Privacy Policy
The purpose of this privacy policy is to inform individuals and other legal entities (hereinafter referred to as "individuals") who interact with the Higher Vocational School for Hospitality, Wellness, and Tourism Bled (hereinafter referred to as "the school") about the purposes and legal grounds for processing personal data, as well as the rights of individuals regarding the processing of personal data carried out by our school. Most processing of personal data is based on the provisions of the Vocational and Professional Education Act (VPSA-1) and legislation in the field of personal data protection. Any changes to this document will be published on our website. By using the website, you confirm that you are familiar with the entire content of the privacy policy.
Data Controller:
Higher Vocational School for Hospitality, Wellness, and Tourism Bled
Prešernova 32, 4260 Bled
Email: info@vgs-bled.si
Phone: 04 575 34 10 (secretariat)
Data Protection Officer:
DATAINFO.SI, d.o.o.
Tržaška cesta 85, SI-2000 Maribor
Email: dpo@datainfo.si
Phone: 386 (0) 2 620 4 300
Website: www.datainfo.si
Purposes and Legal Grounds for Processing Personal Data
Based on legislation, we keep records:
- records of applicants for enrollment and enrolled students,
- personal file, which is maintained for each student from enrollment to graduation or deregistration,
- record of exams, which documents the exam registration, progress, and achieved grade,
- records of issued documents regarding completed studies.
The records from points 1, 2, and 4 of the previous section include: the student's personal name (for female students, also their maiden surname), gender, date, place and municipality of birth, country of birth, permanent and temporary residence, unique personal identification number (hereinafter referred to as "citizen"), citizenship, prior educational attainment, method of study, and other data according to special regulations. The record from point 2 of the previous paragraph also includes information about completed exams, progression, and completion of studies.
The record from point 3 of the first paragraph of this article includes: the student's personal name (for female students, also their maiden surname), gender, unique personal identification number, method of study, year of study, and study year of the first enrollment, exam date, information on whether the exam is being taken for the first time or repeated, and the grade achieved in the exam.
Personal data of students from the records under Article 56 of this law are collected, processed, stored, and transmitted for the needs of higher education activities of schools, higher education application offices, state authorities, local community bodies, holders of public authority related to the realization of students' rights under special regulations. In the preparation of statistical analyses, personal data may be used and published in a way that the identity of the student is not discernible.
Records are kept permanently in accordance with special regulations, except for the record of applicants for enrollment, which is kept until enrollment or until the expiry of appeal procedures.
Processing Based on Consent
We will process certain personal data only if you provide your consent. In the event that you grant your consent for a specific purpose, we will, for example:
- inform you of our activities via phone and/or email;
- publish group and/or individual photos/videos of students on our website;
- publish the name and surname of students on the notice board for the purpose of notification;
- publish literary works and other achievements of students along with their name and surname across various media (depending on consent);
- publish student achievements in knowledge competitions, sports, literary, and other contests across various media (depending on consent)...
Providing consent is voluntary. You can withdraw your consent at any time by sending a request to our address. The withdrawal of consent does not affect the legality of processing based on consent before its withdrawal. Personal data processed based on your consent will be kept until the withdrawal of consent or the request for data deletion. Upon receiving a request for withdrawal of consent or a request for deletion, the data will be deleted within a maximum of 30 days. Data processed based on consent may also be deleted before the withdrawal if the purpose of processing personal data has been achieved or if the law requires it.
Video Surveillance
In the organization at the school unit and Hotel Astoria, we implement video surveillance. Using video surveillance (cameras are installed in the vicinity of entrances to the organization), we monitor entries and exits from premises (based on Article 77 of ZVOP-2). Video surveillance is also conducted for the purpose of safeguarding individuals (users, employees, and visitors) and the organization's property (based on legitimate interest, as stipulated in point (f) of paragraph 1 of Article 6 of the General Regulation, in connection with Articles 76 and following of ZVOP-2). Within some workspaces, video surveillance is conducted where it is necessary for the safety of people or property. Video surveillance will assist us in detecting, addressing, or resolving incidental or extraordinary events, criminal acts, compensation claims, or other claims. Recordings are retained for 30 days.
Video surveillance is not conducted in a manner that would have a significant impact on processing. Likewise, video surveillance does not enable unusual further processing, such as transfers to subjects in third countries, the possibility of audio intervention in case of live monitoring. Video surveillance allows monitoring of events in real-time by authorized personnel.
All information regarding video surveillance can be obtained through the organization's phone number or email address. The rights of individuals are described in this Privacy Policy. Additional questions can also be addressed to the Data Protection Officer.
Hotel Reservations
We may process personal data for the conclusion and execution of a contract, specifically for the provision of services, including:
Purpose: ensuring services, including managing hotel reservations and payments.
Sending information in accordance with the accommodation reservation.
Personal data is obtained based on the contract. The school will retain personal data only as long as necessary to achieve the purpose for which the personal data was collected and processed. The personal data processed by the school based on the contractual relationship with the individual will be retained for the period necessary to fulfill the contract and an additional 6 years after its termination, unless there is a dispute between the individual and the school regarding the contract. In such a case, the school retains the data for an additional 10 years after the finality of a judicial decision, arbitration, or judicial settlement, or if no judicial dispute occurred.
Users of Personal Data, Data Transfer, and Automated Decision-Making
Among the users of the data are contractual processors that we hire to perform certain processing of personal data on our behalf. We primarily cooperate with: infrastructure maintainers, information system maintainers, email service providers, software providers, cloud services, etc. (Booking, Vasco, etc.), social network and online advertising providers (Facebook, Instagram). You have the right to request information about which (external) users your and your child's personal data have been disclosed to.
