Privacy policy
Izjava o zasebnosti uporabe spletnega mesta in aplikacije Lime Booking.
1. Uvodne določbe
We protect your personal data in accordance with Regulation (EU) 2016/679 (GDPR), the Personal Data Protection Act (ZVOP-2) and other applicable data protection legislation. This part of the privacy statement applies to individuals who act as business users at Lime Booking — namely owners, directors, employees and contact persons of salons and other business entities that use the Lime Booking platform.
Lime Booking acts in two clearly separated roles in relation to you. As controller processes your personal data for the purpose of providing and managing Lime Booking services — This statement governs this relationship.. As a processor PA processes your customers' personal data according to your instructions and on your behalf — this relationship is governed by Standard Contractual Clauses for data processing (SPD), which is an integral part of the platform use agreement.
2. Podatki o podjetju
The controller of personal data is Adanta d.o.o. (hereinafter: Lime Booking), Seliškarjeva ulica 16, 2250 Ptuj, registration number 8919160000, VAT ID SI 85728403.
For any questions regarding the processing of your personal data, please contact us at privacy@lime-booking.com or write to the above address. We shall respond to requests within 30 days.
3. Katere podatke obdelujemo
Kadar se registrirate in uporabljate aplikacijo Lime Booking, obdelujemo naslednje kategorije vaših osebnih podatkov.
Identification and business data include your first and last name, username, password (stored exclusively in a hashed format), official company name, and VAT ID if you are acting as a legal entity or sole trader.
Contact details include an email address, telephone number, registered office or business address, delivery and billing address, and, where applicable, social media profiles that you provide to us yourself.
Account details they include all the information you enter upon registration and during use: location data, services, price list, staff, opening hours, and all other settings within the platform.
Podatki o strankah salona – obdelovalska vloga: For your customers' personal data (name, email, phone number, booking details) entered via the booking form, Lime Booking acts as a processor on your behalf. We process this data exclusively on your instructions based on SPD. For these relationships you act as the controller and are responsible for appropriately notifying your customers.
Data on browsing habits and platform usage vključujejo podatke o storitvah, ki jih iščete, funkcionalnostih, ki jih koristite, kliknjenih vsebinah, načinu iskanja in pomikanja po platformi ter podatke o napravah, s katerih dostopate – IP naslov, geolokacija na ravni mesta, ID naprave, operacijski sistem, brskalnik in podatke iz piškotkov.
Data on behaviour when reading messages These include the time the message was opened and basic technical details about the device used to open it.
Analytical and derived data: Na podlagi vaše uporabe platforme ustvarjamo agregirane analitične uvide za namen izboljšanja platforme – na primer grupiranje po kategoriji storitev, frekvenci uporabe in geografiji lokacije. Profiliranje za namene personaliziranih ponudb izvajamo izključno na podlagi vaše privolitve.
4. Zakaj obdelujemo vaše podatke
Account management and service provision
We process this data to manage access to your account, ensure the operation of the platform and its associated services for appointment booking, customer management and messaging.
The legal basis is the performance of a contract under Article 6(1)(b) of the GDPR. We retain the data for the entire duration of the contract and delete it within 30 days of termination.
Billing, invoicing and tax liabilities
We process data relating to payments, invoices issued and transactions for the purposes of calculating subscription fees, issuing invoices and fulfilling tax and accounting obligations.
The legal basis is a combination of the performance of a contract (Article 6(1)(b)) and a legal obligation (Article 6(1)(c)). Financial records are kept for 10 years in accordance with the Tax Procedure Act (ZDavP-2).
Party support
We retain communication data from support enquiries in order to ensure continuous, high-quality support, to resolve technical issues and to provide evidence in the event of a dispute.
The legal basis is legitimate interest (Article 6(1)(f)) — the interest in providing a high-quality service does not override your rights, as the data is not disclosed to third parties and is accessible only to the support team. We retain the data for 3 years after the conclusion of each individual case.
Platform security and fraud prevention
Technical access data (IP address, behavioural patterns, access times) is processed to detect unauthorised access, prevent fraud and ensure the secure operation of the platform.
The legal basis is legitimate interest (Art. 6(1)(f)) — security measures also directly benefit you as a user. IP addresses are pseudonymised after 30 days, and full security logs are deleted after 12 months.
Analytics and Service Development
We process aggregated and anonymised platform usage data for the purposes of developing new features, troubleshooting and improving the user experience.
