Legal & privacy.

General provisions and controller

The website novikolesarski.si is operated by Zavod Novi, an institute for sustainable tourism and sport in Hoče, Hočko Pohorje 15E, 2311 Hoče (hereinafter: the "controller"). The controller is also the controller of personal data collected through this website.

These terms govern the relationship between the controller and the visitor to the site and describe how we handle your personal data in accordance with the General Data Protection Regulation (GDPR) and Slovenian law. By accessing the site you confirm that you have read, understood and agree to them.

Nature of the content on the site

The content on this website — including descriptions of cycling routes, destinations, recommendations and maps — is informational and prepared as suggestions. It is intended to inspire and to provide general orientation when planning cycling outings.

The controller strives to keep the information accurate and up to date, but does not warrant it unconditionally. Routes, distances, gradients, road surfaces, traffic arrangements, the accessibility of paths and other circumstances may change without prior notice.

User's responsibility

Cycling is an activity that carries risks. The decision whether and how to follow a suggested route lies exclusively with the user. Before and during the ride, the user is responsible for assessing:

• current traffic conditions and traffic flow;
• weather and visibility;
• the condition of the road or path;
• their own physical and medical fitness;
• the roadworthiness of the bike and suitability of equipment (helmet, lights, reflective gear).

Users are required to act in accordance with road-traffic regulations, in particular the Slovenian Road Traffic Rules Act (ZPrCP) and the Drivers Act (ZVoz-1). Minors may ride only under the supervision of a parent or guardian.

Limitation of liability

To the maximum extent permitted by applicable law, the controller is not liable for:

• damage arising from use of or reliance on the content of this website;
• personal injury, property damage or other damage incurred while cycling along the suggested routes;
• inaccurate, outdated or missing information on the website;
• interruptions to the website, errors in its operation or loss of data;
• the content and operation of third-party websites linked to from this site.

This limitation of liability does not apply in cases of intent or gross negligence on the part of the controller and does not affect mandatory rules of liability under applicable law.

Intellectual property

All content on this site — text, photographs, illustrations, the Novi kolesarski mark, routes, maps, graphic and software solutions — is subject to copyright or related rights of the controller or its partners. Personal, non-commercial use for planning your own cycling outings is permitted.

Any other use — in particular reproduction, distribution, public communication, adaptation or commercial exploitation — is permitted only with the prior written consent of the controller at info@novikolesarski.si.

External links

The website may contain links to third-party websites (e.g. local tourist boards, accommodation providers, maps). The controller does not control the content of those sites and accepts no responsibility for their accuracy, availability or security. Visiting linked sites is at the visitor's own risk.

Permitted use

The visitor agrees not to use the website in any way that would:

• breach applicable law or the rights of third parties;
• interfere with the operation of the server or network (including automated data scraping without permission);
• attempt to gain unauthorised access to systems, accounts or data;
• distribute malicious software or conduct phishing attacks.

What data we collect

On this website we collect only the data necessary to run the site and to communicate with you:

• Contact form: the name, email address and message content you send us.
• Newsletter signup: the email address you enter in the signup form, together with the site language and where you signed up. Signing up is voluntary and is not a condition of using the site.
• Server logs: IP address, time of access, browser type and the page requested. Used to keep the service secure and stable.
• Technically necessary cookies and similar technologies: needed for the site to function and to remember basic interface settings.
• Anonymous visit statistics: we measure visits with a cookieless analytics tool that collects data such as pages viewed, the referring site, browser and device type, country and screen size. Your IP address is not stored, and the statistics are aggregated so they cannot be linked to you.

Purpose of processing and legal basis

We process data only for the following purposes, on the following legal bases under the General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2):

• Responding to your enquiry — Article 6(1)(b) GDPR (steps prior to entering a contract) or 6(1)(f) (legitimate interest in establishing a business contact).
• Operating and securing the website — Article 6(1)(f) GDPR (legitimate interest).
• Analysing site usage and improving content (anonymous, cookieless statistics) — Article 6(1)(f) GDPR (legitimate interest).
• Sending the newsletter about new routes — Article 6(1)(a) GDPR (your consent given at signup). You may withdraw consent at any time through the unsubscribe link in every message or by emailing us; withdrawal does not affect the lawfulness of processing carried out before it.
• Legal obligations (e.g. retention of business correspondence) — Article 6(1)(c) GDPR.

Retention period

Messages received through the contact form are kept for up to 24 months from the last communication, unless they give rise to a business relationship subject to a longer statutory retention period. Server logs are kept for up to 90 days and then deleted automatically. Email addresses subscribed to the newsletter are kept for as long as the subscription lasts — that is, until you unsubscribe or withdraw consent, after which the address is deleted from the recipient list.

Data sharing

We do not sell your personal data and do not pass it to third parties for their own marketing. Data may be processed only by our contracted processors (e.g. hosting and email providers), with whom we have entered into data-processing agreements under Article 28 GDPR. We use MailerLite (MailerLite Limited, Ireland) to send the newsletter; as our contracted processor it processes recipients’ email addresses, which are stored in a data centre within the European Union. As a rule we do not transfer data outside the EU or EEA; where we exceptionally do, we put appropriate safeguards in place in line with the GDPR.

Cookies and analytics

This site shows no cookie notice because it does not need one. Nothing that would require consent is stored on your device:

• Technically necessary cookies and similar technologies — required for the basic operation of the site (e.g. remembering interface settings, session security). These do not require consent under Article 157 of the Slovenian Electronic Communications Act (ZEKom-2).
• Cookieless analytics (Umami) — we measure visits with Umami, a privacy-focused analytics service that works without cookies and stores nothing on your device. It records pages viewed, the referring site, browser and device type, country and screen size. Your IP address is processed only transiently to determine the country and a daily-changing anonymous identifier, and is not stored; the resulting statistics are aggregated and cannot be linked to you.

Because no consent-requiring cookies are set and no profiles of individuals are built, the analytics rest on our legitimate interest in understanding and improving the site — Article 6(1)(f) GDPR. The analytics service (Umami Software, Inc.) processes this data for us as a contracted processor under a data-processing agreement in line with Article 28 GDPR.

Your rights

In relation to your personal data you have the following rights:

• the right to access the data and to receive a copy;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure ("right to be forgotten");
• the right to restrict processing;
• the right to data portability;
• the right to object to processing based on legitimate interest;
• the right to withdraw consent where processing is based on consent.

To exercise these rights, send a written request to info@novikolesarski.si. We will respond within one month at the latest. If you believe we process your data contrary to the regulations, you may file a complaint with the Slovenian Information Commissioner (www.ip-rs.si).

Data security

We apply reasonable technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure or destruction. Only authorised people who need it for their work have access. The website uses encrypted HTTPS connections.

Changes and availability

The controller may at any time, and without prior notice, modify, add to or remove content as well as these terms. Changes take effect upon publication on this page. The controller reserves the right to suspend or permanently discontinue the website, in particular for technical, security or editorial reasons.

We may also update this privacy policy from time to time to reflect changes in legislation or our services. Changes take effect upon publication on this page, so we recommend reviewing the content occasionally.

Governing law and jurisdiction

These terms and any relationships arising from use of the website are governed by the law of the Republic of Slovenia, irrespective of conflict-of-laws rules. Disputes shall be resolved by the courts of competent subject-matter and local jurisdiction in the Republic of Slovenia. If the user is a consumer, this does not affect their rights under consumer-protection legislation.