Privacy Policy

Version 2, effective 22 August 2026. This replaces the policy in force since 25 May 2018.

1. Who we are

Proteus d.o.o., Slomškova ul. 17, 1000 Ljubljana, Slovenia, trading as Slovenia Explorer and Gray Line Slovenia, is the controller of the personal data described in this policy. That means we decide what data is collected and why.

You can reach us about anything in this policy at info@slovenia-explorer.com or +386 40 555 656.

2. What this policy covers

It covers everyone who interacts with us: visitors to our website, people who send us an inquiry, guests who book a tour, people travelling on a booking someone else made.

3. What we collect

When you visit our website. Your IP address, browser and device type, the pages you look at and how you arrived, collected through cookies and similar technology. See section 9.

When you make an inquiry. Your name, email address, telephone number, the country you are travelling from, your travel dates and what you tell us about the trip you want.

When you book. Everything above, plus the names of everyone travelling, billing details, payment confirmation, and anything else the tour needs that you give us when we ask, for example your arrival details for a transfer or your room preference. We do not ask for passport or identity document details. Hotels collect those from you directly at check-in, as Slovenian law requires them to.

What you tell us about your needs. Dietary requirements, allergies, reduced mobility, and any medical condition you tell us about so we can run the tour safely. See section 5, because this information is treated differently.

When you travel with us. Photographs and video taken on tour, where you have not asked us not to. Any feedback or review you give us.

When someone books for you. If another person books your place, they give us your name and the details we need for your travel arrangements. We rely on them having your agreement to do so. Contact us if you want to know what we hold about you.

4. Why we use it, and our legal basis

To arrange and deliver your booking. Confirming your reservation, booking hotels, guides and activities, issuing vouchers, answering your questions before and during the tour, handling changes and cancellations. Legal basis: performance of our contract with you.

To take payment and keep our books. Processing card payments and transfers, issuing invoices, and keeping the accounting records we are required to keep. Legal basis: performance of the contract, and our legal obligations under Slovenian tax and accounting law.

To keep our services safe and to prevent fraud. Investigating suspected fraudulent bookings or chargebacks, and, where necessary, reporting to the authorities. Legal basis: our legitimate interest in protecting the business, balanced against your rights.

To send you our newsletter and offers. Only if you have asked for it. Legal basis: your consent, which you can withdraw at any time using the unsubscribe link in any email or by writing to us.

To understand how our website is used. Statistics on visits and pages, so we can improve the site. Legal basis: your consent, given through the cookie banner. See section 9.

To defend legal claims. Keeping records of what was agreed and what happened, where there is a complaint or a dispute. Legal basis: our legitimate interest in establishing or defending claims.

5. Health, dietary and mobility information

Information about your health, a disability or reduced mobility is a special category of personal data, and information about dietary requirements can reveal beliefs. We only collect it because you have chosen to tell us, and we use it for one purpose: to arrange your tour safely and suitably, which includes passing what is necessary to the hotel, restaurant or activity provider concerned.

We rely on your explicit consent to do this. You can withdraw that consent at any time, though we may then not be able to run the arrangements that depend on it. We do not keep this information any longer than the tour and the period in which a claim could be brought.

6. Who we share it with

We share only what each recipient needs, and only for the purposes in section 4.

• The suppliers on your itinerary: hotels, guesthouses and tourist farms, guides, restaurants, transport operators and activity providers. They receive your name, the dates, and any dietary or mobility information relevant to what they provide.
• Our payment provider, Stripe, which processes card payments. We do not see or store your full card number.
• The service providers that run our systems: our website host, our email and document services, our booking and proposal software, and our booking widget provider.
• Our accountant and, where necessary, our lawyer and insurer.
• Public authorities, where the law requires it.

We do not sell your personal data, and we do not share it with anyone for their own marketing.

7. Transfers outside the EEA

Your booking is arranged in Slovenia and your data stays within the European Economic Area, with one exception: some of the software we use to run the business is provided by companies based in the United States. Where data reaches them, the transfer is covered by the safeguards the law requires, which in practice means an adequacy decision for the country concerned or the European Commission's standard contractual clauses. Write to us if you would like details.

8. How long we keep it

• Inquiries that do not become bookings: two years from your last contact with us, so we can pick up the conversation if you come back.
• Booking and tour records: for the period in which a claim could be brought, which is generally up to five years from the end of the tour.
• Invoices and accounting records: ten years, as VAT law requires.
• Health, dietary and mobility information: deleted once the tour is finished and the claims period has passed.
• Website analytics: as set out in section 9.

9. Cookies and analytics

Our website uses cookies. Some are necessary to make the site work, for example keeping your session secure. Others measure how the site is used, through Google Analytics, or measure our advertising.

Strictly necessary cookies are always set. Analytics cookies are set from your first visit, and you can switch them off in the cookie banner or its settings panel at any time. Advertising cookies are not set unless you accept them.

The full list of cookies, what each one does and how long it lasts, is in our cookie policy at https://www.slovenia-explorer.com/terms-of-business/cookies

10. Your rights

You have the right to:

• ask what we hold about you and get a copy;
• have it corrected if it is wrong;
• have it deleted, where we no longer need it and no law requires us to keep it;
• restrict or object to how we use it, including objecting at any time to direct marketing;
• receive it in a portable format, or have us send it to another provider, where the processing is based on your consent or on a contract and is carried out automatically;
• withdraw your consent at any time, where we rely on consent. That does not affect anything we did before you withdrew it.

Write to info@slovenia-explorer.com. We will reply within one month. If your request is complex we may extend that by up to two further months, and we will tell you if we do.

11. Complaints

If you are unhappy with how we handle your data, tell us first at info@slovenia-explorer.com or by post to Proteus d.o.o., Slomškova ul. 17, 1000 Ljubljana, and we will respond within five working days.

You can also complain to the Slovenian data protection authority at any time:

Informacijski pooblaščenec, Dunajska cesta 22, 1000 Ljubljana gp.ip@ip-rs.si, +386 1 230 97 30

If you live in another EU country, you may complain to the supervisory authority there instead.

12. Changes to this policy

We may update this policy. If the change is significant we will publish the new version on our website 30 days before it takes effect. The version and effective date are at the top of this page.

13. Contact

Proteus d.o.o., Slomškova ul. 17, 1000 Ljubljana, Slovenia info@slovenia-explorer.com +386 40 555 656