The legal basis is legitimate interest (Art. 6(1)(f)). Anonymised data does not allow for your identification and is stored permanently; personal data for analytical purposes is kept for up to 24 months.
Service notifications and direct marketing
We occasionally inform existing business customers about platform updates, new functionalities and relevant offers.
The legal basis is legitimate interests (Article 6(1)(f)) — as an active user, you would reasonably expect to receive notifications directly related to the service you are using.
You always have the right to object under Article 21 GDPR, which we will respect immediately and unconditionally. We process the data for this purpose until you unsubscribe.
Profiling for the personalisation of offers
If you specifically agree to this, we will create a profile of your preferences for the purpose of tailored functionality recommendations and offers suited to your type of business.
The legal basis is your consent (Article 6(1)(a)). You may withdraw your consent at any time by sending an email to privacy@lime-booking.com.
Enforcing legal claims
In the event of legal disputes or regulatory proceedings, we retain relevant data for the purpose of establishing or defending legal claims.
The legal basis is legitimate interest (Art. 6(1)(f)). We retain the data until the end of the procedure and for 5 years thereafter.
Statistical analysis
We carry out anonymised statistical processing for the purposes of market analysis and reporting. As the data is anonymised, it does not allow you to be identified and is not regarded as personal data.
5. Kdo obdeluje vaše podatke
Vaši osebni podatki so dostopni le omejenemu krogu oseb. Zaposleni v Lime Booking imajo dostop izključno tisti, ki podatke potrebujejo za opravljanje svojih nalog – na primer ekipa podpore, razvojna ekipa in ekipa za obračunavanje. Vsi zaposleni so zavezani k zaupnosti.
For certain services we use external processors, with whom we have concluded data processing agreements under Article 28 of the GDPR. The processors may process data exclusively in accordance with our instructions. Our key processors are: Amazon Web Services EMEA SARL infrastructure hosting, EU, Functional Software Inc. – Sentry (monitoring napak, EU-Frankfurt), PostHog Inc (analytics, EU-Frankfurt), Infobip Limited (SMS and email, EU-Frankfurt), Google Ireland Limited (cloud services and analytics, EU and hybrid), Facebook Ireland Limited (advertising exclusively with your consent, EU-Ireland and worldwide), Stripe Payments Europe Limited (payment processing, EU-Ireland) and E-RAČUNI d.o.o. (accounting, Slovenia).
Vaše podatke razkrijemo državnim organom, kadar je to zahtevano na podlagi zakona – na primer Finančni upravi Republike Slovenije ali Informacijskemu pooblaščencu RS v okviru nadzornih postopkov.
In the event of legal disputes, we may also disclose them to lawyers and courts to the extent necessary for the protection of legal interests.
In certain cases, we may obtain your company's data from publicly available registers, such as AJPES, GVIN and Google Business Profile. We do this exclusively for the purpose of identifying and updating business data during registration or profile management.
6. Prenos osebnih podatkov v tretje države
Your personal data is in certain cases transferred outside the European Union or the European Economic Area. Lime Booking ensures that all such transfers comply with GDPR requirements and are carried out with appropriate safeguards.
Transfers take place to the following providers based or with infrastructure in third countries: Axiom Inc. (USA — log management), Google LLC (USA and globally — cloud services), Meta Platforms (USA and globally — advertising, strictly subject to your consent) and Stripe Inc. (USA — payment processing).
For all listed transfers, we provide the European Commission's Standard Contractual Clauses pursuant to Implementing Decision 2021/914.
You have the right to request information about the countries to which your data is transferred and a copy of the applicable safeguards. Please address your request to privacy@lime-booking.com.
7. Varnost podatkov
We protect your data with technical and organisational measures, which include data encryption in transit (TLS 1.2 or higher) and at rest (AES-256), two-factor authentication for account access, role-based access control following the principle of least privilege, regular security reviews and penetration testing, and procedures for detecting and managing security incidents.
In the event of a security incident that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with Article 34 of the GDPR.
8. Vaše pravice
As a data subject, you have the following rights. We respond to all requests within 30 days; for complex requests, we reserve the right to extend this period by a maximum of 2 months, of which we will notify you in advance.
Right of access (Article 15): You are requesting a copy of the personal data we process concerning you, as well as information about the nature, purpose, and scope of this processing.
