to ensure basic functionality, improve user experience and analyze traffic. Details about the types of cookies and their management are defined in Cookie Policy, which is available on this website.
10. Changes to the Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this website with the date of the last update.
Bodonci, 25. 8. 2026