Privacy Policy
Last updated: May 24, 2026
This Privacy Policy explains how 2Alfa d.o.o. (“we”, “us”, “our”) collects, uses, and protects personal data when you use the website alpskaastra.com and contact us about the holiday apartment Alpska Astra.
1. Data controller
- 2Alfa d.o.o.
- Podbreg 32, 4280 Kranjska Gora, Slovenia
- Davčna številka (VAT): SI37315374
- Matična številka: 8144290000
- Email for privacy inquiries: info@2alfa.org
- Booking contact: info@alpskaastra.com
2. What data we collect
When you send a reservation request through our form, we collect:
- Your name
- Your email address
- Requested arrival and departure dates
- Number of guests
- Any additional message you choose to share
When you visit the website, our hosting provider Cloudflare automatically processes technical information such as:
- IP address
- Browser type and user agent
- Pages visited and timestamps
- Referrer information
This is used for security, abuse prevention, and to make sure the website works correctly. We do not link this with reservation data to identify you.
We do not use analytics, advertising, tracking pixels, or social-media plugins.
3. Purpose and legal basis
| Purpose | Data | Legal basis (GDPR Art. 6) |
|---|---|---|
| Replying to your reservation inquiry | Name, email, dates, guests, message | Steps prior to a contract — Art. 6(1)(b) |
| Confirming and managing your stay | Same as above | Performance of a contract — Art. 6(1)(b) |
| Security and abuse prevention | IP address, technical logs | Legitimate interest — Art. 6(1)(f) |
| Compliance with tax and guest-registration law | Reservation records | Legal obligation — Art. 6(1)(c) |
4. Who has access to your data
Your personal data is accessible to the management of 2Alfa d.o.o. and is processed by the following service providers (“data processors”) under appropriate agreements:
- Cloudflare, Inc. (USA) — website hosting, DNS, security
- Google LLC / Google Ireland Limited — email services through Google Workspace
- Booking Holdings B.V. — only if you book through Booking.com, in which case Booking shares your reservation details with us; we never access your payment data
We do not sell, rent, or share your personal data with anyone for marketing.
5. International data transfers
Some of the providers above process data outside the European Economic Area, including the United States. These transfers are protected by:
- EU Standard Contractual Clauses (SCCs), and/or
- EU–US Data Privacy Framework certification
You may request a copy of the safeguards by contacting us.
6. How long we keep your data
- Reservation inquiries that did not lead to a booking: up to 12 months
- Booking records where a stay took place: up to 10 years, as required by Slovenian tax legislation
- Server logs (Cloudflare): up to 30 days
7. Cookies
The website does not use cookies or similar technologies for tracking or analytics. The only cookies that may be set are strictly necessary security cookies from Cloudflare (e.g. __cf_bm) used to distinguish humans from bots. These are exempt from consent requirements under Article 5(3) of the ePrivacy Directive.
8. Your rights
Under the EU General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2), you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data (“right to be forgotten”), subject to legal retention requirements
- Restrict processing
- Object to processing based on legitimate interest
- Data portability — receive your data in a machine-readable format
- Withdraw consent at any time where consent is the legal basis
- Lodge a complaint with the supervisory authority
To exercise any of these rights, contact us at info@2alfa.org. We respond within one month.
9. Supervisory authority
You have the right to file a complaint with the Slovenian Information Commissioner:
- Informacijski pooblaščenec
- Dunajska cesta 22, 1000 Ljubljana
- Phone: +386 1 230 9730
- Email: gp.ip@ip-rs.si
- Web: ip-rs.si
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top. We encourage you to check this page periodically.