Right to rectification (Article 16): You are requesting the correction of inaccurate personal data or the completion of incomplete personal data.
Right to erasure (Art. 17): You request the erasure of your personal data when there is no longer a legal basis for its processing. The right to erasure is subject to restrictions arising from statutory retention obligations.
Right to restriction of processing (Article 18): You are requesting that we temporarily restrict the processing of your data until we have resolved any substantive disagreements.
Right to object (Article 21): You object to the processing of your data on the basis of legitimate interest. An objection to processing for direct marketing purposes is absolute and unconditional — we will comply with it immediately, without balancing interests.
Right to data portability (Article 20): You request that we provide you with your personal data in a structured, commonly used and machine-readable format, or that we transmit it directly to another controller.
Right to withdraw consent (Art. 7): You may withdraw your consent, given for any processing based on it, at any time and without consequence. The withdrawal shall not affect the lawfulness of processing based on consent before its withdrawal.
Please send requests for the exercise of rights to privacy@lime-booking.com. You also have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, www.ip-rs.si.
9. Piškotki in podobne tehnologije
Lime Booking uses cookies and similar technologies to ensure the operation of the platform, analytics and personalised advertising. Essential cookies are required for basic operation and cannot be switched off. We obtain your consent for all other types of cookies via the cookie manager upon your first visit.
A detailed explanation of all types of cookies, their purpose and instructions on how to manage settings is available in the Cookie Policy at: lime-booking.si/piskotki
10. Spremembe te izjave
This statement is regularly reviewed and updated. We will notify you of any material changes at least 30 days before they take effect via an email to your registered address or through an in-app notification. The date of the last update is stated at the bottom of this document. An archive of previous versions is available upon request from privacy@lime-booking.com.
Updated on 21 April 2026
1. Uvodne določbe
Adanta d.o.o., Seliškarjeva ulica 16, 2250 Ptuj, matična številka 8919160000, ID za DDV SI 85728403 (v nadaljevanju: Lime Booking, mi ali nas) je upravljavec vaših osebnih podatkov v vseh primerih, opisanih v tej izjavi.
| Vrsta kontakta | Contact details |
|---|---|
| Splošne zadeve in podpora | app@lime-booking.com |
| Zasebnost in varstvo podatkov | privacy@lime-booking.com |
| Poštni naslov | Vojkova cesta 63, 1000 Ljubljana |
| Website | lime-booking.si |
Na vprašanja v zvezi z obdelavo vaših osebnih podatkov odgovorimo najpozneje v 30 dneh od prejema zahteve. Če je zahteva zapletena ali je zahtev več, lahko ta rok podaljšamo za največ dva meseca, o čemer vas obvestimo.
2. Na koga se nanaša ta izjava
Ta izjava o zasebnosti velja za vas osebno, kadar nastopate v eni od naslednjih vlog:
- ste registriran uporabnik Lime Booking aplikacije (iOS ali Android),
- iščete salone ali naročate termine prek spletne platforme lime-booking.com,
- ste podali privolitev za marketinška sporočila Lime Booking prek booking obrazca na spletni strani salona.
Dve vlogi Lime Booking
Kadar rezervirate termin prek booking obrazca, vgrajenega na spletni strani salona, salon nastopa kot neodvisni upravljavec vaših rezervacijskih podatkov. Lime Booking pri tem deluje kot obdelovalec v imenu salona.
Izjema: kadar na istem obrazcu posebej in prostovoljno soglašate z marketinškimi komunikacijami Lime Booking, postanemo ločeni upravljavec izključno za ta namen. Podrobnosti so v razdelku 12.
3. Katere podatke zbiramo
3.1 Podatki, ki nam jih posredujete neposredno
Ko ustvarite račun ali rezervirate termin, nam posredujete na primer: ime in priimek, elektronski naslov, telefonsko številko ter podatke o izbrani storitvi, ponudniku in terminu. Če nas kontaktirate, obdelamo tudi vsebino vašega sporočila.
3.2 Podatki, ki jih zbiramo samodejno
Ob uporabi platforme samodejno zberemo tehnične podatke, na primer podatke o napravi, IP-naslov, dnevniške podatke in podatke iz piškotkov (glej 12. poglavje).
3.3 Podatki iz drugih virov
Za ugotavljanje, ali ste pri izbranem ponudniku nova ali obstoječa stranka, od ponudnika prejmemo zgolj zgoščene (hash) vrednosti – nikoli pa berljivih osebnih podatkov njegovih strank (glej 5. poglavje).
