Privacy Statement
Ski School and Rental Shop Cerkno – Online Course Registration and Equipment Rental Reservation
1. Who processes your data
The controller of your personal data is:
Smučarsko društvo Novinar
Staničeva ulica 41, 1000 Ljubljana, Slovenia
company registration number: 5091543000
For any questions about the processing of your personal data, please contact us at info@novinar-drustvo.si.
This statement applies to the online registration form for Ski School Cerkno courses and to the courses themselves, and to the online reservation form for daily ski equipment rental at the Cerkno Ski Resort and to the rental that follows.
2. What data we collect
When you register for a course:
- about the parent or legal guardian: first name, last name, e-mail, phone, address;
- about the child: first name, last name, date of birth, previous skiing experience;
- the course and dates chosen;
- your notes, if you enter any;
- the decision on photographs and recordings, the consents given, the date and time of submission and the form language.
When you submit the online reservation:
- about the person making the reservation: first name, last name, e-mail, phone, street and house number, postcode, town, country;
- for each person included in the reservation: first name, last name and the measurements required for the selected equipment — height, weight, shoe size and clothing size;
- the equipment chosen, the number of rental days and the collection date;
- your notes, if you enter any;
- the consents given, the date and time of submission and the form language.
When you collect the equipment, the printed rental form is completed by hand with your identity document number and your signature; on return, the return date and any damage are added.
We do not collect the identity document number online and we do not store it in any computer system.
3. Why we process your data and the legal basis
To deliver the course (Article 6(1)(b) GDPR). Without the data listed above the course cannot be carried out. The parent’s contact details are needed to confirm the registration and to inform you about dates or cancellations, and the child’s details are needed to place the child in a group by ability.
To perform the rental agreement (Article 6(1)(b) GDPR). Without the data listed above the rental cannot be carried out. Your name and contact details are needed to conclude and confirm the rental, and the measurements are needed to select equipment of the right size. Height, weight and shoe size are also safety data, because ski bindings are adjusted according to them. Incorrect information may result in incorrect settings and increase the risk of injury.
To protect our equipment and pursue claims (Article 6(1)(f)). At collection we verify the identity of the person collecting and record their identity document number on the rental form. We keep rental records so that we can pursue claims if equipment is not returned or is damaged. Our legitimate interest is the protection of the club’s property.
To send newsletters (Article 6(1)(a)) – only if you consent. Newsletter sign-up is separate, is not pre-ticked and has no effect on your reservation. You may withdraw consent at any time using the link at the bottom of every message or by writing to info@novinar-drustvo.si. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
Photographs and recordings (Article 6(1)(a)) – only if you consent. When registering for a course, the parent or legal guardian explicitly consents or declines to the child being photographed and filmed during activities, and to those images being published on our website, social media and in the club’s materials. Consent remains valid until withdrawn. To withdraw it, write to info@novinar-drustvo.si; once received, we remove the images from all materials still under our control. Withdrawal does not affect the lawfulness of publication before it. Consent is not a condition for taking part in the course.
Providing the data is not a statutory obligation, but it is a condition of course registration or equipment rental. If you do not provide it, we cannot accept the registration or reservation.
Neither a course registration nor a reservation makes you a club member. Submitting the form does not enrol you in Smučarsko društvo Novinar.
4. Who we share the data with
We do not sell your data and we do not pass it to third parties for their own purposes. The following have access to your personal data:
- rental shop and ski school staff, to the extent needed to issue and take back the equipment;
- ski instructors, to the extent needed to run the course;
- Google Ireland Limited as processor, because the registration and reservation spreadsheets, the prepared rental forms and the e-mail run on Google Workspace. Google may process data outside the European Economic Area on the basis of the European Commission’s standard contractual clauses;
- UAB MailerLite (Lithuania) as processor, solely to send newsletters and solely for people who have consented.
We also disclose data to the competent authorities where the law requires it — for example to the police if rented equipment is not returned.
Photographs and recordings that you have consented to being published are publicly accessible on our website and social media once published.
5. How long we keep the data
| What | How long |
|---|---|
| Reservation data in the spreadsheet | Until the end of the season in which the reservation was made, plus one year. Reservations from the 2026/27 season are deleted by 30 April 2028 at the latest. |
| Prepared rental forms in digital form | As above. |
| Signed paper rental form with the identity document number | Destroyed as soon as the equipment is returned. If damage, loss or non-payment was recorded on return, it is kept until the matter is settled. |
| E-mail address used for newsletter subscription | Until consent is withdrawn. |
| Course registration data | Until the end of the season in which the course took place, plus one year. |
| Consent to photographs and recordings, and published images | Until consent is withdrawn. After withdrawal we remove the images from materials still under our control. |
After these periods the data is deleted and the documents destroyed.
6. Your rights
In relation to your personal data you have the right:
- of access — to learn what data about you we process;
- to rectification of inaccurate data;
- to erasure where there is no longer a basis for processing;
- to restriction of processing;
- to object to processing based on legitimate interest;
- to data portability;
- to withdraw consent (for newsletters or for photographs and recordings) at any time.
Send your request to info@novinar-drustvo.si. We will respond to your request within one month.
If you believe we process your data unlawfully, you may lodge a complaint with the supervisory authority:
Information Commissioner of the Republic of Slovenia
Dunajska cesta 22, 1000 Ljubljana
gp.ip@ip-rs.si
7. Automated decision-making and minors
We do not use your data for automated decision-making or profiling.
Reservations for minors are submitted, and rental forms signed, by a parent or legal guardian. Course registrations for children, including the decision on photographs and recordings, are submitted by a parent or legal guardian.
8. Changes to this statement
We may update this Privacy Statement if the way we process personal data changes. The version published on this page is the version currently in force. The date of the latest update is shown below.
Last updated: 13 October 2026