Terme Topolšica
We are committed to protecting your privacy
This privacy policy applies to the website https://www.terme-topolsica.si. In it, we define the principles of processing and storing personal data provided by users in connection with their use of the services offered by Terme Topolšica, d.d.
The controller of personal data obtained on this website is the company Terme Topolšica, d.d, Topolšica 77, 3326 Topolšica, VAT ID: SI 22892150.
We are committed to respecting your privacy and processing your personal data securely and in accordance with the legislation governing the protection of personal data (Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act – ZVOP-1). We use the obtained data exclusively for purposes related to our business.
We work with external service providers who act as our personal data processors. They process data on our behalf for the purpose of obtaining reservations, providing analytical and marketing services, improving the service and user experience, etc.
We use the booking engine Booking Engine Cubilis from Stardekk NV. for the capture and processing of direct online reservations for a stay in our accommodation. The company Stardekk NV. participates in and has confirmed its compliance with the EU-U.S Privacy Shield Framework Directive. More about Stardekk’s privacy policy here.
We use Sendpulse software from SendPulse Inc. to process subscriptions to our e-newsletter and send promotional e-newsletters. SendPulse Inc. stores our data in the EU and the US and cooperates with and has confirmed its compliance with the EU GDPR directive. Learn more about Sendpulse’s privacy policy here.
We handle your data with the highest possible degree of care. All personal information we collect from website users is private and confidential.
We collect personal data in the reservation form, where the user enters all personal data relevant to the reservation and our performance of the requested service.
In addition, we collect personal data that the user provides when filling out the e-newsletter registration form.
We physically collect the guest’s personal data upon check-in at the hotel at the reception.
In addition to the personal information you provide through the above methods, this website uses technology that collects certain technical information, such as the user’s IP address. The user’s IP address is recorded when the newsletter subscription is submitted (and only serves as proof that the user has signed up for the newsletter himself).
In all other cases, however, we do not link IPs to individuals and each user of the website is anonymous. We collect anonymous data about your use of our website with the help of cookies and similar technologies. More information about how we use these technologies to collect information about you can be found in the Cookie Policy.
We collect the following in the reservation form:
Name, surname, telephone number, email address and country of the user;
Information about the user’s company (if the reservation is made for a company); Credit card information (credit card type, cardholder name, credit card number, expiration date); Information about the guest’s stay, including the date of arrival and departure, type of service, selection of a special offer, special requests and wishes;
We present an optional option to sign up for our promotional e-news by ticking an empty checkbox.
In the e-newsletter registration form, we collect the user’s first name, last name, email address, selected language, date and time of registration, and IP address.
When inquiring about an event, we collect all information related to the event (contact information such as name, surname, e-mail, name and address of the company, start and end time of the event, duration of the event, number of participants, possible accommodation needs and requested services) .
When checking in to the hotel, we collect the guest’s first and last name, country, date of birth, type of personal document and personal number at the reception.
All information obtained in the reservation form is used to process your reservation and for communication related to the provision of our services; this includes transactional e-mails for the execution of the business agreement entered into with the submitted reservation by us and the recipients of our services (guests).
The e-mail address obtained via the e-newsletter sign-up form or by ticking the empty e-newsletter sign-up checkbox in the booking form is used to send promotional material about our offer through the Sendpulse email marketing system . Information about name and selected language obtained in the same form is used to customize the user experience of receiving e-news.
The information obtained through the event inquiry form is used to prepare offers for events, meetings or conferences at our hotel.
We collect the personal data that we obtain when checking in to the hotel at the reception in order to ensure the fulfillment of our legal obligations.
Reservation form: Fulfilling the operator’s legal obligations
Subscription to e-news: Personal consent
Request for an offer: Fulfillment of contractual obligations of the controller
Registration at the reception desk: Fulfillment of contractual obligations of the manager, Fulfillment of legal obligations of the manager
We may retain personal data for as long as necessary to fulfill the purposes for which it was collected or until the individual withdraws consent. Based on the user’s written withdrawal of consent, the data is deleted.
Information for individuals pursuant to the third paragraph of Article 76 of the Personal Data Protection Act (ZVOP-2, Official Gazette of the Republic of Slovenia, No. 163/2022) regarding the implementation of video surveillance in the areas, premises and facilities of Terme Topolšica, d.d.