3.4 Posebne kategorije podatkov
Kadar med rezervacijo ali v posvetovalnem obrazcu salona vnesete zdravstvene informacije, podatke o alergijah, nosečnosti ali drugem zdravstvenem statusu, gre za posebno kategorijo podatkov po členu 9 GDPR. Takšne podatke obdelujemo izključno na podlagi vaše izrecne privolitve, ki jo podate posebej in jo lahko kadarkoli prekličete. Ti podatki so vidni samo salonu, za katerega so namenjeni. Lime Booking teh podatkov nikoli ne uporablja za profiliranje ali marketing.
4. Namen obdelave, pravna podlaga in roki hrambe
Vaše podatke obdelujemo izključno za določene, jasno opredeljene namene. Za vsako obdelavo imamo ustrezno pravno podlago skladno s členom 6 GDPR. Spodaj je za vsak namen navedena pravna podlaga in rok hrambe:
Vodenje uporabniškega računa
Pravna podlaga je pogodba (čl. 6(1)(b)). Podatke hranimo do izbrisa računa in še 30 dni po njem (trajanje pogodbenega razmerja).
Rezervacije in rezervacijska zgodovina
Pravna podlaga je pogodba (čl. 6(1)(b)). Hranimo jih 5 let po zadnji aktivnosti, kar ustreza splošnemu zastaralnemu roku po 346. členu Obligacijskega zakonika.
Računi in finančni zapisi
Pravna podlaga je zakonska obveznost (čl. 6(1)(c)). Hranimo jih 10 let skladno z davčno in računovodsko zakonodajo.
Transakcijska sporočila (potrditve in opomniki)
Pravna podlaga je pogodba (čl. 6(1)(b)). Obdelujemo jih za čas veljavnosti rezervacije, saj so nujna za izvedbo storitve.
Ugotavljanje, ali ste nova ali obstoječa stranka ponudnika (ujemanje)
Pravna podlaga je naš zakoniti interes (čl. 6(1)(f)), za katerega smo opravili dokumentiran test tehtanja. Podatke obdelujemo le za čas izvedbe primerjave.
Priporočila in izboljševanje storitve znotraj platforme
Pravna podlaga je naš zakoniti interes (čl. 6(1)(f)) z dokumentiranim testom tehtanja. Podatke obdelujemo za čas, ko je vaš račun aktiven.
Neposredno trženje in promocijska sporočila
Pravna podlaga je vaša privolitev (čl. 6(1)(a)). Podatke obdelujemo do preklica privolitve.
Prilagojeno oglaševanje in merjenje kampanj (Google, Meta)
Pravna podlaga je vaša privolitev (čl. 6(1)(a)). Podatke obdelujemo do preklica privolitve.
Analitika prek analitičnih piškotkov
Pravna podlaga je vaša privolitev (čl. 6(1)(a)), saj piškotki zahtevajo privolitev po ZEKom-2. Podatke obdelujemo do preklica privolitve.
Customer support
Pravna podlaga je naš zakoniti interes (čl. 6(1)(f)) z dokumentiranim testom tehtanja. Podatke hranimo 3 leta po zaključku zadeve.
Varnost platforme in preprečevanje zlorab
Pravna podlaga je naš zakoniti interes (čl. 6(1)(f)) z dokumentiranim testom tehtanja. Podatke hranimo 12 mesecev.
Anonimizirana statistika
Po anonimizaciji ne gre več za osebne podatke, zato jih ne omejujemo z rokom hrambe.
Posebne kategorije podatkov (na primer zdravstveni podatki), če jih obdelujemo
Pravna podlaga je vaša izrecna privolitev (čl. 9(2)(a)). Podatke obdelujemo do preklica privolitve.
Zakoniti interes
Dokumentirani balancing testi: Za vsak namen na podlagi zakonitega interesa smo pred pričetkom obdelave pripravili pisni balancing test v skladu z metodologijo WP217 (dokumenti BI-01, BI-02, BI-03). Na pisno zahtevo na privacy@lime-booking.com vam posredujemo povzetek posameznega testa.
