PRIVACY POLICY

PRIVACY POLICY

 

This Privacy Policy explains how Seventy Seven d.o.o. collects, uses, stores and protects personal data in connection with the operation of Apartments Seventy Seven, including reservations, guest stays, our website, communications, payments and related services, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Slovenian legislation.

By using our website or services, you confirm that you have read and understood this Privacy Policy.

 

1. Data Controller

Seventy Seven d.o.o.
Borovška cesta 77, 4280 Kranjska Gora, Slovenia
Company ID: 9886931000
VAT ID: SI61778664
Email: apartments.seventy.seven@gmail.com

 

2. Personal Data We Collect

We may collect the following categories of personal data:

 

a) When making an online reservation

  • First and last name
  • Phone number
  • Email address
  • Country of residence
  • Company details (if booking on behalf of a company)
  • Stay details (arrival and departure dates, type of service, special requests)

b) When communicating by email or phone

  • First and last name
  • Email address
  • Phone number

c) During check-in (in person or via secure link)

  • First and last name
  • Country
  • Date of birth
  • Type and number of identification document

d) Payment data

Payments are processed through external payment service providers.
Seventy Seven d.o.o. does not store full credit card numbers.

 

e) CCTV

CCTV operates in designated communal and access areas of the property. CCTV may process images of individuals, together with the date, time and circumstances visible within the monitored area.

Audio is not recorded.

Further information is provided in our CCTV Privacy Notice.

 

3. Purpose of Processing

Your personal data is processed for the following purposes:

  • Processing and confirming reservations
  • Communication regarding your stay
  • Fulfilment of legal obligations (e.g., guest registration)
  • Issuing invoices and accounting
  • Ensuring quality service and business operations
  • Protecting people and property and maintaining the security of the property
  • Monitoring entry to and exit from designated areas of the property
  • Preventing and investigating security incidents
  • Establishing, exercising or defending legal claims

4. Legal Basis for Processing

We process personal data on the basis of:

  • Performance of a contract or taking steps at your request before entering into a contract – Article 6(1)(b) GDPR
  • Compliance with a legal obligation – Article 6(1)(c) GDPR
  • Legitimate interests pursued by Seventy Seven d.o.o. or a third party – Article 6(1)(f) GDPR
  • Your consent, where required – Article 6(1)(a) GDPR

Where processing is based on legitimate interests, we consider the necessity and proportionality of the processing and the rights and interests of the individuals concerned.

 

5. CCTV

CCTV is in operation in designated communal and access areas of Apartments Seventy Seven for purposes including the protection of people and property, security of the premises and monitoring entry to and exit from the property.

CCTV does not cover the interior of apartments, bathrooms, sanitary facilities or other private areas.

CCTV recordings are normally retained for a maximum of 7 days, subject to limited exceptions where longer retention is necessary for a specific security incident, legal claim or lawful request from a competent authority.

For complete information about CCTV processing, retention, remote access and your rights, please see our CCTV Privacy Notice.

 

6. Cookies and Similar Technologies

Our website does not use its own cookies for tracking purposes.

However, third-party plugins or integrated services (such as booking systems, payment providers, or maps) may use cookies or similar technologies in accordance with their own privacy policies.

We recommend reviewing the privacy policies of these third-party providers.

Further information is available in our Cookie Policy.

 

7. Data Retention

Personal data is stored:

  • For as long as necessary to fulfil the purpose for which it was collected
  • In accordance with applicable legal retention periods (e.g., accounting records for at least 10 years)
  • Until consent is withdrawn, where processing is based on consent
  • CCTV recordings are normally retained for a maximum of 7 days, as described in our CCTV Privacy Notice.

After expiry of the retention period, data is securely deleted or anonymised.

 

8. Disclosure of Personal Data

We may share personal data with:

  • Property management agency
  • Accounting and IT service providers
  • Payment service providers
  • Competent public authorities where required by law
  • CCTV technology and service providers, where applicable

All processors are contractually bound to protect personal data.

 

9. Transfers Outside the European Economic Area

Some service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred to a country outside the EEA and an adequate level of data protection has not otherwise been recognised, appropriate safeguards are used where required by GDPR, such as the European Commission’s Standard Contractual Clauses or other legally recognised transfer mechanisms.

Further information relevant specifically to remote CCTV access is provided in our CCTV Privacy Notice.

 

10. Your Rights

You have the right to:

  • Access your data
  • Rectification
  • Erasure
  • Restriction of processing
  • Data portability
  • Object to processing
  • Withdraw consent at any time
  • Lodge a complaint with the Slovenian Information Commissioner

Requests may be sent to: apartments.seventy.seven@gmail.com

 

11. Changes to This Policy

We reserve the right to update this Privacy Policy. The latest version will always be published on the website.

 

Effective date: June 2025

Last updated: September 2026

Seventy Seven d.o.o.