1. PRIVACY POLICY Last updated: 21 August 2026 Privacy Policy At Slovenia Road Trips, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what personal data we collect when you visit our website, contact us, submit a journey request or make a booking, why we process that information, how long we keep it and what rights you have. This Policy applies to the website [WEBSITE DOMAIN] and to personal data processed in connection with our private transfers, day trips, custom routes and multi-day journeys. 1. Who is responsible for your personal data? The data controller is: [FULL LEGAL COMPANY NAME] Trading as: Slovenia Road Trips Registered address: [REGISTERED ADDRESS] Company registration number: [REGISTRATION NUMBER] VAT number: [VAT NUMBER, IF APPLICABLE] Email: [PRIVACY/CONTACT EMAIL] Telephone: [PHONE NUMBER] For questions concerning this Privacy Policy or the processing of your personal data, please contact us using the details above. 2. What personal data do we collect? Depending on how you interact with us, we may collect: Contact information, including your name, email address and telephone number. Booking and journey information, including travel dates, pickup and drop-off locations, requested destinations, number of passengers, journey type and any information you voluntarily provide about your travel plans. Communication data, including messages sent through our website, email, telephone, WhatsApp, Viber or other communication channels. Payment and transaction information, such as payment status, amount, invoice information and transaction references. Where payment is processed by an external payment provider, we do not necessarily receive or store your full payment-card details. Passenger-related information, where necessary for providing a requested service, such as information about children requiring an appropriate child seat, mobility requirements or luggage requirements. Please avoid providing sensitive personal information unless it is genuinely necessary for us to safely provide the requested service. Technical and website information may include browser type, device type, approximate location, referring website, pages visited and technical information required for website security and operation. 3. Why do we process your data? We process personal data only when we have an appropriate legal basis. When you contact us about a journey or request a quotation, we process your information in order to take steps at your request before entering into a contract. When you make a booking, we process the information necessary to confirm, manage and provide the contracted service. We may process certain information where necessary to comply with legal, accounting, tax or regulatory obligations. We may process limited information where necessary for legitimate business interests, such as protecting our website, preventing misuse, improving our services, responding to customer enquiries and establishing or defending legal claims, provided those interests do not override your rights and freedoms. Where processing relies on your consent—for example, certain marketing communications or non-essential tracking technologies—you may withdraw that consent at any time. These legal bases reflect Article 6 GDPR. 4. How we use your information We may use your personal information to: respond to enquiries and prepare quotations; check availability; plan requested routes and journeys; confirm and manage reservations; communicate changes relating to your journey; provide private transfer and driver services; issue invoices and maintain required business records; respond to complaints or customer-service requests; protect the security and integrity of our website; comply with legal obligations; send marketing communications where we have a lawful basis to do so. We do not sell your personal information. 5. Who may receive your personal data? We disclose personal information only where reasonably necessary. Recipients may include: Website and hosting providers. Our website is currently built and hosted using Framer. Framer may act as a processor when processing personal data on our behalf and provides a GDPR data-processing framework. Email and communications providers used to receive and respond to customer enquiries. Payment providers, where online or electronic payments are used. Accounting, legal and professional advisers where necessary. Drivers or transport partners, where another appropriately authorised provider is required to fulfil a confirmed service. Third-party attraction or service providers, but only where necessary and where you have requested that we assist with the relevant arrangement. Public authorities, where disclosure is required by law. Our service providers may process personal information only for legitimate purposes connected with the services they provide to us. 6. International data transfers Some technology providers may process information outside Slovenia or the European Economic Area. Where GDPR applies and personal data is transferred to a country outside the EEA, we use or rely upon a legally recognised transfer mechanism where required, such as an adequacy decision or approved Standard Contractual Clauses. Framer states that restricted international transfers are supported by applicable adequacy mechanisms, the EU-US Data Privacy Framework where relevant, or Standard Contractual Clauses. 7. How long do we keep your information? We retain personal data only for as long as reasonably necessary for the purpose for which it was collected. As a general policy: Unsuccessful enquiries may be retained for up to 24 months so that we can respond to follow-up questions and understand previous communication. Booking, invoice and transaction records are retained for the period required by applicable accounting, tax and other legal obligations. Customer communications connected to a booking may be retained for as long as reasonably necessary to manage the contractual relationship, complaints or legal claims. Marketing data based on consent is retained until you withdraw your consent or we determine that it is no longer appropriate to retain it. Where information is no longer required, we delete or anonymise it where reasonably practicable. 8. Website forms When you submit our Plan Your Journey or contact form, we may collect information such as your: name, email address, telephone number, number of guests, preferred travel date, pickup location, requested journey type and message. We use this information to respond to your enquiry, check availability and, where requested, prepare a quotation or booking. Submitting an enquiry does not by itself constitute a confirmed booking. 9. Analytics We may use website analytics to understand general website performance. Framer's current built-in Analytics service is designed to operate without cookies or persistent visitor identifiers. Framer states that its built-in analytics does not rely on cookies. If we later introduce third-party analytics or advertising technologies such as Google Analytics, Google Ads or Meta Pixel, this Privacy Policy and our Cookie Policy will be updated and any consent required under applicable law will be obtained before such technologies are activated. 10. Your privacy rights Subject to the conditions and exceptions set out in applicable law, you may have the right to: request information about how your data is processed; access your personal data; correct inaccurate information; request deletion; restrict processing; receive certain information in a portable format; object to certain processing; withdraw consent at any time where processing is based on consent; and lodge a complaint with a data-protection authority. These rights arise under GDPR and are explained by the European Commission and European Data Protection Board. To exercise your rights, contact: [PRIVACY EMAIL] We may request reasonable information to verify your identity before responding. 11. Right to complain If you believe your personal data has been processed unlawfully, you may lodge a complaint with the Slovenian supervisory authority: Information Commissioner of the Republic of Slovenia Dunajska cesta 22 1000 Ljubljana Slovenia The Information Commissioner publishes current contact and complaint information on its official website. We would appreciate the opportunity to address your concern directly first, so you are also welcome to contact us at [PRIVACY EMAIL]. 12. Security We use reasonable technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No online system is completely secure, however, and we cannot guarantee absolute security of information transmitted over the internet. 13. Third-party websites Our website may contain links to third-party websites, including destinations, attractions, social networks, review platforms and other service providers. Those websites operate under their own privacy policies. Slovenia Road Trips is not responsible for their independent processing practices. 14. Children Our services may be used by families, but bookings should be made by an adult. Where information concerning a child is required—for example to arrange an appropriate child restraint—we ask that it is provided by the child's parent, guardian or responsible adult and limited to what is necessary for the service. 15. Changes to this Privacy Policy We may update this Privacy Policy to reflect changes to our services, website technology or legal requirements. The current version will always be published on this page together with its latest revision date. 16. Contact Questions regarding privacy may be sent to: Slovenia Road Trips [LEGAL COMPANY NAME] [ADDRESS] [EMAIL] [PHONE]