Information on Transfers of Personal Data to Third Countries
We do not transfer personal data to third countries (countries outside the EU and the European Economic Area) and international organizations, except in cases of using social media, where data may be exported to the USA, with contractual relationships with processors from the USA governed by standard contractual clauses adopted by the European Commission and/or binding corporate rules approved by the EU.
We do not engage in automated decision-making or profiling.
What Are Cookies?
This cookie policy explains what cookies are, how we use them, the types of cookies we use, i.e., the information we collect using cookies, how this information is used, and how to manage cookie settings.
Cookies are small text files used to store small amounts of information. When a website is loaded in a browser, they are stored on your device. These cookies help us ensure that the website functions properly, making it more secure, providing a better user experience, understanding how the website works, and analyzing what works and where improvements are needed.
How We Use Cookies?
Like most web services, our website uses its own cookies and third-party cookies for various purposes. Our own cookies are mostly necessary for the proper functioning of the website and do not collect any of your personal data.
The third-party cookies used on our website are mainly aimed at understanding how the website functions, your interaction with our website, ensuring the security of our services, providing ads relevant to you, and generally enhancing your user experience and helping to streamline your future interactions with our website.
Types of Cookies We Use
Necessary
Cookie: cookieyes-consent Duration: 1 year Description: CookieYes sets this cookie to remember user consent settings, so that their choices are taken into account during future visits to this website. It does not collect or store any personal data from website visitors.
Cookie: _GRECAPTCHA Duration: 5 months 27 days Description: This cookie is set by the Google reCAPTCHA service to identify bots to protect the website from malicious spam attacks.
Functional
Cookie: __cf_bm Duration: 30 minutes Description: This cookie, set by Cloudflare, is used to support Cloudflare Bot Management.
Cookie: sc_anonymous_id Duration: never Description: This cookie is set by SoundCloud to enable the SoundCloud player.
Analytics
Cookie: _ga Duration: 2 years Description: The _ga cookie set by Google Analytics calculates visitor data, sessions, and campaign data and tracks the use of the website for analytical reports. It anonymously stores information and assigns a randomly generated number to identify unique visitors.
Cookie: _gid Duration: 1 day Description: The _gid cookie set by Google Analytics stores information about how visitors use the website while creating an analytical report on website performance. Some of the data collected includes the number of visitors, their source, and the pages they visit anonymously.
Cookie: CONSENT Duration: 2 years Description: YouTube sets this cookie through embedded youtube videos and records anonymous statistical data.
Performance
Cookie: _gat Duration: 1 minute Description: This cookie is set by Google Universal Analytics to throttle request rate, limiting the collection of data on high traffic websites.
Advertising
Cookie: _fbp Duration: 3 months Description: This cookie is set by Facebook to deliver advertisements either on Facebook or on a digital platform powered by Facebook advertising, after visiting the website.
Cookie: YSC Duration: session Description: The YSC cookie is set by YouTube and is used to track views of embedded videos on YouTube pages.
Cookie: VISITOR_INFO1_LIVE Duration: 5 months 27 days Description: This cookie is set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface.
Cookie: yt-remote-device-id Duration: never Description: YouTube sets this cookie to store user video settings when using embedded YouTube video.
Cookie: yt-remote-connected-devices Duration: never Description: YouTube sets this cookie to store user video settings when using embedded YouTube video.
Manage Your Cookie Settings
You can change your cookie settings at any time by clicking the button above. This will allow you to revisit the cookie consent banner and modify your settings or immediately withdraw your consent.
Additionally, different browsers offer various methods for blocking and deleting cookies used by websites. You can change your browser settings to block/delete cookies. Below are links to support documents on how to manage and delete cookies from major web browsers.
Chrome: https://support.google.com/accounts/answer/32050
Safari: https://support.apple.com/en-in/guide/safari/sfri11471/mac
Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox?redirectslug=delete-cookies-remove-info-websites-stored&redirectlocale=en-US
Internet Explorer: https://support.microsoft.com/en-us/topic/how-to-delete-cookie-files-in-internet-explorer-bca9446f-d873-78de-77ba-d42645fa52fc
If you are using any other web browser, please visit the official support documents for your browser.
Rights of Individuals Regarding the Processing of Their Personal Data
An individual to whom personal data relates has the right to request access to personal data and the rectification or deletion of personal data or restriction of processing concerning them, as well as the right to object to processing and the right to data portability. An individual's request will be handled in accordance with the provisions of the General Regulation.
All the stated rights and any questions can be asserted through a request sent to our address. We will respond to your request without undue delay, at the latest within one month of receiving the request. This period may be extended by up to two additional months, taking into account the complexity and number of requests. You will be informed of this along with the reasons for the delay. Exercising your rights is free of charge; however, we may charge a reasonable fee if the request is clearly unfounded or excessive, particularly if it is repetitive. In such a case, we may also refuse the request. In this case, we will inform you of the reasons for the refusal and your right to lodge a complaint with the supervisory authority. In case of doubt about your identity, we may request additional information we need to ascertain your identity.
You have the right to lodge a complaint with the supervisory authority at: Information Commissioner of the Republic of Slovenia at Dunajska 22, 1000 Ljubljana (email: gp.ip@ip-rs.si, website: www.ip-rs.si).
This privacy policy is effective from September 21, 2023.