Privacy policy

Institute for Sustainable Tourism Factory, Ljubljana,
Rimska cesta 2B, 1000 Ljubljana, Sloveniia

Email for questions related to personal data protection:
info@soca-outdoor.com

The controller processes personal data in accordance with applicable personal data protection legislation and respects your privacy.


LEGAL BASIS

Our activities comply with Regulation (EU) 2016/679 (GDPR) and Slovenian legislation, including ZVOP-2 (Official Gazette of the Republic of Slovenia, No. 163/22) and relevant regulations in the field of electronic communications.

This Privacy Policy may be amended or supplemented at any time without prior notice. By continuing to use the provider’s website after any changes or updates, the individual confirms their agreement with such changes and additions.

By using the website, the user confirms that they accept and agree with the entire content of this Privacy Policy, unless additional forms of consent are required in specific cases.

As we understand that your privacy and your awareness of how your personal data is processed are important, we also invite you to read more about specific aspects of personal data protection in the guidelines of the Information Commissioner, the competent supervisory authority for personal data protection in the Republic of Slovenia.


WHAT PERSONAL DATA WE PROCESS

We may process the following categories of personal data:
identification data (first name, last name),
data you enter into forms (e.g., event registrations, inquiries, newsletter subscriptions),
data related to purchases/registrations and payments,
data on website usage and interactions (e.g., email opens, clicks, content views),
data collected through cookies (see the Cookies section).


SOURCES OF PERSONAL DATA

As a rule, we obtain personal data directly from you when you:
register for an event,
make a purchase
complete a form,
subscribe to newsletters.

In exceptional cases, we may receive data from partners where this is necessary for providing a service and permitted by law or based on your consent.


PURPOSES AND LEGAL BASES FOR PROCESSING

a) Conclusion and performance of a contract (Art. 6(1)(b) GDPR)
For processing your orders, providing services, communicating about the service, customer support, and billing.

b) Compliance with legal obligations (Art. 6(1)(c) GDPR)
For retaining documentation, accounting, and exercising legal claims and obligations.

c) Legitimate Interest (Art. 6(1)(f) GDPR)
For basic website usage analytics (in aggregated form, without profiling individuals), protection of information systems, prevention of misuse, and direct communication with existing customers about similar services (always with the option to object and unsubscribe).

d) Your consent (Art. 6(1)(a) GDPR) – Granular by channel
Based on your separate consent, we may contact you for direct marketing through selected channels (email, SMS, phone calls, post, social networks) and carry out marketing profiling (see below).
Consent is voluntary, not a condition for registration or purchase, and can be withdrawn at any time (via the unsubscribe link in messages or by contacting info@soca-outdoor.com).


DIRECT MARKETING AND PROFILING

If you have given your consent, we may carry out:
Direct marketing: sending news, offers, invitations, and notifications tailored to your interests.
Limited marketing profiling: to provide more relevant messages, we may segment users based on interactions (e.g., email opens, clicks, content views) and basic demographic data, where you have explicitly allowed this.

Right to object: you may object at any time to processing for direct marketing purposes (including profiling). After an objection, we will no longer process your data for these purposes.

Withdrawal of consent: withdrawal does not affect the lawfulness of processing carried out before the withdrawal.


USE OF META (FACEBOOK/INSTAGRAM) CUSTOM AUDIENCES

With your consent, we may use the Meta Custom Audiences service to display targeted advertisements. Your email address is cryptographically hashed before transfer and shared with Meta Platforms solely for the purpose of matching with their users so that you receive more relevant ads.

International data transfers may occur (e.g., to the USA); such transfers are safeguarded using Standard Contractual Clauses (SCCs) and appropriate additional measures. You may withdraw your consent for this purpose at any time by contacting info@soca-outdoor.com.


RECIPIENTS AND DATA PROCESSORS

Your data may be processed by contracted data processors, such as:
accounting and legal service providers,
IT maintenance, analytics, email service, and payment system providers,
advertising platforms (e.g., Meta), strictly within the scope of the given consents/legal bases
event organization partners (e. g. Europe Trail Cup, Julian Alps Trail Run, Kočevsko Outdoor Festival, Ultra Trail Vipava Valley, Archipelago Trail Run) – only where necessary for service delivery or where you have provided specific consent for their marketing.

We have contracts in place with all processors, and they process data strictly in accordance with our instructions. We do not share data with unauthorized third parties.


INTERNATIONAL TRANSFERS

Where personal data is transferred outside the EEA, we ensure appropriate safeguards in accordance with GDPR (SCCs and additional security measures).


DATA RETENTUIN PERIODS

Contractual and statutory data: retained in accordance with legal retention periods (e.g., accounting requirements).
Marketing data (based on consent): retained for up to 24 months from the last interaction (e.g., email open/click) or until consent is withdrawn, whichever occurs first.
After the retention period expires, the data is deleted or anonymized.


COOKIES AND SIMILAR TECHNOLOGIES

We use cookies on our website.

Strictly necessary cookies: required for the operation of the website (set without consent).
Analytics and advertising cookies: set only with your consent via the cookie banner (CMP). You can change your consent at any time in the
[Cookie Settings] (link in the website footer).


DATA SECURITY

We implement organizational and technical measures to protect personal data (e.g., access controls, encryption, backups). In the event of a personal data breach, we act in accordance with GDPR/ZVOP-2, including notifying the competent authority and, where necessary, the affected individuals.


YOUR RIGHTS

You have the right to:
access your data,
rectification,
erasure (“right to be forgotten”),
restriction of processing,

data portability,
withdraw consent (where consent is the legal basis),
object to processing (especially for direct marketing and profiling for that purpose),
lodge a complaint with the Information Commissioner(https://www.ip-rs.si/en/).

Please send requests to info@soca-outdoor.com.We will respond without undue delay and no later than one month. For reliable identification, we may request additional information.


CHANGES TO THE POLICY

VAny changes will be published on this website with the date of the latest update. By continuing to use our services after changes are posted, you confirm that you are aware of and accept them.