Vaultsparadefed Travel Media d.o.o. ("Vaultsparadefed", "we", "our", or "us") operates the website vaultsparadefed.boats. We are committed to safeguarding personal data and respecting user privacy in strict adherence to the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and applicable data protection legislation in the Republic of Slovenia.

1. Data Controller Identification

The entity responsible as the data controller for the processing of your personal information collected via this website is:

Vaultsparadefed Travel Media d.o.o.
Registration Number: SI-84920184
Registered Address: Mestni trg 18, 1000 Ljubljana, Slovenia
Designated Data Protection Contact: [email protected]

2. Personal Data We Collect and Methods of Acquisition

We restrict data collection to strictly necessary categories required to deliver informative travel guides, respond to inquiries, and ensure digital infrastructure security:

  • Directly Provided Inquiries: When you submit our contact form, we collect your full name, email address, topic category, and message text. Processing this data is grounded in Article 6(1)(b) of the GDPR (taking steps at the request of the data subject prior to entering into a contract or answering a voluntary communication).
  • Technical and Server Log Data: When loading our web pages, our web server temporarily records your IP address, browser user-agent header, date and time of access, HTTP status code, and referring URL. This processing is based on our legitimate interest under Article 6(1)(f) of the GDPR in diagnosing server anomalies, repelling malicious distributed denial-of-service attempts, and preserving server stability.
  • Cookie and Local Storage Values: We store your consent choices (acceptance or refusal of non-essential cookies) locally in your browser storage. Detailed disclosures regarding cookie lifespans and functions are outlined in our Cookie Policy.

3. Purpose and Legal Grounds for Data Processing

We process personal data under the following legitimate European Union legal grounds:

  1. Consent (Art. 6(1)(a) GDPR): For any non-essential analytics tracking or voluntary reader subscription you proactively authorize. Consent may be revoked at any moment via your browser preferences or cookie banner interface.
  2. Performance of Legitimate Interests (Art. 6(1)(f) GDPR): Ensuring website integrity, preventing fraudulent submissions, and optimizing article readability across diverse viewports without fingerprinting individual travelers.
  3. Compliance with Legal Obligations (Art. 6(1)(c) GDPR): Maintaining business records, corporate communications, and answering lawful orders issued by Slovenian administrative or judicial authorities.

4. Third-Party Data Processors and Cross-Border Transfers

Vaultsparadefed does not sell, rent, or trade personal data to commercial advertisers or data brokers. Data transfers occur strictly with verified infrastructure processors operating within the European Economic Area (EEA) or under recognized adequacy mechanisms:

  • Server Infrastructure Hosts: Cloud and static hosting partners located within the EU that supply physical servers, firewalls, and network routing.
  • Email Transit Gateways: Encrypted mail transfer agents handling dispatches submitted via our contact portal.

In any circumstance where data might be routed outside the EEA, we ensure standard contractual clauses (SCCs) approved by the European Commission are executed to preserve European standards of personal data safety.

5. Data Retention Periods

We adhere to strict data minimization timelines. Personal data is retained only for the duration necessary to satisfy the specific purpose for which it was originally compiled:

  • General Inquiries: Contact correspondence is deleted or anonymized within twelve (12) months following the resolution of your inquiry, unless continuing legal or contractual obligations require extended archiving.
  • Server Logs: Raw IP records are cycled and purged automatically on a rolling fourteen (14) day retention schedule.
  • Cookie Choices: Your local storage cookie selection is preserved for 365 days or until manually cleared in your browser settings.

6. Your Statutory Rights under GDPR and CCPA

Under Chapter III of the GDPR and analogous consumer privacy provisions such as the California Consumer Privacy Act (CCPA), you possess enforceable legal rights regarding your personal information:

  • Right of Access (Art. 15 GDPR): The right to obtain confirmation as to whether personal data concerning you is being processed and receive a copy of that data.
  • Right to Rectification (Art. 16 GDPR): The right to demand correction of inaccurate or incomplete personal records.
  • Right to Erasure / "Right to Be Forgotten" (Art. 17 GDPR): The right to request permanent deletion of your personal data where retention grounds no longer exist.
  • Right to Restriction of Processing (Art. 18 GDPR): The right to restrict data processing under specific dispute circumstances.
  • Right to Data Portability (Art. 20 GDPR): The right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object (Art. 21 GDPR): The right to object at any time to processing based on legitimate interests.

To exercise any of these statutory entitlements, please dispatch a written request to [email protected]. We will respond within thirty (30) calendar days without charge.

7. Right to Lodge a Complaint

If you consider that our processing of your personal data infringes applicable data protection statutes, you retain the right to lodge a formal complaint with the competent supervisory authority. In the Republic of Slovenia, the regulatory authority is:

Informacijski pooblaščenec (Information Commissioner of the Republic of Slovenia)
Dunajska cesta 22, 1000 Ljubljana, Slovenia
Website: ip-rs.si