Privacy Policy

Last updated: 10 September 2026

At Marima Farm, we respect your privacy and are committed to processing personal data securely, lawfully and transparently. This Privacy Policy explains what personal data we collect, why we use it, how long we retain it, with whom it may be shared and what rights you have.

This Policy applies to the use of www.marima.si, the online shop, enquiries, accommodation bookings and other forms of communication with us.

1. Data controller

The controller of your personal data is:

Svetovanje na področju agronomije, Urška Klančar s.p.
Marima Farm
Trebeše 24
6272 Gračišče
Slovenia

Registration number: 6454089000
VAT ID: SI85330906
Telephone: +386 41 904 693
E-mail: info@marima.si
Website: www.marima.si

For questions concerning the protection of personal data, please contact us at info@marima.si.

2. Personal data we collect

We collect personal data only to the extent necessary to provide our services, respond to enquiries, process purchases and accommodation bookings, operate the website securely and comply with our legal obligations.

Enquiries and communication

If you contact us through a web form, e-mail, telephone or another communication channel, we may process:

  • your first and last name;
  • e-mail address;
  • telephone number;
  • the contents of your message;
  • preferred accommodation dates;
  • other information that you voluntarily provide.

Accommodation bookings

When booking Vila Marima or Apartma Marima, we may process:

  • the name of the booking holder and, where necessary, other guests;
  • contact details;
  • arrival and departure dates;
  • number of guests;
  • information about the selected accommodation;
  • special requests or comments that you provide;
  • information required for payment or booking confirmation;
  • information required for guest registration and compliance with legal obligations.

If you make a booking through an external platform such as Booking.com, some of your data will also be processed by that provider in accordance with its own privacy policy.

Online shop

When purchasing products from our online shop, we may process:

  • first and last name;
  • billing and delivery address;
  • e-mail address;
  • telephone number;
  • details of the products ordered;
  • selected payment and delivery method;
  • information necessary for invoicing, delivery and handling complaints.

We do not store payment card details when payment is processed directly by a third-party payment service provider.

User account

If user account registration is available, we may process information entered during registration, profile management or when placing orders.

Technical data

When you visit the website, certain technical information may be processed automatically, including:

  • IP address;
  • date and time of access;
  • pages visited;
  • browser and device type;
  • error information;
  • basic server logs;
  • information related to website security.

3. Purposes and legal bases for processing

Enquiries and communication

We use your data to respond to enquiries, prepare offers and communicate with you. The legal basis is taking steps at your request before entering into a contract or our legitimate interest in communicating with persons who contact us.

Accommodation bookings

We process data to prepare and manage bookings, communicate with guests, provide accommodation, process payments and fulfil guest-registration obligations. The legal basis is the performance of a contract, steps taken before entering into a contract and compliance with legal obligations.

Online shop orders

We process data to manage orders, prepare and deliver products, process payments, issue invoices, communicate about orders and handle complaints. The legal basis is the performance of a contract and compliance with legal obligations.

Accounting and legal obligations

Certain personal data is retained for tax, accounting, tourism and other statutory purposes for the periods required by applicable law.

Website security

Technical data and server logs are used to protect the website, prevent misuse, identify technical problems and ensure stable operation. The legal basis is our legitimate interest in operating a secure and reliable website.

Marketing communications

We send promotional messages, newsletters or special offers only where we have an appropriate legal basis, such as your consent. You may unsubscribe from such communications at any time.

4. Cookies

The website uses cookies and similar technologies. Cookies are small files stored in your browser which enable the proper functioning of the website, online shop, booking features and other services.

Essential cookies

Essential cookies are necessary for basic website functions such as the shopping cart, login, forms and security. Consent is not required where these cookies are strictly necessary to provide a service requested by the user.

Analytics cookies

Analytics cookies may help us understand how visitors use the website. They are used only when enabled and where appropriate consent has been obtained.

Marketing cookies

Marketing cookies may be used to measure advertising effectiveness or display personalised content. They are used only with appropriate consent where required by law.

You can change your cookie preferences through the website’s cookie settings where available, or through your browser settings.

5. Embedded content and third-party services

The website may contain links to or embedded content from third parties, such as maps, videos, booking platforms, social networks and payment services.

Such providers may process information about your use of their services and may use their own cookies in accordance with their own policies.

Third-party website operators are responsible for their own processing activities, and we recommend reviewing their respective privacy policies.

6. Recipients of personal data

We do not sell personal data or disclose it to third parties for their own marketing purposes.

Where necessary, personal data may be shared with:

  • website hosting providers;
  • e-mail service providers;
  • website and IT maintenance providers;
  • accounting service providers;
  • delivery and courier services;
  • payment service providers;
  • booking platforms;
  • competent public authorities where required by law;
  • other processors acting on our instructions.

We require processors to provide appropriate protection for personal data.

7. International transfers

As a general rule, personal data is processed within the European Union or European Economic Area.

If a service provider processes data outside the EU or EEA, the transfer will take place only where an appropriate legal basis and safeguards exist, such as an adequacy decision, Standard Contractual Clauses or another mechanism permitted by applicable law.

8. How long we retain personal data

Personal data is retained only for as long as necessary for the purpose for which it was collected or for as long as required by applicable law.

Indicative retention periods or criteria include:

  • enquiries and communication: generally up to two years after communication has ended, unless this results in an order, booking or other business relationship;
  • booking information: for as long as required to perform the booking and comply with legal obligations;
  • online shop orders: for as long as required to fulfil the order, handle complaints and comply with legal obligations;
  • invoices and accounting documentation: according to statutory retention periods;
  • technical logs: generally for a shorter period unless longer retention is necessary for security or investigation of misuse;
  • marketing data: until consent is withdrawn, the user unsubscribes or another applicable legal basis ceases to apply.

After the applicable retention period, data is deleted, anonymised or archived where required by law.

9. How we protect personal data

We use appropriate technical and organisational safeguards, including:

  • restricted access to personal data;
  • secure passwords and access controls;
  • regular updates to the website and software;
  • protection against unauthorised access;
  • backups;
  • encrypted HTTPS connections;
  • careful handling of orders, bookings and communications.

Despite appropriate safeguards, complete security of data transmitted over the internet cannot be guaranteed.

10. Your rights

Subject to the conditions laid down by applicable law, you may have the right to:

  • access your personal data;
  • correct inaccurate or incomplete data;
  • request erasure of personal data;
  • request restriction of processing;
  • object to processing;
  • data portability;
  • withdraw consent where processing is based on consent;
  • lodge a complaint with the competent supervisory authority.

To exercise your rights, contact us at info@marima.si. To protect your data, we may ask you to provide appropriate proof of identity before processing a request.

The competent supervisory authority in Slovenia is:

Information Commissioner of the Republic of Slovenia
Dunajska cesta 22
1000 Ljubljana
Slovenia
E-mail: gp.ip@ip-rs.si
Website: www.ip-rs.si

11. Children’s data

The website is not intended to directly collect personal data from children. Where information about children is processed in connection with an accommodation booking, it is processed only to the extent necessary to provide the service or comply with legal obligations.

12. Automated decision-making and profiling

We do not use personal data for automated decision-making that produces legal or similarly significant effects on individuals.

Where analytics or marketing tools are used, they are used in accordance with cookie preferences and applicable legislation.

13. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time due to changes in legislation, the website, online shop, booking system or our personal data processing practices.

The current version is always published on this page.