Privacy Policy

This policy explains how Grilc Tours d.o.o., operating the Taste & Wonder Slovenia brand, collects and uses personal data.

Last updated: 14 August 2026

1. Data controller

Grilc Tours d.o.o.
Planina 22, 4000 Kranj, Slovenia
Email: info@slovenia-cycling.com

2. Personal data we collect

When you contact us or request a journey, we may collect your name, email address and the information you include in your message, such as travel dates, number of travellers, preferences, dietary requirements and accommodation or activity interests. If a booking is made, we may also collect the identification, contact, payment and travel information necessary to arrange the contracted services.

Our website and hosting provider may also process technical information such as IP address, device and browser information, security logs and cookie identifiers.

3. Why we use your data

to answer inquiries and prepare a personalised offer;
to conclude and perform a travel contract and arrange requested services;
to communicate important information before and during a journey;
to meet accounting, tax and other legal obligations;
to protect the security of our website and establish or defend legal claims.

The legal bases are the steps taken at your request before entering into a contract, performance of a contract, compliance with legal obligations and our legitimate interests in operating and protecting our business. Where consent is legally required, including for non-essential cookies or optional marketing, we rely on your consent, which you may withdraw at any time.

4. Who may receive your data

We share data only when necessary with service providers involved in your journey, such as accommodation providers, restaurants, transport providers, guides and activity partners. Data may also be processed by our website and form provider WordPress.com/Automattic, IT providers, accountants, banks, insurers and competent public authorities where required by law.

Some technology providers may process data outside the European Economic Area. Where this occurs, the provider must rely on a legally recognised transfer mechanism and appropriate safeguards.

5. Retention

Unsuccessful inquiry correspondence is normally retained for up to 24 months so that we can follow up and understand previous requests. Booking, contractual and accounting records are retained for the periods required by applicable law. Data needed for legal claims may be kept until the relevant limitation periods expire. We delete or anonymise information when it is no longer required.

6. Cookies and website services

This website is hosted on WordPress.com and may use cookies or similar technologies needed for security, core functionality and performance. Optional analytics, advertising or other non-essential technologies should be used only where enabled and, when legally required, after your consent. You can manage cookies through the consent controls on the website and your browser settings.

7. Your rights

Subject to the conditions of the GDPR, you may request access to your personal data, correction, deletion, restriction of processing, data portability, or object to processing based on legitimate interests. You may withdraw consent at any time without affecting processing carried out before withdrawal.

Send requests to info@slovenia-cycling.com. We normally respond within one month. You may also lodge a complaint with the Information Commissioner of the Republic of Slovenia at www.ip-rs.si.

8. Children

Our inquiry form is intended for adults. Information about minors required for a family booking must be provided by their parent, guardian or another person legally authorised to do so.

9. Changes to this policy

We may update this policy when our services, website tools or legal obligations change. The current version and its update date will always be published on this page.