Privacy Policy - Casa de Papel

We are committed to protecting your privacy.

This privacy policy applies to the website https://www.casadepapel.si/. It defines the principles of processing and storing personal data provided by users in connection with their use of the services offered by it.

Casa de Papel d.o.o.

Personal data controller

The controller of personal data obtained on this website is the company

Casa de Papel d.o.o., Beloruska ulica 7, 2000 Maribor

We are committed to respecting your privacy and processing your personal data securely and in accordance with the legislation governing the protection of personal data (Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act – ZVOP-1). We use the data obtained exclusively for purposes related to our business.

Personal data processor

We work with external service providers who act as our personal data processors. They process data on our behalf for the purpose of obtaining reservations, providing analytical and marketing services, improving the service and user experience, etc.

Hotelinco reservation system:

We use the Hotelico reservation system of MAIS d.d., Leskoškova cesta 10, 1000 Ljubljana to capture and process direct online reservations for stays in our accommodation. MAIS d.d.. participates in the EU and the Union and confirms its compliance with them. Privacy Shield Framework Directive. More about the privacy policy of MAIS d.d. here.

How do we collect your personal data?

We treat your information with the highest possible level of care. All personal information we collect from website users is private and confidential.

We collect personal data in the reservation form, where the user enters all personal data that is important for the reservation and performance of the requested service.

In addition, we collect personal data that the user provides when filling out the newsletter registration form.

In addition to the personal data you provide through the methods listed above, this website uses technology that collects certain technical data, such as the user’s IP address. The user’s IP address is recorded when subscribing to the newsletter (and serves only as proof that the user has subscribed to the newsletter).

In all other cases, we do not associate IP addresses with individuals and each user of the website is anonymous. We use cookies and similar technologies to collect anonymous information about your use of our website. More information about how we use these technologies to collect information about you can be found in our Cookie Policy.

What personal data is collected?

We collect the following in the booking form:

User’s name, surname, phone number, email address and country;

User’s company information (if the reservation is made for a company); Credit card information (credit card type, cardholder name, credit card number, expiration date); Information about the guest’s stay, including arrival and departure dates, type of service, selection of special offer, special requests and wishes;

We offer you the option to subscribe to our promotional e-newsletter by checking the empty checkbox.

In the newsletter registration form, we collect the user’s first name, last name, email address, selected language, date and time of registration, and IP address.

When inquiring about an event, we collect all information related to the event (contact information such as first name, last name, email, company name and address, event start and end times, event duration, number of participants, any accommodation needs and services requested).

When checking into the hotel at the reception, we collect the guest’s first and last name, country, date of birth, type of ID document, and personal identification number.

For what purpose is personal data used?

All data collected in the booking form is used to process your booking and to communicate with you in relation to the provision of our services; This includes transactional emails to carry out the business agreement concluded with the submitted booking by us and the recipients of our services (guests).

The email address obtained via the newsletter subscription form or by ticking the empty newsletter subscription checkbox in the booking form is used to send promotional material about our offer via the Sendpulse email marketing system. Information about the name and selected language obtained in the same form is used to customize the user experience of receiving the newsletter.

Information obtained through the event inquiry form is used to prepare quotes for events, meetings or conferences at our hotel.

We collect personal data that we obtain when you check into a hotel at the reception desk to ensure that we meet our legal obligations.

Basis for processing personal data

Booking form: Fulfilling the operator’s legal obligations

Request for quotation: Fulfillment of the operator’s contractual obligations

Check-in at the reception: Fulfillment of the operator’s contractual obligations, Fulfillment of the operator’s legal obligations

Personal data retention period

We may retain personal data for as long as necessary to fulfill the purposes for which it was collected, or until the individual withdraws consent. Upon written withdrawal of consent, the data will be deleted.

Ihr Recht

You can revoke your consent at any time, request access, correction, restriction of processing of personal data, deletion of personal data or a complaint regarding the processing of your data by notifying us in writing by post to the address Casa de Papel d.o.o., Beloruska ulica 7, 2000 Maribor or by sending us an e-mail to info@casadepapel.si.

If our treatment does not meet your expectations, you have the right to file any claim or complaint with the competent supervisory authority, i.e. the Information Commissioner of the Republic of Slovenia.

Our contact

The controller of your personal data is

Casa de Papel d.o.o., Beloruska ulica 7, 2000 Maribor

If you have any questions about how we process your personal data, or if you would like to exercise any of the rights provided for in this Privacy Policy, please contact us at info@casadepapel.si.

Validity

This privacy policy is effective as of August 21, 2026. The document is subject to change without notice.