PRIVACY POLICY
The personal data protection policy or privacy policy regulates the collection, storage, and processing of personal data that Cisterca Ljubljana d.o.o. collects and processes when:
• you use the amsrooms.com website,
• you contact us by phone, email, or social media,
• you make a reservation for accommodation at AMS Rooms,
• you stay at AMS Rooms.
CONTROLLER
The controller of personal data within the meaning of the EU General Data Protection Regulation and the applicable law governing the protection of personal data – GDPR – is:
Cisterca Ljubljana d.o.o.
Stična 17
1295 Ivančna Gorica
Phone: +386 (0)1 787 77 01
Email: cisterca@amsrooms.com
PERSONAL DATA AND THE PURPOSE OF THEIR PROCESSING
Cisterca Ljubljana d.o.o. collects, processes, and stores the personal data of five groups of individuals in the course of its work. These are individuals who have contacted AMS Rooms via the contact form, e-mail address or telephone number, persons who have contacted AMS Rooms via social networks, persons who have made a reservation for accommodation at AMS Rooms, persons who are (or have been) accommodated at AMS Rooms, and persons with whom the controller has had bad experiences. For each group of persons, we have defined below which personal data is collected, the purpose of collection, and the retention period.
| Group of individuals | Personal data | Purpose of collection | Retention period |
| Records of customers who have contacted us via the contact form, email address, or telephone | first and last name, email address, phone number, message content | Correspondence regarding customer requests and our offer, direct marketing of products, sending advertising emails. | Until consent is revoked or for a maximum of 3 years. |
| Record of customers who contacted us via social networks | name and surname, country, email address, telephone number, message content, data and reactions from social network profile | Correspondence regarding the client’s wishes and our offer. | Up to 1 year, on social networks in accordance with Meta Platforms, Inc. policy. |
| Record of customers who have made reservations for overnight stays at AMS Rooms. | first and last name, address, e-mail address, telephone number, reservation details (date and time of arrival, number of persons, number of rooms, room type, number of nights, special requests – optional, price), payment method, payment provider details, credit card details, information on successful/unsuccessful transaction | Submitting inquiries via online booking portals or engines, e-mail or telephone, preparing offers, concluding and executing contracts. Direct marketing of products, sending advertising e-mails. | Up to 1 year, records of data deletion up to 5 years, invoices for services up to 10 years. |
| Records of guests staying at the hotel. | name and surname, date of birth, gender, nationality, type and number of personal document | Execution of the contract and mandatory reporting to the official authorities of the Republic of Slovenia (currently: AJPES), prevention and detection of possible abuse and conduct that could constitute criminal activity. | Up to 1 year, records of data deletion up to 5 years, invoices for services up to 10 years. |
| Record of customers with whom the operator has had negative experiences | first and last name, gender, nationality, email address, telephone number | Refusal to accept a new contract due to poor past experiences (e.g., unpaid bills upon departure, destruction of the operator’s property or the property of other guests, inappropriate behavior toward employees or other guests, violations of house rules, etc.). | Maximum 3 years from the last invoice issued. |
CONTRACTUAL PROCESSING AND TRANSFER TO THIRD PARTIES
Your personal data will only be transferred to third parties and contractual processors if this is necessary for the successful fulfillment of the purpose of processing. These cases are:
• contractual processors of personal data for the purposes of maintaining the information system and internal reception portal,
• state authorities for mandatory reporting, at the request of state authorities or in cases of suspected criminal conduct (AJPES, Police, FURS, indirectly the Statistical Office, MOL, etc.),
• booking portals and engines (e.g., Booking, Cubilis – MyLightHouse, etc.),
• payment service providers for the purpose of processing payments and banks on the basis of an individual’s order for the purposes of fulfilling a sales contract,
• accounting services or services for accounting issued invoices,
• other service providers at the request or wish of the customer (e.g., carriers and other service providers).
TRANSFER OF DATA TO THIRD COUNTRIES
Under no circumstances do we transfer your data to third countries.
LEGAL BASIS
We process the personal data you provide when booking accommodation with your clear and unambiguous consent, based on Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR), legitimate interests, or on the basis of the performance of a contract upon confirmation of your accommodation reservation. You may withdraw your consent at any time by sending a message to: info@amsrooms.com.
Any withdrawal of consent does not affect the lawfulness of the processing of your personal data prior to the withdrawal.
The withdrawal of consent will be carried out within a maximum of 14 days of receipt of the written request to the e-mail address, insofar as this is permitted by the purpose of the processing of personal data and the legal basis.
YOUR RIGHTS
In accordance with the provisions of the EU General Data Protection Regulation (GDPR), you have the following rights:
Right to withdraw consent: if you, as a user, have consented to the processing of your personal data (for one or more specific purposes), you have the right to withdraw your consent at any time without affecting the lawfulness of the data processing that was carried out on the basis of your consent prior to its withdrawal.
Right of access to personal data: as a user, you have the right to obtain confirmation from the provider (personal data controller) as to whether personal data relating to you is being processed and, if so, to access your personal data and certain information.
Right to rectification of personal data: as a user, you have the right to obtain from the provider the rectification of inaccurate personal data concerning you without undue delay. As a user, you have the right to have incomplete data completed, taking into account the purposes of the processing.
Right to erasure of personal data (“right to be forgotten”): as a user, you have the right to have your personal data erased when there is no longer a legitimate reason for further processing. Prevention of processing is possible in specific circumstances.
Right to restriction of processing: as a user, you have the right to obtain from the provider restriction of processing if, as a user, you contest the accuracy of the personal data; when the processing is unlawful and you, as a user, oppose erasure and request restriction of use; when the data is no longer necessary for the purposes of processing, but you need it to assert legal claims.
Right to data portability: as a user, you have the right to receive personal data concerning you that you have provided to the provider in a structured, commonly used, and machine-readable format.
Right to object to processing: as a user, you may object to processing in the case of processing for the performance of tasks carried out in the public interest or in the exercise of official authority, and direct marketing (including profiling).
PERSONAL DATA RETENTION PERIOD
Cisterca Ljubljana d.o.o. stores your personal data for as long as necessary for the purpose of processing personal data. Individual personal data collections have different retention periods. Data on customers who have contacted us via the contact form, e-mail address, or telephone are stored until consent is revoked or for a maximum of 3 years. Data about customers who have contacted us via social networks is stored for a maximum of 1 year. Data about persons who have concluded a contract with AMS Rooms, booked accommodation or stayed at AMS Rooms is stored for a maximum of 10 years from the last activity, as specified in more detail in the table above.
ADDITIONAL INFORMATION AND EXERCISING YOUR RIGHTS
To exercise any of your rights or obtain additional information, please contact our data protection officer at cisterca@amsrooms.com. We will review your request and respond to it in accordance with the EU General Data Protection Regulation (GDPR).
Ljubljana, 1. 2. 2026
Cisterca Ljubljana d.o.o.