1. Controller conducting video surveillance:
• Naravno zdravilišče Topolšica, d.d., short name: Terme Topolšica, d.d.
• Topolšica 77, 3326 Topolšica
• Company ID number: 5259274000
• VAT number: SI22892150
• E-mail: kadri@terme-topolsica.si
• Responsible person of the controller: Božena Herzog, Director
2. Contact for exercising individual rights regarding personal data
Svetlana Jauz, e-mail: kadri@terme-topolsica.si
3. Purpose of video surveillance
Video surveillance is conducted to ensure the safety of people and property within the areas, premises and facilities of Terme Topolšica, d.d., as well as for the control of entry and exit, all in accordance with Article 77(1) and Article 78(1) of the Personal Data Protection Act (ZVOP-2) and point (f) of Article 6(1) of the General Data Protection Regulation (GDPR).
For the safety of employees and guests, and their property, as well as the company’s property, it is necessary to conduct video surveillance in all common areas of the company’s facilities, including all locations where guests and employees may move freely. Due to the large surface area of the facilities, any alternative method of ensuring safety is less effective.
For this purpose, we process the following personal data: video footage (image), location data, date and time of recording.
The controller has assessed that its legitimate interest prevails over the reasonable expectation of privacy of individuals captured on video footage. The controller has determined that a large number of hotel guests and external visitors enter the hotel on a daily basis, while the hotel premises are extensive; therefore, the company can ensure the security of its property and the safety of people only through a video surveillance system. Guests—especially those staying overnight—expect a high level of security. The collective interest of guests in safe accommodation prevails over the potential interest of individuals in privacy. Only common areas accessible to multiple guests, visitors or employees are under video surveillance, whereas private areas such as hotel rooms, toilets, changing rooms, elevators, offices, etc., are excluded.
4. Recipients of video surveillance recordings
Authorised persons within Terme Topolšica, d.d.
5. Storage period of video surveillance recordings
Personal data collected through video surveillance are stored for no longer than 10 days. If the data are required for criminal or other official procedures, they will be stored for the duration of such proceedings. Data will be provided to competent authorities (e.g., police, court) based on a valid order and in accordance with legal obligations.
Additional information:
• No further processing of recordings takes place;
• Recordings are not transferred to third countries;
• No audio is recorded;
• Live monitoring is performed, accessible only to authorised persons;
• No automated decision-making or profiling occurs;
• Audio intervention is not possible.
6. Necessity of providing personal data / consent
Consent is not required due to the legal basis for conducting video surveillance. Individuals may choose not to enter areas where video surveillance is in operation.
7. Rights of individuals regarding video surveillance recordings
An individual recorded on video has the right to:
• access their personal data and to view the relevant footage;
• rectification (blurring – anonymisation), erasure or restriction of processing;
• object to the processing of video recordings (copy of recording).
Requests shall be submitted to kadri@terme-topolsica.si or to the postal address Terme Topolšica d.d., Topolšica 77, 3326 Topolšica.
Terme Topolšica, d.d. will respond within 1 month; in complex cases or high volume of requests, the deadline may be extended by 2 months, with notification of the reasons.
8. Right to lodge a complaint
A complaint regarding personal data processing may be submitted to kadri@terme-topolsica.si or by post to Terme Topolšica d.d., Topolšica 77, 3326 Topolšica.
Individuals also have the right to lodge a complaint with the Information Commissioner:
Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, Tel.: +386 1 230 97 30, E-mail: gp.ip@ip-rs.si, Website: www.ip-rs.si
Topolšica, 25 November 2025
Terme Topolšica, d.d.
Director: Božena Herzog
You can revoke the given consent at any time, request access, correction, restriction of personal data processing, deletion of personal data or a complaint regarding the processing of your data by notifying us in writing by mail to the address Terme Topolšica, d.d, Topolšica 77, 3326 Topolšica, or email us at kadri@terme-topolsica.si.
If our treatment does not meet your expectations, you have the right to file any claim or complaint with the competent supervisory authority, i.e. the Information Commissioner of the Republic of Slovenia.
The manager of your personal data is Terme Topolšica, d.d, Topolšica 77, 3326 Topolšica, VAT ID: SI 22892150.
If you have questions about how we process your personal data, or if you wish to exercise any of the rights provided by this privacy policy, please contact us at kadri@terme-topolsica.si.
The effective date of this privacy policy is 01. February 2025. This document is subject to change without notice.
