Data protection

Privacy notice

This notice explains what personal data we collect through this site, why, how long we keep it and what rights you have. It follows the General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).

Controller
  • COLNAR VINA, trgovina in storitve d.o.o.
  • Lešnica 8, 8222 Otočec, Slovenia
  • Email: info@colnar.si
  • Phone: +386 31 288 724
Tasting bookings

When you send a booking we receive your name, email address, phone number, preferred date and time, number of guests, the tasting and extras you chose, and your note if you write one. We send an automatic confirmation of receipt to the email address you give.

We use these details to arrange and hold the tasting: to confirm the date, tell you about any change and prepare for your visit. The legal basis is entering into and performing a contract (Article 6(1)(b) GDPR).

If your note mentions allergies or other dietary restrictions, that is health data. Giving it is voluntary; by giving it you consent to our using it only to prepare your tasting and board (Article 9(2)(a) GDPR). You can withdraw that consent at any time.

We keep bookings, note included, for one year after the date of the tasting and then delete them.

Email and phone

When you write or call, we use your details and your message to reply. The legal basis is our legitimate interest in answering you (Article 6(1)(f) GDPR), or preparing a contract when it is a booking. We keep messages for as long as we need them to deal with your enquiry.

Visiting this site

We do not use this site for analytics, advertising or tracking, and it carries no social media plugins. Our hosting provider automatically logs technical data with each visit — IP address, time, page visited and browser type — which is needed to run and secure the site. The legal basis is legitimate interest (Article 6(1)(f) GDPR).

What the site stores in your browser is described on the Cookies page.

Who receives your data

We do not sell your data or pass it on for advertising. Only the processors who help us run the site have access to it, under a data processing agreement:

  • Netlify, Inc. (USA) — hosts the site and receives bookings. Netlify participates in the EU-U.S. Data Privacy Framework, so the transfer to the USA rests on the European Commission’s adequacy decision.
  • NEOSERV d.o.o. (Slovenia) — hosts the info@colnar.si mailbox, through which we receive bookings and write to you.

We pass data to public authorities only when the law requires it.

Your rights

You can ask at any time for:

  • access to the data we hold about you,
  • correction of inaccurate data,
  • erasure of your data,
  • restriction of processing,
  • transfer of your data to another controller,
  • objection to processing based on legitimate interest,
  • withdrawal of consent, without affecting processing before the withdrawal.

Send your request to info@colnar.si or by post to our address. We reply within one month at the latest.

If you believe we process your data unlawfully, you can complain to the Slovenian Information Commissioner (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, https://www.ip-rs.si.

Changes

We update this notice when the way we process data changes. The version published on this page applies.

In force from 3 November 2026. This is a translation. The Slovenian version is the binding one.