This policy explains how Durango d.o.o. processes personal data when you visit ski-touring.com, buy in our online shop or book a guided ski tour. We process data in line with the General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).

Controller

  • Durango d.o.o., Partizanska 18, 4000 Kranj, Slovenia
  • Registration number 6390013000, VAT number SI97342858
  • Contact for data protection questions: info@ski-touring.com, +386 51 668 599

What data we process and why

Orders in the online shop

Name, billing and delivery address, email, phone number, ordered products, payment method and order history. We need these data to process and deliver your order, issue the invoice and handle returns and complaints (legal basis: performance of a contract, Art. 6(1)(b) GDPR, and legal obligations, Art. 6(1)(c) GDPR). If you create an account, we keep your login data until you delete the account.

Tour enquiries and bookings

Name, email, phone, number of participants, preferred dates, your message and, for bookings, the data needed to organise the tour (for example date of birth, nationality, level of experience, dietary requirements and emergency contact). Health information is only processed if you give it to us for your safety on the tour, and only with your explicit consent (Art. 9(2)(a) GDPR). Legal basis: steps prior to and performance of a contract (Art. 6(1)(b) GDPR).

Contact form and email

When you write to us, we process your name, email address and message to answer you (Art. 6(1)(b) or legitimate interest, Art. 6(1)(f) GDPR). Form submissions may be checked for spam by Akismet (Automattic Inc.).

Newsletter

We only send newsletters if you have subscribed. You can unsubscribe at any time through the link in each email (legal basis: consent, Art. 6(1)(a) GDPR).

Cookies

We currently use only cookies that are necessary for the website and shop to work: to keep the contents of your cart, to process checkout, to keep you logged in to your account and to serve cached pages. They are set by WordPress, WooCommerce and our caching system and do not require your consent. We do not use analytics or advertising cookies. If we introduce them in the future, we will ask for your consent first and update this policy.

Links to YouTube, Google Maps, social networks and our partner websites (ProMontana, Lifetrek) take you to those services, which process data under their own privacy policies.

Who receives your data

We only share data where necessary for the purposes above, with:

  • our hosting and IT service providers;
  • GLS (delivery of parcels);
  • payment providers PayPal (Europe) S.à r.l. et Cie, S.C.A. and Braintree, and our bank (payments);
  • our accountant and public authorities where required by law;
  • for tours: local mountain guides, accommodation and transport providers at the destination.

Some tours take place outside the European Union (for example in Georgia, Turkey, Chile or Argentina). For these tours we pass the necessary data to local partners because this is needed to perform your booking (Art. 49(1)(b) GDPR). Some service providers (for example PayPal or Automattic) may process data in the USA; such transfers are based on the EU–US Data Privacy Framework or standard contractual clauses.

How long we keep data

  • Invoices and accounting records: 10 years after the end of the year they relate to, as required by tax law.
  • Order and booking data: as long as needed for the contract and for claims, usually 5 years.
  • Enquiries without a booking: up to 2 years.
  • Customer accounts: until you delete the account or ask us to delete it.
  • Newsletter: until you unsubscribe.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict processing, to data portability and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting earlier processing. Write to info@ski-touring.com; we reply within one month.

If you believe we process your data unlawfully, you can lodge a complaint with the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si, or with the authority in your country.

Security

The website uses an encrypted connection (HTTPS). Card details are entered on the payment provider’s secure pages and are never stored by us. Access to personal data is limited to people who need it for their work.

Changes

We may update this policy when our services or the law change. The current version is always published on this page.

Valid from 23 October 2026.