This notice covers sloveniastays.eu and the enquiries and bookings we handle through this website.
Updated 1 October 2026
SloveniaStays, established in Slovenia, is responsible for personal data processing for this website and its booking administration. For privacy questions and requests, contact: hello@sloveniastays.eu.
Bookings, payments and contact
When you book, we process your name, email address, phone number, chosen home, arrival and departure dates, guest count, any pet selection and notes. We also keep booking references, amounts, payment status and messages about your stay. We need these details to respond to your request, arrange the booking and communicate with you: steps before entering a contract and performance of that contract.
You can contact us by email, phone or WhatsApp. We use the information in your message to answer your enquiry. Notes are optional: do not send passport copies, payment card details or sensitive information that is unnecessary for your request. Without the required contact and booking details, we cannot process your reservation.
Payments use Stripe Checkout, where you enter your payment details. Our website stores payment references, amounts and payment status, not full payment card numbers or security codes. Stripe may also have its own legal duties when processing payment information.
Owners and service providers
We share information needed for the booking and arrival with the owner or manager of your chosen home. They may have their own duties, such as guest registration. Information they collect directly for those purposes is also covered by their own privacy information.
We use Vercel for hosting, Supabase for our database and storage, Microsoft for email, Stripe for payments and Cloudflare Turnstile for abuse protection. Google Analytics receives measurement data only if you allow analytics. If you use WhatsApp, WhatsApp/Meta also processes information under its own terms. Booking emails and internal copies may form part of our correspondence and administration.
We process owners’ and managers’ contact details to manage listings, availability and reservations. We may disclose information where a legal obligation requires it.
Security and administration
Hosting and security services process technical information about visits, such as IP address, browser information, timestamps and request details. Cloudflare Turnstile checks technical signals to prevent automated abuse. The website also uses technical logs and derived identifiers for request limits.
Our legal basis is our legitimate interest in keeping the website, payments and reservations safe and reliable and preventing fraud. A legal obligation applies to information we must retain for accounting or tax purposes. You may object to processing based on legitimate interests.
Reviews
Submitting a review is optional. We process the submitted name, scores, text, date and booking link to check the review and associate it with the correct home. The submitted name, scores, text and date may be published after moderation. The email address associated with your booking is not published with the review.
Sharing experiences of the homes we offer is our legitimate interest. Do not include other people’s private information in your review. You can ask our privacy contact to correct or remove it. Older reviews may be identified as imported from Slovenia Vacation.
Cookies, browser storage and analytics
The website saves your cookie choice in your browser. Browser storage also helps recover a recent booking when paying and prevents duplicate purchase measurement. These local records remain until overwritten or until you clear the website’s browser data. Administration features may also use necessary session information.
Google Analytics loads only after you allow analytics. We then measure visited pages, interest in homes, search and booking steps and confirmed purchases, including a technical transaction reference and amount. Google also processes browser, device and usage information. Our own measurement code does not send entered names, email addresses, phone numbers or free-text notes and removes access tokens from measured payment and review URLs.
Google Analytics uses cookies including _ga and _ga_… to distinguish visitors and sessions. The default cookie lifetime is up to two years; browsers may shorten it. Retention of measurement data at Google also depends on Analytics settings and report type. Cookie lifetime and report-data retention are different.
You can reject analytics or withdraw consent later using Cookie settings in the footer. Withdrawal stops further measurement through our code and removes accessible Google Analytics cookies on this domain. It does not automatically erase data lawfully collected earlier. You can book without analytics.
How long we keep information
For bookings and payments, retention is determined by completion of the stay, outstanding payments, applicable accounting and tax duties, and any complaints or legal claims. Expiry of a payment or booking link does not mean the administrative booking record is immediately deleted.
We keep correspondence while needed to resolve your enquiry and handle follow-up questions or disputes. Reviews may remain visible while relevant to the listing. Technical logs, backups and analytics also have storage settings with the relevant provider. Contact us to find out what is still held in your case or to request deletion.
Providers outside the EEA
Some providers operate internationally, so information may be processed outside the European Economic Area. A European server location alone does not rule out access or processing elsewhere. Transfers outside the EEA require appropriate safeguards, such as an applicable adequacy decision or standard contractual clauses. Ask our privacy contact for information about the recipients, countries and safeguards involved.
Your rights and questions
You may request access, correction, deletion, restriction or portability of your personal data where the GDPR provides that right in your circumstances. You may object to processing based on legitimate interests and withdraw analytics consent at any time. Withdrawal does not affect the lawfulness of earlier processing.
Email us with a clear description of your request. We may ask for additional information to verify your identity, but do not send identity documents without being asked. We normally respond within one month and will let you know if a lawful extension is needed. You may also complain to the supervisory authority where you live, work or where a possible infringement occurred.
The website automatically calculates prices and availability and performs security checks. Contact us if you have questions about an outcome. We update this notice when the website or our processing changes.