Privacy Policy

This Privacy Policy explains how Heritage Trails processes personal data in connection with its website, inquiries, bookings, and guided culinary and market tours. It applies to visitors, prospective customers, and guests who contact us or use our services.

Effective Date As stated in policy
Scope All users of our services
Questions Contact

How We Use Data

We use personal data to respond to inquiries, manage date and group requests, confirm guide language and route details, collect and verify dietary information, arrange venue availability, process booking payments, provide meeting-point information, deliver guided tasting walks, and send practical service communications. We also use limited data to maintain records, improve website reliability, and meet legal, accounting, and security obligations.

We process data only for operational, contractual, and legal purposes.

Service Providers and Partners

We may share personal data with service providers that support website hosting, communications, booking administration, payment processing, and related operational tasks. Where a private culinary route involves venue coordination, limited information may be shared with relevant partners to confirm availability, route details, or dietary preferences you have provided. These recipients are expected to use the data only for the agreed purpose and to protect it appropriately.

Service providers receive only the data needed for their role.
User Rights

Your Rights

Subject to applicable law, you may request access to your data, correction of inaccurate information, deletion where appropriate, restriction of processing, objection to certain processing, and portability where the conditions are met. If you believe information we hold is incomplete or incorrect, you may ask us to review it.

Available rights may vary depending on the legal basis for processing.
Requests

How to Make a Request

To exercise a privacy right, please send a clear request using the contact details in this policy and describe the data or processing concern. We may need to verify your identity and request additional information to locate the relevant records. If we cannot act on a request in full, we will explain the reason to the extent required by law.

Requests are handled through a verification process before disclosure or correction.
Data Retention

Data Retention

We keep personal data only for as long as needed for the purpose for which it was collected, including booking administration, customer communication, accounting, dispute handling, and legal compliance. When data is no longer needed, we delete it or anonymize it, unless a longer retention period is required by law or necessary to establish, exercise, or defend legal claims.

Retention depends on the purpose, legal duty, and need to keep records.
Policy Updates

Policy Updates

If we make material changes to this Privacy Policy, we will revise the posted version and, where appropriate, provide additional notice through the website or direct communication. The updated version applies from its stated effective date.

We keep the policy under review and update it when our processing changes.
01

Data We Collect

We may process identification and contact details, booking and payment information, group size and date requests, dietary information you choose to provide, communication records, and limited technical data such as device and usage information. Where needed for a private culinary route or guided tasting walk, we also process route preferences, meeting-point details, and language preferences.

The categories collected depend on booking, inquiry, and tour participation.
02

How We Collect Data

We receive personal data from website forms, email, telephone, and other direct communications. We also obtain data from booking and payment interactions, and we may generate internal records from your requests, confirmations, attendance, and service delivery. Technical data may be collected automatically when you use the website.

Most data comes directly from you during planning or booking.
03

Cookie Types

Cookies may be necessary for the website to function, help remember preferences, or support basic analytics and performance measurement. Some cookies are session-based and expire when you close the browser, while others remain for a limited period to recognize returning visitors or preserve settings. We do not use cookies to collect more data than is needed for these purposes.

We use only standard cookie categories for operation and measurement.
04

Cookie Controls

You can manage or block cookies through your browser settings. If our website provides a cookie preference tool, you may use it to change non-essential cookie choices. Disabling some cookies may affect site functionality, form handling, or analytics that help us understand basic website performance.

Cookie settings can be adjusted in the browser and, where available, through site controls.

Contact Details

Privacy email
Privacy phone
+386 31 055 484
Postal address
Slovenska cesta 28, 4207 Cerklje na Gorenjskem
Privacy contact

Use the contact details below for privacy questions, requests, or complaints.

GDPR
Regulation

GDPR Overview

Where the GDPR applies, Heritage Trails acts as a controller for the personal data processed through the website and during booking administration. We rely on lawful bases such as performance of a contract, steps taken at your request before a booking, compliance with legal obligations, and our legitimate interests in operating and improving the service.

Regulatory context
If you are in the European Economic Area, the GDPR may apply to our processing of your personal data.
This section is intended for individuals protected by the GDPR.
GDPR-aware data handling

GDPR Rights

Where the GDPR applies, you may have rights to access, rectify, erase, restrict, object to processing, and receive portability in appropriate cases. If processing is based on consent, you may withdraw it for future processing. You may also lodge a complaint with the competent supervisory authority, subject to the rules that apply in your location.

GDPR rights are assessed against the legal basis and the context of the request.