Documents

Privacy policy

Last updated: April 2026

Personal data processing notice — My Tour of Slovenia 2026

Basic information

The data controller is Kolesarski klub Adria Mobil, Zaloška cesta 20, 8000 Novo mesto, registration number 5941903000, email: mytour@tourofslovenia.si (hereinafter: controller or organiser) and PRISTOP d.o.o., Vilharjeva cesta 36, 1000 Ljubljana, registration number 2038943000 (hereinafter: co-organiser).

The controller treats the protection of personal data prudently and in accordance with applicable legislation. It is committed to the ongoing protection of all personal data of individuals.

Definitions

GDPR: means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation).

ZVOP-2: means the Personal Data Protection Act (Official Gazette of RS, No. 163/22).

Your rights and how to exercise them

You may exercise the following rights regarding your personal data at any time:

  • the right of access to your personal data;
  • the right to rectification or supplementation of personal data;
  • the right to erasure of personal data, where there is no longer a legal basis for retention or you have given your consent;
  • the right to restriction of processing of personal data (in certain cases);
  • the right to object — where processing is based on legitimate interest;
  • the right to data portability — in the case of a contract or personal consent and processing by automated means;
  • the right to withdraw consent — where processing is based on consent.

You may exercise your rights in writing at the controller's address or via email at mytour@tourofslovenia.si. In certain cases, we may contact you to verify your identity.

If you believe that your rights are not being properly exercised, you may file a complaint with the Information Commissioner of the Republic of Slovenia (Dunajska 22, 1000 Ljubljana, email: gp.ip@ip-rs.si).

Processing purposes

When you visit our website

When you visit our website mytour.si, we store your IP address for a short period, at most until the end of the session. If our system determines that you are not engaging in any activities that would compromise website operation, this data is automatically deleted. If our system detects activities that are clearly unlawful or aimed at disabling website operation, your IP address is permanently stored and placed on a blocklist.

Legal basis: legitimate interest (Article 6(1)(f) GDPR) — website security and prevention of unlawful activities.

Categories of users: website hosting provider and security solution provider.

Retention period: at most until the end of the session or permanently in cases of attempted abuse.

If you register for the MyTour cycling challenge

For successful registration for the My Tour of Slovenia 2026 cycling challenge, we require the following personal data:

  • first and last name;
  • date of birth;
  • gender;
  • country;
  • place of residence;
  • contact telephone;
  • email address;
  • data required for processing the entry fee payment via Stripe.

We collect, use, and process personal data for the purpose of maintaining a register of event participants, communication by email or telephone regarding registration, event progress and content, sending emails with event information, timing, results publication, and fulfilment of tax and accounting obligations.

Legal basis: performance of a contract (Article 6(1)(b) GDPR), legal obligation (tax and accounting legislation — Article 6(1)(c) GDPR), legitimate interest (competition execution, results publication — Article 6(1)(f) GDPR).

If an individual does not provide the required data, we will not be able to enable registration for the cycling challenge.

If you compete in the cycling challenge

If you participate in the cycling challenge, your results (first and last name, result achieved, category, ranking) will be publicly published on mytour.si and timingljubljana.si. The purpose of publication is to enable competitors to compare results and for the public to view the progress and results of the sporting event.

Legal basis: legitimate interest (competition execution, presentation of sporting event) — Article 6(1)(f) GDPR. Public publication of participant names and surnames is also provided for in the third paragraph of Article 93 of ZVOP-2.

Retention period: sporting event results are retained permanently for documentation of the sporting event, statistical reviews, and event presentation.

Individuals have the right to object to the processing of personal data based on legitimate interest. If your rights and interests prevail, we will remove your name from the public results publication.

If captured by our photographers

Photography and audiovisual recording of the event is carried out on the basis of the controller's legitimate interest (Article 6(1)(f) GDPR) and in accordance with Article 93 of ZVOP-2. The purpose of photography is to promote the event and document the sporting event. Photographs and video content may be used for informing the public, event promotion, preparing reports for partners, and other promotional purposes.

If you wish to have a specific photograph in which you are recognisable removed, please send a request to mytour@tourofslovenia.si.

If you contact us by email

If you wish to get in touch with us, you can reach us via email at mytour@tourofslovenia.si. We use your personal data to respond to your question and communicate with you. You may terminate the communication at any time.

Legal basis: legitimate interest (communication with the general public) — Article 6(1)(f) GDPR.

Retention period: until the end of communication.

If you have subscribed to our newsletter

Since we only send our communications with your consent, you may unsubscribe (withdraw your consent) at any time by clicking the link in the received email.

Legal basis: personal consent under Article 6(1)(a) GDPR.

Retention period: until withdrawal of consent.

To whom we share your personal data — processors

The controller and data processors do not transfer data to third countries outside the EU/EEA, unless this is expressly permitted or covered by appropriate safeguards in accordance with the GDPR.

The following legal entities access and process data as our data processors:

  • PRISTOP d.o.o., Vilharjeva cesta 36, 1000 Ljubljana — marketing, entry fee sales, and invoicing;
  • Stripe Payments Europe, Ltd. — payment service provider for processing card payments. Card transaction data is stored exclusively on Stripe servers, in accordance with PCI DSS standards;
  • Društvo Timing Ljubljana, Staničeva ulica 41, 1000 Ljubljana — timing and results publication;
  • Renderspace d.o.o. — website development and maintenance, and email distribution;
  • website hosting provider;
  • bulk email service provider;
  • event partners (to the extent necessary for event execution and reporting);
  • state authorities demonstrating a legal basis for processing, as required by law.

Individual data will under no circumstances be provided to unauthorised persons.

Personal data retention period

The controller retains and processes personal data to the extent necessary for the fulfilment of processing purposes:

  • in the case of contract performance (registration, payment): 5 years from the last registration;
  • sporting event results: permanently;
  • in the case of legitimate interest: 5 years from the conclusion of the event;
  • data based on consent (newsletter): until withdrawal;
  • accounting and tax documents: 10 years in accordance with tax legislation.

Data security and card payments

Entry fee payments are processed exclusively through the secure Stripe payment system. Neither the controller nor the intermediary stores payment card data on their servers. All card transactions are processed directly through Stripe and are secured in accordance with PCI DSS (Payment Card Industry Data Security Standard).

The controller implements appropriate technical and organisational measures to protect personal data from unauthorised access, loss, or misuse.

Information on automated decision-making

The processing of individuals' personal data by the controller does not include automated decision-making or profiling.

Web analytics and marketing

Web analytics and marketing on the website is carried out via cookies and exclusively on the basis of your express consent. Information about cookies and their settings can be found in the Cookie Policy.

Contact

If you have questions about data protection or your personal data held by the controller, you may contact:

Kolesarski klub Adria Mobil
Zaloška cesta 20, 8000 Novo mesto
Email: mytour@tourofslovenia.si

Right to lodge a complaint with a supervisory authority

You may lodge a complaint with the Information Commissioner of the Republic of Slovenia:

Address: Dunajska cesta 22, 1000 Ljubljana
Email: gp.ip@ip-rs.si
Telephone: +386 1 230 97 30
https://www.ip-rs.si

Ljubljana, April 2026

© 2026, Kolesarski klub Adria Mobil | PRISTOP d.o.o.