5. Ujemanje z bazo strank ponudnika
Da ponudnik ve, ali ste pri njem nova stranka, vaše podatke primerjamo z njegovo bazo strank na način, ki varuje vašo zasebnost: ponudnik nam pošlje le zgoščene (hash) vrednosti, mi pa nikoli ne prejmemo berljive baze njegovih strank. To obdelavo izvajamo na podlagi zakonitega interesa; pred njo smo opravili test tehtanja in ugotovili, da naš interes ne prevlada nad vašimi pravicami in interesi.
Pri tej obdelavi Lime Booking in ponudnik nastopata kot skupna upravljavca. Bistvo dogovora med njima (razdelitev nalog in odgovornosti) vam je na voljo na zahtevo. Zoper to obdelavo lahko kadar koli ugovarjate na privacy@lime-booking.com.
6. Komu posredujemo vaše podatke
Vaših osebnih podatkov ne prodajamo. Posredujemo jih le zaupanja vrednim obdelovalcem, ki nam pomagajo pri delovanju platforme in podatke obdelujejo izključno po naših navodilih:
- gostovanje in oblačna infrastruktura — Amazon Web Services;
- pošiljanje SMS in e-pošte — Infobip;
- spletna analitika — PostHog, Google;
- spremljanje napak — Sentry;
- oglaševanje in merjenje kampanj — Google, Meta;
- obdelava plačil (od uvedbe spletnih plačil) — Stripe.
Kadar se podatki prenašajo zunaj Evropskega gospodarskega prostora, poskrbimo za ustrezno raven zaščite s standardnimi pogodbenimi določili Evropske komisije.
7. Your rights
Glede svojih osebnih podatkov imate pravico do dostopa, popravka, izbrisa, omejitve obdelave, prenosljivosti, ugovora in preklica privolitve. Pravice uveljavite na privacy@lime-booking.com.
Pred izpolnitvijo zahteve lahko preverimo vašo identiteto; če vas na podlagi posredovanih podatkov ne moremo zanesljivo identificirati, lahko zahtevamo dodatne podatke. Na zahtevo odgovorimo najpozneje v enem mesecu.
Če menite, da smo kršili varstvo vaših osebnih podatkov, se lahko pritožite Informacijskemu pooblaščencu (Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, ip-rs.si).
8. Avtomatizirano odločanje in profiliranje
O vas ne sprejemamo odločitev, ki bi temeljile izključno na avtomatizirani obdelavi in bi imele pravne ali podobno pomembne učinke. Kadar v to privolite, podatke o vaši uporabi platforme uporabljamo za prilagojeno oglaševanje (glej 11. poglavje).
9. Starostna omejitev uporabe platforme
Platforma je namenjena osebam, starim vsaj 15 let. Mlajša oseba jo lahko uporablja le s privolitvijo oziroma odobritvijo starša ali skrbnika. Če ugotovimo, da podatke mlajše osebe obdelujemo brez ustrezne privolitve, jih brez odlašanja izbrišemo.
10. Varnost in obveščanje o kršitvah
Vaše podatke varujemo z ustreznimi tehničnimi in organizacijskimi ukrepi. Če bi kljub temu prišlo do kršitve varnosti, ki bi verjetno pomenila veliko tveganje za vaše pravice in svoboščine, vas o njej brez nepotrebnega odlašanja obvestimo.
11. Marketinška sporočila in oglaševanje
Neposredno trženje (na primer obveščanje o novostih po elektronski pošti) izvajamo le, kadar v to privolite. Kadar privolite tudi v oglaševanje, podatke o vaši uporabi platforme in identifikatorje piškotkov uporabljamo za prilagojeno oglaševanje in merjenje oglaševalskih kampanj prek platform tretjih oseb (Google, Meta). Za ta namen nastopamo kot samostojni upravljavec.
Privolitev lahko kadar koli prekličete — prek povezave za odjavo v vsakem sporočilu, v upravljalniku piškotkov ali na privacy@lime-booking.com. Preklic ne vpliva na zakonitost obdelave pred preklicem.
12. Piškotki
Za delovanje in izboljševanje platforme uporabljamo piškotke in podobne tehnologije. Za nenujne piškotke pridobimo vašo privolitev. Podrobnosti o vrstah piškotkov, njihovem namenu in upravljanju privolitve so v Politiki piškotkov na lime-booking.com/piskotki.
13. Spremembe te izjave
To izjavo lahko občasno posodobimo. Veljavna različica je vedno objavljena na platformi, datum začetka veljavnosti pa je naveden na dnu dokumenta.
Posodobljeno dne 3. 8. 2026
